{"type":"bundle","id":"bundle--148fc3a5-97e0-53b4-be3f-b9075db9c615","objects":[{"type":"identity","spec_version":"2.1","id":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2020-01-01T00:00:00Z","modified":"2020-01-01T00:00:00Z","name":"PhishDestroy","identity_class":"organization","description":"Independent anti-phishing threat intelligence. https://phishdestroy.io"},{"type":"indicator","spec_version":"2.1","id":"indicator--fa6382d4-8f9e-5751-ac71-34e66bde3fa5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:48Z","modified":"2026-02-26T23:24:48Z","name":"Phishing domain: 0-105.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0-105.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0-105.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:48Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0-105.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1d4d04e-68ae-5947-af0a-c0df1dc374d9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:29Z","modified":"2026-02-26T23:24:29Z","name":"Phishing domain: 0-autht-lo-xfin-ity-w0965.vercel.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0-autht-lo-xfin-ity-w0965.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0-autht-lo-xfin-ity-w0965.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0-autht-lo-xfin-ity-w0965.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fb29619-15e7-5724-a6a3-1e1d77380450","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-23T21:19:27Z","modified":"2026-03-23T21:19:27Z","name":"Phishing domain: 0-collab.land","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating discord. Report & evidence: https://phishdestroy.io/domain/0-collab.land","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0-collab.land']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-23T21:19:27Z","labels":["malicious-activity","phishing","brand:discord"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0-collab.land"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e580ff68-0177-549b-ad15-93b9aa57aa76","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-14T15:15:35Z","modified":"2025-10-14T15:15:35Z","name":"Phishing domain: 0-cz.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0-cz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0-cz.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-14T15:15:35Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0-cz.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--623560c6-04ce-5a1e-886a-eb07ad923f8a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-08T07:40:46Z","modified":"2025-11-08T07:40:46Z","name":"Phishing domain: 0.0.16.standardweb3.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ethereum. Report & evidence: https://phishdestroy.io/domain/0.0.16.standardweb3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0.0.16.standardweb3.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-08T07:40:46Z","labels":["malicious-activity","phishing","brand:ethereum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0.0.16.standardweb3.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--40dc0332-8c1a-5d79-9e2e-f16cdcc63fe2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-31T22:10:59Z","modified":"2026-03-31T22:10:59Z","name":"Phishing domain: 0.1trx.im","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0.1trx.im","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0.1trx.im']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-31T22:10:59Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0.1trx.im"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--308348bf-f566-5173-8cdb-b2d7fef464dc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-01T03:10:03Z","modified":"2026-03-01T03:10:03Z","name":"Phishing domain: 0.232.205.92.host.secureserver.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0.232.205.92.host.secureserver.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0.232.205.92.host.secureserver.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-01T03:10:03Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0.232.205.92.host.secureserver.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a86b1dc-1f3c-539a-aa4f-c4c6c452385c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-09T12:27:41Z","modified":"2025-11-09T12:27:41Z","name":"Phishing domain: 0.feixue316p.cloudns.biz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating China Central Television. Report & evidence: https://phishdestroy.io/domain/0.feixue316p.cloudns.biz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0.feixue316p.cloudns.biz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-09T12:27:41Z","labels":["malicious-activity","phishing","brand:china central television"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0.feixue316p.cloudns.biz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3f0f642-2b63-50af-8ea1-4c13794b9993","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-09T12:27:43Z","modified":"2025-11-09T12:27:43Z","name":"Phishing domain: 0.feixue317p.cloudns.biz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0.feixue317p.cloudns.biz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0.feixue317p.cloudns.biz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-09T12:27:43Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0.feixue317p.cloudns.biz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ab78e3a-f908-51f0-9452-f1e13bf0f12f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-09T12:27:37Z","modified":"2025-11-09T12:27:37Z","name":"Phishing domain: 0.feixue318p.cloudns.biz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0.feixue318p.cloudns.biz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0.feixue318p.cloudns.biz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-09T12:27:37Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0.feixue318p.cloudns.biz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca74db79-cacb-5fea-9684-a2795c7f1eb8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-09T12:27:54Z","modified":"2025-11-09T12:27:54Z","name":"Phishing domain: 0.fres-news.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0.fres-news.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0.fres-news.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-09T12:27:54Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0.fres-news.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae50cb61-aff3-56e3-aa28-cc4472156b15","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-14T01:27:50Z","modified":"2025-12-14T01:27:50Z","name":"Phishing domain: 00.ai","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating argent. Report & evidence: https://phishdestroy.io/domain/00.ai","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '00.ai']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-14T01:27:50Z","labels":["malicious-activity","phishing","brand:argent"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/00.ai"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0a8dae7-09bd-573d-b288-c59d6ae0fc20","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-04T17:17:26Z","modified":"2026-02-04T17:17:26Z","name":"Phishing domain: 0000-wispy-dust-1495.fly.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0000-wispy-dust-1495.fly.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0000-wispy-dust-1495.fly.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-04T17:17:26Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0000-wispy-dust-1495.fly.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6415c062-272f-5ee8-a8d6-508e78deccb8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:17Z","modified":"2026-07-27T06:02:17Z","name":"Phishing domain: 0000.vc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0000.vc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0000.vc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0000.vc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e0a19e3-62f5-5ae4-b491-61dcc3e0989a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-15T11:15:16Z","modified":"2025-10-15T11:15:16Z","name":"Phishing domain: 00000000000000000000000.fielty.mx","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/00000000000000000000000.fielty.mx","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '00000000000000000000000.fielty.mx']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-15T11:15:16Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/00000000000000000000000.fielty.mx"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e084df7-62f1-55eb-9857-71d2a0eeb068","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:06Z","modified":"2026-02-26T23:21:06Z","name":"Phishing domain: 00000000000000000000000.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/00000000000000000000000.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '00000000000000000000000.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:06Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/00000000000000000000000.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f236fdb-0ca3-51dd-a427-152fe307b23b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-15T11:15:50Z","modified":"2025-10-15T11:15:50Z","name":"Phishing domain: 0000000000000000000000000.findyourjacket.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0000000000000000000000000.findyourjacket.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0000000000000000000000000.findyourjacket.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-15T11:15:50Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0000000000000000000000000.findyourjacket.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef7d52ad-edb2-54ec-91ae-15c989e71b80","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-23T12:28:34Z","modified":"2025-12-23T12:28:34Z","name":"Phishing domain: 000000000000000001919000000000000000000000000000000.weebly.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/000000000000000001919000000000000000000000000000000.weebly.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '000000000000000001919000000000000000000000000000000.weebly.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-23T12:28:34Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/000000000000000001919000000000000000000000000000000.weebly.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9886b0d-84a7-542b-87a0-fb887f1980ec","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-15T11:15:48Z","modified":"2025-10-15T11:15:48Z","name":"Phishing domain: 00000000000000000update.emy.ba","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/00000000000000000update.emy.ba","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '00000000000000000update.emy.ba']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-15T11:15:48Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/00000000000000000update.emy.ba"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2d4fbda-f246-5a70-aeb8-e06fef6693b7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-15T11:15:55Z","modified":"2025-10-15T11:15:55Z","name":"Phishing domain: 000000011.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/000000011.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '000000011.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-15T11:15:55Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/000000011.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--402721b8-8c6a-5196-b160-32404f7d1f39","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-19T03:08:38Z","modified":"2026-02-19T03:08:38Z","name":"Phishing domain: 0000066.framer.ai","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Xfinity. Report & evidence: https://phishdestroy.io/domain/0000066.framer.ai","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0000066.framer.ai']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-19T03:08:38Z","labels":["malicious-activity","phishing","brand:xfinity"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0000066.framer.ai"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef0e28d7-0905-5b9f-b03d-e6206c1f30e9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-09T12:27:58Z","modified":"2025-11-09T12:27:58Z","name":"Phishing domain: 00003.godaddysites.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Orange. Report & evidence: https://phishdestroy.io/domain/00003.godaddysites.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '00003.godaddysites.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-09T12:27:58Z","labels":["malicious-activity","phishing","brand:orange"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/00003.godaddysites.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--da911037-b2fa-5e7f-8377-5ff087373a04","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-09T12:28:12Z","modified":"2025-11-09T12:28:12Z","name":"Phishing domain: 0000h00003.byethost7.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/0000h00003.byethost7.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0000h00003.byethost7.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-09T12:28:12Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0000h00003.byethost7.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--38237885-cbfb-5d88-b69b-4bd640346a92","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-09T12:28:09Z","modified":"2025-11-09T12:28:09Z","name":"Phishing domain: 000111.pages.net.br","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/000111.pages.net.br","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '000111.pages.net.br']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-09T12:28:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/000111.pages.net.br"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bb07bf3-016d-580e-9e79-ee94d7fddc67","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-12T11:13:34Z","modified":"2026-06-12T11:13:34Z","name":"Phishing domain: 00057365.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/00057365.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '00057365.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-12T11:13:34Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/00057365.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3db7c567-d8af-5041-8d9f-d65bf4ff4e92","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-09T12:28:08Z","modified":"2025-11-09T12:28:08Z","name":"Phishing domain: 0006.uk","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0006.uk","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0006.uk']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-09T12:28:08Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0006.uk"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca152b9a-fb12-5801-baf9-d127f7643fcb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-09T12:28:19Z","modified":"2025-11-09T12:28:19Z","name":"Phishing domain: 000811893962007154932393170597959432.hanefra7bikiemta.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating outlook. Report & evidence: https://phishdestroy.io/domain/000811893962007154932393170597959432.hanefra7bikiemta.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '000811893962007154932393170597959432.hanefra7bikiemta.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-09T12:28:19Z","labels":["malicious-activity","phishing","brand:outlook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/000811893962007154932393170597959432.hanefra7bikiemta.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--efe5c003-1e82-584e-9786-872acb6dd485","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-23T12:30:41Z","modified":"2025-12-23T12:30:41Z","name":"Phishing domain: 0009xx.weebly.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Yahoo. Report & evidence: https://phishdestroy.io/domain/0009xx.weebly.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0009xx.weebly.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-23T12:30:41Z","labels":["malicious-activity","phishing","brand:yahoo"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0009xx.weebly.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ac6fafa-3f57-563b-94bc-56cca960031d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-09T12:28:32Z","modified":"2025-11-09T12:28:32Z","name":"Phishing domain: 000xxxbodddxx00.webcindario.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/000xxxbodddxx00.webcindario.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '000xxxbodddxx00.webcindario.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-09T12:28:32Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/000xxxbodddxx00.webcindario.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c45ef31-e052-5995-b439-bf1182495c61","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T13:47:00Z","modified":"2026-02-13T13:47:00Z","name":"Phishing domain: 001-test-010.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/001-test-010.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '001-test-010.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T13:47:00Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/001-test-010.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d331ff31-42f7-5c89-a296-4d0c6c19d0c6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-03T14:23:07Z","modified":"2026-07-03T14:23:07Z","name":"Phishing domain: 0010-8y95-a36x.11alia-tiffincrane-com-s-account.workers.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/0010-8y95-a36x.11alia-tiffincrane-com-s-account.workers.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0010-8y95-a36x.11alia-tiffincrane-com-s-account.workers.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-03T14:23:07Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0010-8y95-a36x.11alia-tiffincrane-com-s-account.workers.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6588439-aa1d-50f2-9c48-b2fc6d20307c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-09T12:28:55Z","modified":"2025-11-09T12:28:55Z","name":"Phishing domain: 001107018.studentserver.com.au","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/001107018.studentserver.com.au","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '001107018.studentserver.com.au']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-09T12:28:55Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/001107018.studentserver.com.au"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b50ad5f5-fce7-5d73-8a76-a44623882619","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:04Z","modified":"2026-02-26T23:24:04Z","name":"Phishing domain: 001122102120.duckdns.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/001122102120.duckdns.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '001122102120.duckdns.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:04Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/001122102120.duckdns.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2e8bab5-4331-5e02-aaaf-fe3db36dd770","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-09T12:28:34Z","modified":"2025-11-09T12:28:34Z","name":"Phishing domain: 00155.cn","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/00155.cn","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '00155.cn']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-09T12:28:34Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/00155.cn"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--626a3979-841d-5cc6-96e4-d1a47a737d93","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:40Z","modified":"2026-02-26T23:24:40Z","name":"Phishing domain: 001892.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/001892.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '001892.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:40Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/001892.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--efda98c4-873a-5a9c-8473-8718c4573a27","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-28T23:12:07Z","modified":"2025-10-28T23:12:07Z","name":"Phishing domain: 001k-exchange.club","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating binance. Report & evidence: https://phishdestroy.io/domain/001k-exchange.club","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '001k-exchange.club']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-28T23:12:07Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/001k-exchange.club"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--510829ed-64cc-56bd-9ec7-4a02c056217f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-08T18:55:22Z","modified":"2025-11-08T18:55:22Z","name":"Phishing domain: 001k-exchangee.pro","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/001k-exchangee.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '001k-exchangee.pro']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-08T18:55:22Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/001k-exchangee.pro"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--272a8575-5ae7-5ae1-8219-146f16835d48","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-09T12:28:48Z","modified":"2025-11-09T12:28:48Z","name":"Phishing domain: 001kp.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/001kp.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '001kp.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-09T12:28:48Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/001kp.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--88184da5-6120-5726-8819-ff15a3afc845","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T17:36:02Z","modified":"2026-02-26T17:36:02Z","name":"Phishing domain: 001mobilephone.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/001mobilephone.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '001mobilephone.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T17:36:02Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/001mobilephone.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--81a2b004-a60c-594b-b7ee-d1cac2c2296a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-09T12:28:56Z","modified":"2025-11-09T12:28:56Z","name":"Phishing domain: 001user.moonfruit.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating amazon. Report & evidence: https://phishdestroy.io/domain/001user.moonfruit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '001user.moonfruit.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-09T12:28:56Z","labels":["malicious-activity","phishing","brand:amazon"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/001user.moonfruit.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--368ef1de-fcc5-5815-89af-7bc44caf967e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-30T19:31:35Z","modified":"2026-06-30T19:31:35Z","name":"Phishing domain: 001wintop.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/001wintop.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '001wintop.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-30T19:31:35Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/001wintop.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eec4fe2a-8a32-5fc4-9ea5-f0f3b723437e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-09T12:29:00Z","modified":"2025-11-09T12:29:00Z","name":"Phishing domain: 002.195533.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating monad. Report & evidence: https://phishdestroy.io/domain/002.195533.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '002.195533.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-09T12:29:00Z","labels":["malicious-activity","phishing","brand:monad"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/002.195533.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1dc19f95-421f-5ade-b5c3-b16d68b7740a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T15:52:33Z","modified":"2026-08-09T15:52:33Z","name":"Phishing domain: 00281.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/00281.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '00281.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T15:52:33Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/00281.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b87240d-09aa-5037-917f-a82be0f64d93","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-22T16:58:27Z","modified":"2026-02-22T16:58:27Z","name":"Phishing domain: 003-bca.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Apple. Report & evidence: https://phishdestroy.io/domain/003-bca.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '003-bca.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-22T16:58:27Z","labels":["malicious-activity","phishing","brand:apple"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/003-bca.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e90a8b4-7811-54ec-95ea-ceaeff1d1379","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-17T01:21:39Z","modified":"2025-10-17T01:21:39Z","name":"Phishing domain: 0033.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/0033.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0033.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-17T01:21:39Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0033.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2af4b4ed-c1ca-51d4-a9bb-be68ed244acd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:18Z","modified":"2026-02-26T23:21:18Z","name":"Phishing domain: 004.settrade-services.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/004.settrade-services.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '004.settrade-services.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:18Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/004.settrade-services.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0ddf48b-0682-5eb9-bb36-e44657181ed7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-18T13:54:18Z","modified":"2026-03-18T13:54:18Z","name":"Phishing domain: 0041c765.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/0041c765.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0041c765.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-18T13:54:18Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0041c765.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--97765437-e6fc-55a0-86d2-700ef020c784","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-09T12:29:30Z","modified":"2025-11-09T12:29:30Z","name":"Phishing domain: 004605.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/004605.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '004605.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-09T12:29:30Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/004605.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--35009b52-d8f6-56ba-92be-786896048596","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T07:02:12Z","modified":"2026-07-27T07:02:12Z","name":"Phishing domain: 00474.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/00474.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '00474.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T07:02:12Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/00474.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--be53c070-276a-568f-a21e-048189bebd98","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-09T12:29:23Z","modified":"2025-11-09T12:29:23Z","name":"Phishing domain: 004ca7f.netsolhost.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/004ca7f.netsolhost.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '004ca7f.netsolhost.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-09T12:29:23Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/004ca7f.netsolhost.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--782c89f5-4ae7-5b8e-b0e6-6967b4e3bec6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-11T18:23:40Z","modified":"2026-08-11T18:23:40Z","name":"Phishing domain: 004e3a.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/004e3a.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '004e3a.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-11T18:23:40Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/004e3a.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d91cf57-1691-59e3-b127-0637a5c1f29e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-09T12:29:18Z","modified":"2025-11-09T12:29:18Z","name":"Phishing domain: 005350049846275.nikkgpkvzv.957733539760618.avpcwvidxgiu.williamhnelson.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/005350049846275.nikkgpkvzv.957733539760618.avpcwvidxgiu.williamhnelson.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '005350049846275.nikkgpkvzv.957733539760618.avpcwvidxgiu.williamhnelson.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-09T12:29:18Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/005350049846275.nikkgpkvzv.957733539760618.avpcwvidxgiu.williamhnelson.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--10f177a7-964f-519c-aefb-0819af526220","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-09T12:29:20Z","modified":"2025-11-09T12:29:20Z","name":"Phishing domain: 006.zzz.com.ua","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/006.zzz.com.ua","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '006.zzz.com.ua']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-09T12:29:20Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/006.zzz.com.ua"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--60b49a83-3672-58d2-8079-8dc36c8a1d61","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-09T12:29:23Z","modified":"2025-11-09T12:29:23Z","name":"Phishing domain: 006l5.mjt.lu","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/006l5.mjt.lu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '006l5.mjt.lu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-09T12:29:23Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/006l5.mjt.lu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--efbeed5b-51c3-5c70-b937-62633ec36c4e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-09T12:30:44Z","modified":"2025-11-09T12:30:44Z","name":"Phishing domain: 0076678.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/0076678.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0076678.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-09T12:30:44Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0076678.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--41a5dec6-ebc4-5773-a7de-3e19eb402111","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-09T12:29:54Z","modified":"2025-11-09T12:29:54Z","name":"Phishing domain: 007k7.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/007k7.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '007k7.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-09T12:29:54Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/007k7.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3399390-3c5f-5df1-b304-202735cbb0c8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:29Z","modified":"2026-02-26T23:19:29Z","name":"Phishing domain: 007sbw.cn","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/007sbw.cn","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '007sbw.cn']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/007sbw.cn"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e08ed6d7-304a-521b-9f42-f1a3c80da7a8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:15Z","modified":"2026-02-26T23:20:15Z","name":"Phishing domain: 007xueche.cn","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coingecko. Report & evidence: https://phishdestroy.io/domain/007xueche.cn","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '007xueche.cn']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:15Z","labels":["malicious-activity","phishing","brand:coingecko"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/007xueche.cn"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d10edd8a-4596-5993-a3f0-9fa66c77818e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:26Z","modified":"2026-02-26T23:20:26Z","name":"Phishing domain: 00800.vip","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/00800.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '00800.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:26Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/00800.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--84208909-a8d7-5bd8-8f82-a3b1cd81bf10","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:33Z","modified":"2026-02-26T23:24:33Z","name":"Phishing domain: 00808.vip","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/00808.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '00808.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:33Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/00808.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--495261d2-f26b-5c12-b22f-3b0a8ac45c78","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-09T12:29:51Z","modified":"2025-11-09T12:29:51Z","name":"Phishing domain: 008491133.cloudns.nz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/008491133.cloudns.nz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '008491133.cloudns.nz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-09T12:29:51Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/008491133.cloudns.nz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--38d64a1b-0074-5fde-a951-97b02387825c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:22Z","modified":"2026-02-26T23:21:22Z","name":"Phishing domain: 008896-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/008896-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '008896-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:22Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/008896-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--27640d43-d998-5e1e-987d-b6069434f996","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-03T15:30:15Z","modified":"2026-03-03T15:30:15Z","name":"Phishing domain: 008963466.weebly.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/008963466.weebly.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '008963466.weebly.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-03T15:30:15Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/008963466.weebly.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0dcc0c5-a19d-598b-9dc7-234908691f52","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-09T12:30:30Z","modified":"2025-11-09T12:30:30Z","name":"Phishing domain: 008kp.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/008kp.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '008kp.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-09T12:30:30Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/008kp.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--73429683-02b3-5104-b93c-9e90ec551eb5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T01:38:12Z","modified":"2026-02-13T01:38:12Z","name":"Phishing domain: 008ogwe.icu","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/008ogwe.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '008ogwe.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T01:38:12Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/008ogwe.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ea856e9-d761-58ec-9693-1f036c7fe572","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-14T11:51:52Z","modified":"2026-07-14T11:51:52Z","name":"Phishing domain: 009090334mn.vercel.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/009090334mn.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '009090334mn.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-14T11:51:52Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/009090334mn.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--be18339b-854f-5308-beb4-386c05c6cf30","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-30T11:02:58Z","modified":"2025-10-30T11:02:58Z","name":"Phishing domain: 0099xxy78.weebly.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0099xxy78.weebly.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0099xxy78.weebly.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-30T11:02:58Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0099xxy78.weebly.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--00df8cac-9fed-5ba1-9a68-dad79ab72873","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-09T12:30:18Z","modified":"2025-11-09T12:30:18Z","name":"Phishing domain: 00d94bf3262617342.tempsite.link","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating wordpress. Report & evidence: https://phishdestroy.io/domain/00d94bf3262617342.tempsite.link","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '00d94bf3262617342.tempsite.link']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-09T12:30:18Z","labels":["malicious-activity","phishing","brand:wordpress"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/00d94bf3262617342.tempsite.link"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7ffe574-a6f7-5d50-975f-4acd633731c1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-27T16:56:04Z","modified":"2026-02-27T16:56:04Z","name":"Phishing domain: 00loo0j.weebly.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/00loo0j.weebly.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '00loo0j.weebly.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-27T16:56:04Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/00loo0j.weebly.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b9b0ce9-f84e-5553-a94b-d0aebeab593d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:16Z","modified":"2026-02-26T23:24:16Z","name":"Phishing domain: 00m-i-cloud.mipaginaweb.us","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Apple. Report & evidence: https://phishdestroy.io/domain/00m-i-cloud.mipaginaweb.us","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '00m-i-cloud.mipaginaweb.us']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:16Z","labels":["malicious-activity","phishing","brand:apple"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/00m-i-cloud.mipaginaweb.us"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--007ea38f-aaf6-5919-bf70-3a481ac12414","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-28T15:27:14Z","modified":"2026-06-28T15:27:14Z","name":"Phishing domain: 01-collab.land","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/01-collab.land","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '01-collab.land']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-28T15:27:14Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/01-collab.land"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e6ab7d3-a499-53f2-afaa-e5c49d24eb6c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-22T11:04:06Z","modified":"2025-10-22T11:04:06Z","name":"Phishing domain: 01-pontosagora.dynv6.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/01-pontosagora.dynv6.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '01-pontosagora.dynv6.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-22T11:04:06Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/01-pontosagora.dynv6.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5775df0-b10a-5cce-bcbf-ac32df8930a2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-09T12:30:25Z","modified":"2025-11-09T12:30:25Z","name":"Phishing domain: 01.pilot45.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating imtoken. Report & evidence: https://phishdestroy.io/domain/01.pilot45.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '01.pilot45.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-09T12:30:25Z","labels":["malicious-activity","phishing","brand:imtoken"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/01.pilot45.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c65b074-f40b-5996-a043-ae2eb2d75649","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-18T20:42:24Z","modified":"2026-03-18T20:42:24Z","name":"Phishing domain: 01001000.world","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/01001000.world","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '01001000.world']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-18T20:42:24Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/01001000.world"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdabda58-4297-5336-b32f-12e683f41471","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-09T23:07:02Z","modified":"2025-11-09T23:07:02Z","name":"Phishing domain: 0101.systems","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0101.systems","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0101.systems']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-09T23:07:02Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0101.systems"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ca60a3b-c795-5973-be3d-c12fb576693f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-09T12:30:43Z","modified":"2025-11-09T12:30:43Z","name":"Phishing domain: 0103659.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/0103659.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0103659.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-09T12:30:43Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0103659.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e81c4c2-a5de-5ee4-8756-420469010527","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:30Z","modified":"2026-02-26T23:19:30Z","name":"Phishing domain: 010365vip.vip","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/010365vip.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '010365vip.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:30Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/010365vip.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--75c65bad-285f-551f-88f5-21c696c29c4f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:39Z","modified":"2026-02-26T23:19:39Z","name":"Phishing domain: 010aa.cn","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/010aa.cn","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '010aa.cn']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:39Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/010aa.cn"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--25575a2e-05ca-50f4-ba8e-8629b08aa2f8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-04T01:04:35Z","modified":"2026-03-04T01:04:35Z","name":"Phishing domain: 010wanbo.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/010wanbo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '010wanbo.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-04T01:04:35Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/010wanbo.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b1cf2cf-b430-5f01-91d3-67136df6f29b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-30T20:04:29Z","modified":"2026-06-30T20:04:29Z","name":"Phishing domain: 0110live.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0110live.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0110live.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-30T20:04:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0110live.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a19efc3-678d-5b08-9a40-4bda8ce63c53","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-13T15:01:00Z","modified":"2026-06-13T15:01:00Z","name":"Phishing domain: 01122200.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/01122200.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '01122200.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-13T15:01:00Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/01122200.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a55ce94-40e2-59f3-9b98-d29ff5b58655","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-13T02:29:15Z","modified":"2026-07-13T02:29:15Z","name":"Phishing domain: 01163203.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/01163203.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '01163203.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-13T02:29:15Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/01163203.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b5d72c6-5968-541e-88fc-cd9d9826798c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-09T12:31:32Z","modified":"2025-11-09T12:31:32Z","name":"Phishing domain: 0123656.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0123656.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0123656.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-09T12:31:32Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0123656.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--03ec90db-a53f-5a3f-a741-04e878c9c466","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:53Z","modified":"2026-02-26T23:20:53Z","name":"Phishing domain: 012678.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/012678.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '012678.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:53Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/012678.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdec3aca-6458-523b-a988-b94521538ad6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-15T11:20:52Z","modified":"2025-11-15T11:20:52Z","name":"Phishing domain: 01281coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/01281coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '01281coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-15T11:20:52Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/01281coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc5ec154-37c7-5c74-af8f-604fcbf34cb1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-27T17:03:12Z","modified":"2025-11-27T17:03:12Z","name":"Phishing domain: 0140.ee","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/0140.ee","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0140.ee']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-27T17:03:12Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0140.ee"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--20a6f08e-18be-58ba-b6c8-a77566b4b67a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:43Z","modified":"2026-02-26T23:21:43Z","name":"Phishing domain: 0145-53l.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating techsupportscam. Report & evidence: https://phishdestroy.io/domain/0145-53l.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0145-53l.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:43Z","labels":["malicious-activity","phishing","brand:techsupportscam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0145-53l.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2957052f-d95b-59be-971a-5813ef604520","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-09T12:31:32Z","modified":"2025-11-09T12:31:32Z","name":"Phishing domain: 014oo.blogspot.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/014oo.blogspot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '014oo.blogspot.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-09T12:31:32Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/014oo.blogspot.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d0a97f1-06b2-533c-b4e0-bccaf5443dbb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-09T12:31:17Z","modified":"2025-11-09T12:31:17Z","name":"Phishing domain: 018f3b18cc2962586.temporary.link","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/018f3b18cc2962586.temporary.link","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '018f3b18cc2962586.temporary.link']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-09T12:31:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/018f3b18cc2962586.temporary.link"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a531520-09dc-5aca-b2d6-dee3ffffa891","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-09T12:31:32Z","modified":"2025-11-09T12:31:32Z","name":"Phishing domain: 018uh.mjt.lu","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/018uh.mjt.lu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '018uh.mjt.lu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-09T12:31:32Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/018uh.mjt.lu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cee2711e-16f2-5e84-a049-0bf87a897109","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-10T10:44:47Z","modified":"2026-07-10T10:44:47Z","name":"Phishing domain: 019252-microsoft.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Microsoft. Report & evidence: https://phishdestroy.io/domain/019252-microsoft.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '019252-microsoft.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-10T10:44:47Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/019252-microsoft.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--215274d6-2193-5ff3-8dd0-1f8f0258ebb6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-08T02:08:02Z","modified":"2025-08-08T02:08:02Z","name":"Phishing domain: 01929182891.skillsoutfit.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Microsoft. Report & evidence: https://phishdestroy.io/domain/01929182891.skillsoutfit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '01929182891.skillsoutfit.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-08T02:08:02Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/01929182891.skillsoutfit.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--34c389b7-6782-5b49-99bd-9648640bed8d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-09T12:31:31Z","modified":"2025-11-09T12:31:31Z","name":"Phishing domain: 01967.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/01967.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '01967.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-09T12:31:31Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/01967.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bf01a4c-9013-5090-9def-ac984c6c9108","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-09T12:31:39Z","modified":"2025-11-09T12:31:39Z","name":"Phishing domain: 01activar-pin-protegercuenta.atsnx.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating x.com. Report & evidence: https://phishdestroy.io/domain/01activar-pin-protegercuenta.atsnx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '01activar-pin-protegercuenta.atsnx.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-09T12:31:39Z","labels":["malicious-activity","phishing","brand:x.com"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/01activar-pin-protegercuenta.atsnx.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c8665ab-96c6-5974-8ca5-9706863f6ecc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-09T12:31:56Z","modified":"2025-11-09T12:31:56Z","name":"Phishing domain: 01db3205053754908.temporary.link","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/01db3205053754908.temporary.link","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '01db3205053754908.temporary.link']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-09T12:31:56Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/01db3205053754908.temporary.link"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3af11773-3cab-5a49-ac07-45f0b4e72b8e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-09T12:32:01Z","modified":"2025-11-09T12:32:01Z","name":"Phishing domain: 01e913e6-93dc-43b6-b2a3-cee1b5dc0ea4.selstorage.ru","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/01e913e6-93dc-43b6-b2a3-cee1b5dc0ea4.selstorage.ru","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '01e913e6-93dc-43b6-b2a3-cee1b5dc0ea4.selstorage.ru']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-09T12:32:01Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/01e913e6-93dc-43b6-b2a3-cee1b5dc0ea4.selstorage.ru"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4251a55-a1d4-5dca-9568-2e64b8712c3a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-27T02:10:36Z","modified":"2026-06-27T02:10:36Z","name":"Phishing domain: 01sw-bdg8-oxmc.alina-ciorba-duncantoplis-co-uk-s-account.workers.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/01sw-bdg8-oxmc.alina-ciorba-duncantoplis-co-uk-s-account.workers.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '01sw-bdg8-oxmc.alina-ciorba-duncantoplis-co-uk-s-account.workers.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-27T02:10:36Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/01sw-bdg8-oxmc.alina-ciorba-duncantoplis-co-uk-s-account.workers.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7858cddb-3e53-577f-9a69-193aa443488c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-09T12:31:55Z","modified":"2025-11-09T12:31:55Z","name":"Phishing domain: 01up4zpe8us.co","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/01up4zpe8us.co","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '01up4zpe8us.co']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-09T12:31:55Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/01up4zpe8us.co"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e92b198-5a7c-52b7-90d2-a5f65760fab4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-09T12:31:57Z","modified":"2025-11-09T12:31:57Z","name":"Phishing domain: 01vhl.mjt.lu","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/01vhl.mjt.lu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '01vhl.mjt.lu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-09T12:31:57Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/01vhl.mjt.lu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--63ca74d7-0484-5a7c-b49e-f0d75ed3d8cf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-09T12:32:01Z","modified":"2025-11-09T12:32:01Z","name":"Phishing domain: 02-billing.link","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/02-billing.link","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '02-billing.link']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-09T12:32:01Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/02-billing.link"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c831c325-fb42-5f16-a79e-c7ca94df7dcd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-10T15:19:23Z","modified":"2026-06-10T15:19:23Z","name":"Phishing domain: 02-slot-ez.web.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/02-slot-ez.web.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '02-slot-ez.web.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-10T15:19:23Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/02-slot-ez.web.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe80ef06-fa6f-59c8-a1b6-9e2ef35c8d0b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-09T12:32:28Z","modified":"2025-11-09T12:32:28Z","name":"Phishing domain: 0202.com.tw","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0202.com.tw","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0202.com.tw']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-09T12:32:28Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0202.com.tw"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f2bcbbd-1f23-57da-b48f-3d4ab0c38505","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-09T12:32:19Z","modified":"2025-11-09T12:32:19Z","name":"Phishing domain: 0203659.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/0203659.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0203659.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-09T12:32:19Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0203659.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7ad19ac-dd48-5150-b677-10cc70fd6cdf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:09Z","modified":"2026-02-26T23:21:09Z","name":"Phishing domain: 0205.vip","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/0205.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0205.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:09Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0205.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c8450e1-fd07-5e71-a45f-faa14ab6b81b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-09T12:32:24Z","modified":"2025-11-09T12:32:24Z","name":"Phishing domain: 020k365.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/020k365.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '020k365.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-09T12:32:24Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/020k365.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9af9d475-b046-5e50-9d9e-5d6fba6a96a9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-04T01:05:42Z","modified":"2026-03-04T01:05:42Z","name":"Phishing domain: 0212htxpj.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating HTX. Report & evidence: https://phishdestroy.io/domain/0212htxpj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0212htxpj.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-04T01:05:42Z","labels":["malicious-activity","phishing","brand:htx"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0212htxpj.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3de9e92a-d10b-5559-bb74-9e65ec5780d4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-09T12:32:28Z","modified":"2025-11-09T12:32:28Z","name":"Phishing domain: 0215412pageaccountserve23-confirm.start.page","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating youtube. Report & evidence: https://phishdestroy.io/domain/0215412pageaccountserve23-confirm.start.page","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0215412pageaccountserve23-confirm.start.page']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-09T12:32:28Z","labels":["malicious-activity","phishing","brand:youtube"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0215412pageaccountserve23-confirm.start.page"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--49a4e028-4597-586a-9a67-755e20893c79","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-04T08:39:13Z","modified":"2025-11-04T08:39:13Z","name":"Phishing domain: 0215zyxwvutsrqponmlkj-3.am.coinbase.cm","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/0215zyxwvutsrqponmlkj-3.am.coinbase.cm","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0215zyxwvutsrqponmlkj-3.am.coinbase.cm']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-04T08:39:13Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0215zyxwvutsrqponmlkj-3.am.coinbase.cm"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--50a4b676-9e15-501e-bcee-a23c079c2f03","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-04T01:07:27Z","modified":"2026-03-04T01:07:27Z","name":"Phishing domain: 021wanbo.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/021wanbo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '021wanbo.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-04T01:07:27Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/021wanbo.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a06df726-bdbb-5bd7-9f7a-48e186ae88c3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-09T12:32:41Z","modified":"2025-11-09T12:32:41Z","name":"Phishing domain: 02213.pages.net.br","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/02213.pages.net.br","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '02213.pages.net.br']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-09T12:32:41Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/02213.pages.net.br"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--14464bac-44d7-5944-828c-cd0783690228","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-04T00:34:06Z","modified":"2026-03-04T00:34:06Z","name":"Phishing domain: 022xin888.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/022xin888.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '022xin888.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-04T00:34:06Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/022xin888.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e661e81c-046d-5e36-ba1c-5eb8cf3bbf33","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-27T17:02:12Z","modified":"2025-11-27T17:02:12Z","name":"Phishing domain: 025662nhhh.hyperphp.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/025662nhhh.hyperphp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '025662nhhh.hyperphp.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-27T17:02:12Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/025662nhhh.hyperphp.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a67a559-b25b-5af9-869c-9637502ea6c7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:33Z","modified":"2026-02-26T23:19:33Z","name":"Phishing domain: 028365vip.vip","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/028365vip.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '028365vip.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:33Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/028365vip.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa2ca559-7bd6-5160-b1e5-39a24a76978d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-04T01:08:42Z","modified":"2026-03-04T01:08:42Z","name":"Phishing domain: 028pj8.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/028pj8.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '028pj8.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-04T01:08:42Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/028pj8.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--053c364c-3c8e-5fe8-b118-37743b6c3e0c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:50Z","modified":"2026-02-26T23:20:50Z","name":"Phishing domain: 029365vip.vip","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/029365vip.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '029365vip.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:50Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/029365vip.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd8cc3cb-49ff-59f6-a55a-2d9dbffe3391","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-06T19:11:19Z","modified":"2026-02-06T19:11:19Z","name":"Phishing domain: 02euweb.us","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/02euweb.us","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '02euweb.us']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-06T19:11:19Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/02euweb.us"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6a610c8-a40e-56b6-a2c7-85e99a3752db","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-13T20:06:21Z","modified":"2026-08-13T20:06:21Z","name":"Phishing domain: 02live.online","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/02live.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '02live.online']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-13T20:06:21Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/02live.online"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e362b33b-9001-5a49-9ebf-d1bfcc0f3eec","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-04T17:10:35Z","modified":"2026-02-04T17:10:35Z","name":"Phishing domain: 02web-zoom.us","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Facebook. Report & evidence: https://phishdestroy.io/domain/02web-zoom.us","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '02web-zoom.us']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-04T17:10:35Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/02web-zoom.us"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--03a2e1e8-fd86-5337-bae3-9dc22666a543","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-10T15:17:24Z","modified":"2026-06-10T15:17:24Z","name":"Phishing domain: 03-baccarat.web.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/03-baccarat.web.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '03-baccarat.web.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-10T15:17:24Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/03-baccarat.web.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e11d23d-0353-5ea2-9ec2-f5581eadcece","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-30T13:55:42Z","modified":"2026-07-30T13:55:42Z","name":"Phishing domain: 03191190026.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating [\"amazon\"]. Report & evidence: https://phishdestroy.io/domain/03191190026.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '03191190026.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-30T13:55:42Z","labels":["malicious-activity","phishing","brand:[\"amazon\"]"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/03191190026.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f22af55-8af1-5915-8dd4-615a64433a88","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-08T14:05:23Z","modified":"2026-07-08T14:05:23Z","name":"Phishing domain: 03205.vip","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/03205.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '03205.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-08T14:05:23Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/03205.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2f4da2c-65a0-529d-b1f6-ff9f1996be74","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-27T02:15:07Z","modified":"2026-06-27T02:15:07Z","name":"Phishing domain: 03365pay.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/03365pay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '03365pay.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-27T02:15:07Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/03365pay.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--00e6ecfc-6c00-5081-bb84-515bf733a7c4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-20T10:05:38Z","modified":"2025-12-20T10:05:38Z","name":"Phishing domain: 0365ff.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/0365ff.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0365ff.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-20T10:05:38Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0365ff.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f71146c-7641-5ad9-af32-9a90f00b6f1c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-20T06:47:51Z","modified":"2025-12-20T06:47:51Z","name":"Phishing domain: 0365uu.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/0365uu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0365uu.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-20T06:47:51Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0365uu.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e7bd228-f117-59be-9e33-ee3e2feb56aa","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:53Z","modified":"2026-02-26T23:23:53Z","name":"Phishing domain: 0371365vip.vip","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/0371365vip.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0371365vip.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:53Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0371365vip.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0afdadb3-e255-547f-9376-6cd99167ac90","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-03T12:14:47Z","modified":"2026-01-03T12:14:47Z","name":"Phishing domain: 03arvest-online.fun","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/03arvest-online.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '03arvest-online.fun']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-03T12:14:47Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/03arvest-online.fun"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--12fabc96-1166-513f-9df6-8d893be60f07","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-05T12:21:21Z","modified":"2026-01-05T12:21:21Z","name":"Phishing domain: 03b5157.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/03b5157.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '03b5157.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-05T12:21:21Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/03b5157.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dd117d1-708c-5fdc-9707-a4252c3fa438","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-31T16:42:47Z","modified":"2026-01-31T16:42:47Z","name":"Phishing domain: 03c5157.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/03c5157.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '03c5157.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-31T16:42:47Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/03c5157.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ec0e755-9d0f-5a45-8e21-eb1d81e550bf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-10T15:18:27Z","modified":"2026-06-10T15:18:27Z","name":"Phishing domain: 04-directslots.web.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/04-directslots.web.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '04-directslots.web.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-10T15:18:27Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/04-directslots.web.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a345d46-c047-580f-ae5c-0bbdb512d2a2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-04T08:39:33Z","modified":"2025-11-04T08:39:33Z","name":"Phishing domain: 0432js13.am.coinbase.cm","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/0432js13.am.coinbase.cm","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0432js13.am.coinbase.cm']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-04T08:39:33Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0432js13.am.coinbase.cm"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf88840b-c6da-5415-9abc-a40bc8a94069","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T13:06:28Z","modified":"2026-01-02T13:06:28Z","name":"Phishing domain: 0471365vip.vip","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/0471365vip.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0471365vip.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T13:06:28Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0471365vip.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--724f2918-0e49-541a-a2fe-3d11f946a2c3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-28T18:07:33Z","modified":"2026-07-28T18:07:33Z","name":"Phishing domain: 049001-icloud.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Apple. Report & evidence: https://phishdestroy.io/domain/049001-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '049001-icloud.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-28T18:07:33Z","labels":["malicious-activity","phishing","brand:apple"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/049001-icloud.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a69af81-19c1-5c85-8ace-17b287f3d8e3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-06T00:33:52Z","modified":"2025-12-06T00:33:52Z","name":"Phishing domain: 049734-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/049734-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '049734-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-06T00:33:52Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/049734-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--955cb641-f3bf-53ff-8d6e-f744d3dd6c13","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-10T15:17:05Z","modified":"2026-06-10T15:17:05Z","name":"Phishing domain: 05-noagent.web.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/05-noagent.web.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '05-noagent.web.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-10T15:17:05Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/05-noagent.web.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e45a951-5299-5e49-8233-fbc635ae7c41","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-22T18:25:36Z","modified":"2026-02-22T18:25:36Z","name":"Phishing domain: 050c4f9cfee6.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/050c4f9cfee6.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '050c4f9cfee6.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-22T18:25:36Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/050c4f9cfee6.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d162791a-1216-5b3c-9578-d311bfbcb592","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-04T17:56:37Z","modified":"2026-03-04T17:56:37Z","name":"Phishing domain: 0551usd.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0551usd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0551usd.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-04T17:56:37Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0551usd.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--51798129-d723-544a-9acf-aea6daaa06bb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-04T14:20:53Z","modified":"2026-03-04T14:20:53Z","name":"Phishing domain: 0551wns888.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0551wns888.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0551wns888.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-04T14:20:53Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0551wns888.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d97911e-fb0d-5a07-b39f-e887b7d92983","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-05T04:06:47Z","modified":"2026-03-05T04:06:47Z","name":"Phishing domain: 0551xin888.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0551xin888.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0551xin888.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-05T04:06:47Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0551xin888.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1144844-8d1a-5339-ab73-bc5b4aefce9d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 05558126.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/05558126.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '05558126.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/05558126.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d028765a-dbc7-5c34-a173-fd68ff2992d9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:14Z","modified":"2026-02-26T23:22:14Z","name":"Phishing domain: 0571365vip.vip","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0571365vip.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0571365vip.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:14Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0571365vip.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a4db63c-9def-59bf-abf5-d136b614ead9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-04T19:56:41Z","modified":"2026-03-04T19:56:41Z","name":"Phishing domain: 0571wns666.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0571wns666.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0571wns666.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-04T19:56:41Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0571wns666.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0e069d7-a8d3-5024-aca3-e662c5a6190e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-04T17:54:01Z","modified":"2026-03-04T17:54:01Z","name":"Phishing domain: 0591usd.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0591usd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0591usd.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-04T17:54:01Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0591usd.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--92de3688-ebe5-551d-9196-2cc94fef9c46","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-27T09:25:04Z","modified":"2026-02-27T09:25:04Z","name":"Phishing domain: 05meet.us","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/05meet.us","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '05meet.us']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-27T09:25:04Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/05meet.us"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea742e23-ba42-5e17-b189-b42b519e4f63","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: 05web.nl","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/05web.nl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '05web.nl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/05web.nl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2579a627-d26e-5750-810b-a2d7941097d5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-21T18:53:25Z","modified":"2026-02-21T18:53:25Z","name":"Phishing domain: 05web.sbs","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating [\"wordpress\"]. Report & evidence: https://phishdestroy.io/domain/05web.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '05web.sbs']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-21T18:53:25Z","labels":["malicious-activity","phishing","brand:[\"wordpress\"]"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/05web.sbs"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--331b344f-e9d4-5184-8dae-f4311aa5bff1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-06T19:01:23Z","modified":"2026-02-06T19:01:23Z","name":"Phishing domain: 05web.us","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/05web.us","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '05web.us']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-06T19:01:23Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/05web.us"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bce9c8f4-8163-517d-bb26-e69e1392c3d4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T23:47:50Z","modified":"2026-08-09T23:47:50Z","name":"Phishing domain: 06e34d.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/06e34d.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '06e34d.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T23:47:50Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/06e34d.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--540c3ac2-3cf2-54b1-adc4-6545aa184b9d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-21T15:26:18Z","modified":"2026-04-21T15:26:18Z","name":"Phishing domain: 06pump.fun","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Pump.fun. Report & evidence: https://phishdestroy.io/domain/06pump.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '06pump.fun']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-21T15:26:18Z","labels":["malicious-activity","phishing","brand:pump.fun"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/06pump.fun"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e2a1ec7-368e-5c80-b959-5de85cb6c8d5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-02T15:32:34Z","modified":"2026-02-02T15:32:34Z","name":"Phishing domain: 06usweb.us","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating [\"wordpress\"]. Report & evidence: https://phishdestroy.io/domain/06usweb.us","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '06usweb.us']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-02T15:32:34Z","labels":["malicious-activity","phishing","brand:[\"wordpress\"]"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/06usweb.us"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3f9b00e-7f20-5c9c-9b66-adc36e913733","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T23:46:09Z","modified":"2026-08-09T23:46:09Z","name":"Phishing domain: 0719c3.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/0719c3.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0719c3.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T23:46:09Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0719c3.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c1f7690-aa89-50e1-be94-e9637c6233b3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-04T17:58:25Z","modified":"2026-03-04T17:58:25Z","name":"Phishing domain: 0731usd.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0731usd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0731usd.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-04T17:58:25Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0731usd.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8698885b-61ec-5f00-8fe6-37c3e228ed34","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-13T02:28:54Z","modified":"2026-07-13T02:28:54Z","name":"Phishing domain: 073bethh.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/073bethh.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '073bethh.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-13T02:28:54Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/073bethh.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5bcdf17-68b5-5a41-bc73-fab83075cd40","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-13T20:14:02Z","modified":"2026-08-13T20:14:02Z","name":"Phishing domain: 0754f5.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/0754f5.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0754f5.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-13T20:14:02Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0754f5.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6294e757-a188-529d-a793-b8ccfcc4f44d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-22T06:51:34Z","modified":"2025-12-22T06:51:34Z","name":"Phishing domain: 076ab655.demmoo-5p7.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating trezor. Report & evidence: https://phishdestroy.io/domain/076ab655.demmoo-5p7.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '076ab655.demmoo-5p7.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-22T06:51:34Z","labels":["malicious-activity","phishing","brand:trezor"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/076ab655.demmoo-5p7.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f63efcf-b6db-58cb-bd3d-7139c5ff83cb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-10T16:59:43Z","modified":"2026-02-10T16:59:43Z","name":"Phishing domain: 076c2b1f0e43eeb23a5943ab6677c570.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/076c2b1f0e43eeb23a5943ab6677c570.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '076c2b1f0e43eeb23a5943ab6677c570.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-10T16:59:43Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/076c2b1f0e43eeb23a5943ab6677c570.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--69c5939e-b51d-5008-bbe6-585259f728e9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 07939.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/07939.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '07939.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/07939.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ed98b04-ef75-5018-a779-3c93872f38ac","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:07Z","modified":"2026-02-26T23:20:07Z","name":"Phishing domain: 0797add9.ajkevmslay.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/0797add9.ajkevmslay.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0797add9.ajkevmslay.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:07Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0797add9.ajkevmslay.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e85e9891-98e9-54c5-a50d-beab70dcc4d4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-04T10:49:05Z","modified":"2026-08-04T10:49:05Z","name":"Phishing domain: 07d9ft0uvf61li75z.comvdwrsutl.affiliate-token.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/07d9ft0uvf61li75z.comvdwrsutl.affiliate-token.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '07d9ft0uvf61li75z.comvdwrsutl.affiliate-token.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-04T10:49:05Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/07d9ft0uvf61li75z.comvdwrsutl.affiliate-token.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--05ff7bf4-5d1b-570b-bfa5-77995a0447d7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-03T13:17:35Z","modified":"2025-09-03T13:17:35Z","name":"Phishing domain: 07dws.cn","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/07dws.cn","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '07dws.cn']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-03T13:17:35Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/07dws.cn"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e929657-6f2b-5a5b-af0b-f70de397ec94","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-20T10:04:33Z","modified":"2025-12-20T10:04:33Z","name":"Phishing domain: 07q.co","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/07q.co","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '07q.co']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-20T10:04:33Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/07q.co"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--72d15d8b-9081-571e-ba96-83ea5651e9bf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-21T18:45:28Z","modified":"2025-12-21T18:45:28Z","name":"Phishing domain: 07usweb.site","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating [\"wordpress\"]. Report & evidence: https://phishdestroy.io/domain/07usweb.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '07usweb.site']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-21T18:45:28Z","labels":["malicious-activity","phishing","brand:[\"wordpress\"]"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/07usweb.site"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--17638f63-062d-5fd2-b514-039cb9c8eac6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-15T02:25:07Z","modified":"2026-07-15T02:25:07Z","name":"Phishing domain: 0800numbers-uk.co.uk","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/0800numbers-uk.co.uk","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0800numbers-uk.co.uk']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-15T02:25:07Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0800numbers-uk.co.uk"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7402cd2-2a0f-5afe-9d6f-b0ffbd51b029","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-08T00:30:28Z","modified":"2025-12-08T00:30:28Z","name":"Phishing domain: 0802bet.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/0802bet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0802bet.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-08T00:30:28Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0802bet.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--515f0d96-1540-5d62-b127-a53bb361e0f2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:26Z","modified":"2026-02-26T23:21:26Z","name":"Phishing domain: 080dc4ca.conntwal.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/080dc4ca.conntwal.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '080dc4ca.conntwal.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:26Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/080dc4ca.conntwal.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d71c9f8d-baba-55b8-9540-da73157c8f11","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-14T15:43:35Z","modified":"2026-03-14T15:43:35Z","name":"Phishing domain: 0838288fh929procedure4allemployeemandatory08392928482.nassvsa.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0838288fh929procedure4allemployeemandatory08392928482.nassvsa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0838288fh929procedure4allemployeemandatory08392928482.nassvsa.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-14T15:43:35Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0838288fh929procedure4allemployeemandatory08392928482.nassvsa.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c69f437a-50f3-590c-bdea-0ad293ea4e72","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-11T20:48:53Z","modified":"2026-04-11T20:48:53Z","name":"Phishing domain: 084933-cb.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Trust Wallet. Report & evidence: https://phishdestroy.io/domain/084933-cb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '084933-cb.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-11T20:48:53Z","labels":["malicious-activity","phishing","brand:trust wallet"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/084933-cb.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d85bdda0-d572-58ed-a09c-28c8987f4c7a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-04T14:19:45Z","modified":"2026-03-04T14:19:45Z","name":"Phishing domain: 0851wns888.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0851wns888.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0851wns888.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-04T14:19:45Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0851wns888.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--78a3cb0f-a83f-5c9a-bd42-ab9a0bb542b5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:05Z","modified":"2026-02-26T23:22:05Z","name":"Phishing domain: 0871365vip.vip","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0871365vip.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0871365vip.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:05Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0871365vip.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fb18ed7-0711-5da2-a329-351525c67b5e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-04T17:44:18Z","modified":"2026-03-04T17:44:18Z","name":"Phishing domain: 0871usd.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0871usd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0871usd.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-04T17:44:18Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0871usd.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--138ea80b-6eae-55c4-a5e2-5b66b3433544","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-27T17:03:52Z","modified":"2025-11-27T17:03:52Z","name":"Phishing domain: 0888naveankorea-oneinamillion-class.vercel.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0888naveankorea-oneinamillion-class.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0888naveankorea-oneinamillion-class.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-27T17:03:52Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0888naveankorea-oneinamillion-class.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--75630f3d-f07d-5078-8e90-a003232ce973","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:18Z","modified":"2026-07-27T06:02:18Z","name":"Phishing domain: 089264.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/089264.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '089264.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:18Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/089264.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--816fdf8b-19a6-52b3-a7e1-78677da61490","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:18Z","modified":"2026-07-27T06:02:18Z","name":"Phishing domain: 089281.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/089281.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '089281.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:18Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/089281.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9e5c69c-11ce-5e13-b7a3-e9def30b78ba","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:18Z","modified":"2026-07-27T06:02:18Z","name":"Phishing domain: 089314.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/089314.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '089314.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:18Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/089314.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd697db4-8d7f-50d4-ae94-e27823ed0532","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:18Z","modified":"2026-07-27T06:02:18Z","name":"Phishing domain: 089343.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/089343.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '089343.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:18Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/089343.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d857cfa1-868b-55fa-96f0-ba709fcabdb0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:18Z","modified":"2026-07-27T06:02:18Z","name":"Phishing domain: 089454.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/089454.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '089454.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:18Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/089454.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--47b657ab-1e6e-510d-bf24-34d646ff0041","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:18Z","modified":"2026-07-27T06:02:18Z","name":"Phishing domain: 089504.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/089504.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '089504.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:18Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/089504.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--434f47c8-5157-5840-a559-68a735cc9b60","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:18Z","modified":"2026-07-27T06:02:18Z","name":"Phishing domain: 089514.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/089514.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '089514.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:18Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/089514.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--747335ef-8e59-509b-a0d8-67594ec16ef5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:18Z","modified":"2026-07-27T06:02:18Z","name":"Phishing domain: 089574.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/089574.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '089574.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:18Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/089574.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2aecc12e-3705-5478-aea2-fb499e6947ed","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:18Z","modified":"2026-07-27T06:02:18Z","name":"Phishing domain: 089634.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/089634.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '089634.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:18Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/089634.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb0c1d64-33b4-5295-ab69-8d3180bb1af1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:18Z","modified":"2026-07-27T06:02:18Z","name":"Phishing domain: 089714.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/089714.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '089714.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:18Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/089714.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfd2b101-aa93-5074-8aec-719c00fad90e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:18Z","modified":"2026-07-27T06:02:18Z","name":"Phishing domain: 0897337.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0897337.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0897337.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:18Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0897337.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b15f63d-f61c-5132-9715-10a11b2b9c6d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:18Z","modified":"2026-07-27T06:02:18Z","name":"Phishing domain: 089741.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/089741.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '089741.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:18Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/089741.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d4055bb-43ac-547c-a89e-00ffb753b437","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:44:41Z","modified":"2026-07-27T04:44:41Z","name":"Phishing domain: 089742.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/089742.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '089742.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:44:41Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/089742.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--edf95457-a136-55df-b106-a72577b24555","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-16T14:23:55Z","modified":"2026-07-16T14:23:55Z","name":"Phishing domain: 0898xy.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0898xy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0898xy.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-16T14:23:55Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0898xy.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--90443b66-42f6-5d4e-80e9-47f64009c65e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-03T13:17:37Z","modified":"2025-09-03T13:17:37Z","name":"Phishing domain: 08pf.cn","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating okx. Report & evidence: https://phishdestroy.io/domain/08pf.cn","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '08pf.cn']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-03T13:17:37Z","labels":["malicious-activity","phishing","brand:okx"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/08pf.cn"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b3f6531-3e7a-59a1-9cc6-9040021da1f8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-21T15:26:20Z","modified":"2026-04-21T15:26:20Z","name":"Phishing domain: 08pump.fun","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Pump.fun. Report & evidence: https://phishdestroy.io/domain/08pump.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '08pump.fun']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-21T15:26:20Z","labels":["malicious-activity","phishing","brand:pump.fun"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/08pump.fun"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--35c48fc3-2ba5-5cf9-b858-766379def251","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-04T19:59:48Z","modified":"2026-03-04T19:59:48Z","name":"Phishing domain: 0931usd.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0931usd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0931usd.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-04T19:59:48Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0931usd.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2c9b797-09cb-5248-8d64-b9c39e773385","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-28T18:07:31Z","modified":"2026-07-28T18:07:31Z","name":"Phishing domain: 093201-google.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/093201-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '093201-google.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-28T18:07:31Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/093201-google.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--59cecbcf-4c17-5afb-8beb-cd4120ef1515","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-15T11:20:28Z","modified":"2025-11-15T11:20:28Z","name":"Phishing domain: 094523coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/094523coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '094523coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-15T11:20:28Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/094523coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--77fe0320-c647-5c4e-b54f-8d2f2571e9cf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-03T09:50:38Z","modified":"2025-09-03T09:50:38Z","name":"Phishing domain: 09724.loan","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/09724.loan","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '09724.loan']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-03T09:50:38Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/09724.loan"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cda8dce-3e0d-54e6-be4b-42208679df12","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-10T08:49:33Z","modified":"2025-12-10T08:49:33Z","name":"Phishing domain: 098654coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/098654coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '098654coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-10T08:49:33Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/098654coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e357860-2b8f-549e-ad3d-c24a6c9e4d18","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-20T09:52:10Z","modified":"2026-06-20T09:52:10Z","name":"Phishing domain: 0991contacto.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating microsoft. Report & evidence: https://phishdestroy.io/domain/0991contacto.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0991contacto.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-20T09:52:10Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0991contacto.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6c04b1a-f12c-53f2-b32e-3db54501fe73","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-05T11:37:15Z","modified":"2026-08-05T11:37:15Z","name":"Phishing domain: 09aieh-zyd-j90-ba8-r2jh-insll.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/09aieh-zyd-j90-ba8-r2jh-insll.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '09aieh-zyd-j90-ba8-r2jh-insll.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-05T11:37:15Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/09aieh-zyd-j90-ba8-r2jh-insll.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--50bb0771-8d08-5ffd-93ef-77a12ae047bf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-14T19:36:08Z","modified":"2026-02-14T19:36:08Z","name":"Phishing domain: 09pump.fun","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating curve. Report & evidence: https://phishdestroy.io/domain/09pump.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '09pump.fun']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-14T19:36:08Z","labels":["malicious-activity","phishing","brand:curve"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/09pump.fun"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccb07578-9012-515a-b802-ef887c79d554","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-07-22T18:55:06Z","modified":"2025-07-22T18:55:06Z","name":"Phishing domain: 09sync1n0-duckdns.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/09sync1n0-duckdns.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '09sync1n0-duckdns.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-07-22T18:55:06Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/09sync1n0-duckdns.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8baa3ce-84f8-5f3f-9e96-60c6f9cdfd10","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-11T22:30:02Z","modified":"2026-03-11T22:30:02Z","name":"Phishing domain: 0a0zo7.uesbnb.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Facebook. Report & evidence: https://phishdestroy.io/domain/0a0zo7.uesbnb.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0a0zo7.uesbnb.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-11T22:30:02Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0a0zo7.uesbnb.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--526d08c2-70bc-5770-9859-7ed95d6cf60e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:48Z","modified":"2026-02-26T23:24:48Z","name":"Phishing domain: 0a560d49.ajkevmslay.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/0a560d49.ajkevmslay.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0a560d49.ajkevmslay.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:48Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0a560d49.ajkevmslay.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ee0f809-a20d-541d-b076-0c6a25a89918","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T15:49:18Z","modified":"2026-08-09T15:49:18Z","name":"Phishing domain: 0a63a3.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/0a63a3.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0a63a3.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T15:49:18Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0a63a3.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--55f2136f-c75d-5f98-a980-e8d4837f9daf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-16T14:59:54Z","modified":"2025-09-16T14:59:54Z","name":"Phishing domain: 0aavvee.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aave. Report & evidence: https://phishdestroy.io/domain/0aavvee.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0aavvee.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-16T14:59:54Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0aavvee.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--95309794-5fd9-529b-a770-7299854a2e86","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-23T15:37:13Z","modified":"2026-02-23T15:37:13Z","name":"Phishing domain: 0ab565e91b860448b7e019fa26494e9.paris-hotel-latin-quarter.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Spotify. Report & evidence: https://phishdestroy.io/domain/0ab565e91b860448b7e019fa26494e9.paris-hotel-latin-quarter.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0ab565e91b860448b7e019fa26494e9.paris-hotel-latin-quarter.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-23T15:37:13Z","labels":["malicious-activity","phishing","brand:spotify"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0ab565e91b860448b7e019fa26494e9.paris-hotel-latin-quarter.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6007ad00-0a0d-52e1-8118-e6168d97d9f7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:23Z","modified":"2026-02-26T23:23:23Z","name":"Phishing domain: 0asdasd1474ss.rurzokerze.workers.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/0asdasd1474ss.rurzokerze.workers.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0asdasd1474ss.rurzokerze.workers.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:23Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0asdasd1474ss.rurzokerze.workers.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--054764ae-6f5a-59cf-8659-e057a0a1a727","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-26T14:57:08Z","modified":"2026-07-26T14:57:08Z","name":"Phishing domain: 0auth-collab.land","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/0auth-collab.land","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0auth-collab.land']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-26T14:57:08Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0auth-collab.land"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--232ef8b2-f202-59ea-af78-2ffc7fec3f11","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-09T15:35:04Z","modified":"2025-11-09T15:35:04Z","name":"Phishing domain: 0auth-sunperp.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating binance. Report & evidence: https://phishdestroy.io/domain/0auth-sunperp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0auth-sunperp.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-09T15:35:04Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0auth-sunperp.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a98f81b-4238-577d-9735-ec99cce82b82","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-09T15:35:01Z","modified":"2025-11-09T15:35:01Z","name":"Phishing domain: 0auth-xplbridge.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating metamask. Report & evidence: https://phishdestroy.io/domain/0auth-xplbridge.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0auth-xplbridge.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-09T15:35:01Z","labels":["malicious-activity","phishing","brand:metamask"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0auth-xplbridge.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--71d169b3-3afd-5430-a6a2-a6f9bd6c8dcd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-01T12:20:10Z","modified":"2025-12-01T12:20:10Z","name":"Phishing domain: 0authxfinity.vercel.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0authxfinity.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0authxfinity.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-01T12:20:10Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0authxfinity.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--50a6d9da-82c4-5ebb-9b34-6f259b924191","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T23:46:15Z","modified":"2026-08-09T23:46:15Z","name":"Phishing domain: 0b0529.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/0b0529.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0b0529.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T23:46:15Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0b0529.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a672b53-c59e-5710-b3b2-2ded7899ed95","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-24T14:54:00Z","modified":"2025-12-24T14:54:00Z","name":"Phishing domain: 0b282582.kfhhfdue.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Trezor. Report & evidence: https://phishdestroy.io/domain/0b282582.kfhhfdue.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0b282582.kfhhfdue.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-24T14:54:00Z","labels":["malicious-activity","phishing","brand:trezor"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0b282582.kfhhfdue.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c51f3bb-ff8d-56b4-88e7-a6e2b6847b2c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-12T21:38:35Z","modified":"2026-02-12T21:38:35Z","name":"Phishing domain: 0bmenat24.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0bmenat24.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0bmenat24.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-12T21:38:35Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0bmenat24.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--18c94dde-9eb4-50d5-adb7-09ca024f82fa","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-11T13:41:54Z","modified":"2025-09-11T13:41:54Z","name":"Phishing domain: 0bruelo-wallet.co.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/0bruelo-wallet.co.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0bruelo-wallet.co.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-11T13:41:54Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0bruelo-wallet.co.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fa11798-247c-5ae5-8943-038b6f4d478e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-22T23:47:21Z","modified":"2026-06-22T23:47:21Z","name":"Phishing domain: 0cncoxi.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0cncoxi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0cncoxi.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-22T23:47:21Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0cncoxi.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1dfe96f3-d0eb-57e9-8361-0efa86368e3d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-19T03:10:54Z","modified":"2026-02-19T03:10:54Z","name":"Phishing domain: 0dc82829-8336-49f0-91d3-64dcd1635e24-00-3aanp21cihujh.riker.replit.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Banco de Venezuela. Report & evidence: https://phishdestroy.io/domain/0dc82829-8336-49f0-91d3-64dcd1635e24-00-3aanp21cihujh.riker.replit.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0dc82829-8336-49f0-91d3-64dcd1635e24-00-3aanp21cihujh.riker.replit.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-19T03:10:54Z","labels":["malicious-activity","phishing","brand:banco de venezuela"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0dc82829-8336-49f0-91d3-64dcd1635e24-00-3aanp21cihujh.riker.replit.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4670dc37-cc31-57d2-a237-82c754b9b530","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-05T08:47:34Z","modified":"2026-03-05T08:47:34Z","name":"Phishing domain: 0defx.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating [\"x.com\"]. Report & evidence: https://phishdestroy.io/domain/0defx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0defx.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-05T08:47:34Z","labels":["malicious-activity","phishing","brand:[\"x.com\"]"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0defx.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb26e2d3-d330-52f4-b9db-7bd63bcd1857","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-28T18:07:43Z","modified":"2026-07-28T18:07:43Z","name":"Phishing domain: 0dp-p7u-hb0if-7l7mby-rz1.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/0dp-p7u-hb0if-7l7mby-rz1.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0dp-p7u-hb0if-7l7mby-rz1.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-28T18:07:43Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0dp-p7u-hb0if-7l7mby-rz1.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c0eb241-1769-549b-948e-552a699e02ac","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T15:52:52Z","modified":"2026-08-09T15:52:52Z","name":"Phishing domain: 0e1dd8.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/0e1dd8.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0e1dd8.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T15:52:52Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0e1dd8.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e12d5e7d-b8aa-5815-8a59-1a16abd8f370","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T15:47:05Z","modified":"2026-08-09T15:47:05Z","name":"Phishing domain: 0eb5fe.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/0eb5fe.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0eb5fe.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T15:47:05Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0eb5fe.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b13f7ef7-0d08-5353-b306-494ba123e02b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-06T17:19:18Z","modified":"2026-03-06T17:19:18Z","name":"Phishing domain: 0efc87c2a1aaaf03e72d6f971113a2a1.info","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0efc87c2a1aaaf03e72d6f971113a2a1.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0efc87c2a1aaaf03e72d6f971113a2a1.info']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-06T17:19:18Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0efc87c2a1aaaf03e72d6f971113a2a1.info"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--62a4153f-76ee-59e6-9ee9-bff5601c037f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: 0exallieviagraria.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0exallieviagraria.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0exallieviagraria.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0exallieviagraria.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c486258-df00-5592-9b29-a82fae84944a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-25T16:00:56Z","modified":"2025-08-25T16:00:56Z","name":"Phishing domain: 0f324e7d2881.6b3632c8.us-east-1.token.awswaf.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0f324e7d2881.6b3632c8.us-east-1.token.awswaf.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0f324e7d2881.6b3632c8.us-east-1.token.awswaf.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-25T16:00:56Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0f324e7d2881.6b3632c8.us-east-1.token.awswaf.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e40949ad-5287-5238-9d68-3ecc9044da97","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T03:45:17Z","modified":"2026-06-15T03:45:17Z","name":"Phishing domain: 0f8p252m13.trump.successhacker.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0f8p252m13.trump.successhacker.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0f8p252m13.trump.successhacker.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T03:45:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0f8p252m13.trump.successhacker.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a657820-41c4-5be8-914f-553f825679da","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-26T13:40:30Z","modified":"2025-10-26T13:40:30Z","name":"Phishing domain: 0ff45719-2e69-4ef0-91bd-4c01bce3f5ab-00-325o1z1mbm1cf.spock.replit.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Network Solutions. Report & evidence: https://phishdestroy.io/domain/0ff45719-2e69-4ef0-91bd-4c01bce3f5ab-00-325o1z1mbm1cf.spock.replit.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0ff45719-2e69-4ef0-91bd-4c01bce3f5ab-00-325o1z1mbm1cf.spock.replit.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-26T13:40:30Z","labels":["malicious-activity","phishing","brand:network solutions"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0ff45719-2e69-4ef0-91bd-4c01bce3f5ab-00-325o1z1mbm1cf.spock.replit.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9bae8d5-924c-5b56-ac06-7d460bfc19e2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-12T03:07:49Z","modified":"2026-08-12T03:07:49Z","name":"Phishing domain: 0ffice365qrcodeconfirmation.un-cnd.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0ffice365qrcodeconfirmation.un-cnd.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0ffice365qrcodeconfirmation.un-cnd.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-12T03:07:49Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0ffice365qrcodeconfirmation.un-cnd.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4312369-0b76-537d-a552-b96ca03b14c5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-16T17:31:33Z","modified":"2025-09-16T17:31:33Z","name":"Phishing domain: 0fflclalremittixx.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating chase. Report & evidence: https://phishdestroy.io/domain/0fflclalremittixx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0fflclalremittixx.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-16T17:31:33Z","labels":["malicious-activity","phishing","brand:chase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0fflclalremittixx.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--24cd63b3-7179-5841-abfa-94f94df21e2f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-05T02:15:54Z","modified":"2025-10-05T02:15:54Z","name":"Phishing domain: 0g-foundiation-claim.netlify.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating WalletConnect. Report & evidence: https://phishdestroy.io/domain/0g-foundiation-claim.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0g-foundiation-claim.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-05T02:15:54Z","labels":["malicious-activity","phishing","brand:walletconnect"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0g-foundiation-claim.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f723e042-04cf-5505-9805-901a4655e07c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:45Z","modified":"2026-02-26T23:19:45Z","name":"Phishing domain: 0g.stakingrewards.biz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/0g.stakingrewards.biz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0g.stakingrewards.biz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:45Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0g.stakingrewards.biz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cc07542-af2c-53c8-b054-865fa49459de","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-06T12:52:20Z","modified":"2026-01-06T12:52:20Z","name":"Phishing domain: 0g.stakingsreward.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/0g.stakingsreward.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0g.stakingsreward.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-06T12:52:20Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0g.stakingsreward.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--57bb8f92-d95d-566d-aa6f-1dfadab7ad7f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-17T18:51:27Z","modified":"2026-02-17T18:51:27Z","name":"Phishing domain: 0g7w1aygwrtgdiv-5wx0w5xe7p.edgeone.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating [\"outlook\"]. Report & evidence: https://phishdestroy.io/domain/0g7w1aygwrtgdiv-5wx0w5xe7p.edgeone.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0g7w1aygwrtgdiv-5wx0w5xe7p.edgeone.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-17T18:51:27Z","labels":["malicious-activity","phishing","brand:[\"outlook\"]"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0g7w1aygwrtgdiv-5wx0w5xe7p.edgeone.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--24457347-9aab-5397-bff3-6c0fcb57dd14","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-26T17:18:10Z","modified":"2026-03-26T17:18:10Z","name":"Phishing domain: 0gas.fun","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0gas.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0gas.fun']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-26T17:18:10Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0gas.fun"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0779d12b-fe8e-5c4c-a4b4-53752ad4fb4b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-30T13:25:03Z","modified":"2025-09-30T13:25:03Z","name":"Phishing domain: 0gfoundation.icu","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/0gfoundation.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0gfoundation.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-30T13:25:03Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0gfoundation.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2002f7c3-8bfa-5563-9302-4698aedd27ea","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:35Z","modified":"2026-02-26T23:22:35Z","name":"Phishing domain: 0gfoundation.world","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0gfoundation.world","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0gfoundation.world']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:35Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0gfoundation.world"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0426579a-9ba0-5ae1-8b85-8b3f58d7e8a6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:25Z","modified":"2026-02-26T23:21:25Z","name":"Phishing domain: 0gfoundations.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0gfoundations.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0gfoundations.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:25Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0gfoundations.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--10572e3f-c015-556e-9cad-5e87e7340610","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-27T12:34:31Z","modified":"2025-09-27T12:34:31Z","name":"Phishing domain: 0gfoundatlon.network","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/0gfoundatlon.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0gfoundatlon.network']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-27T12:34:31Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0gfoundatlon.network"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6b2f128-19d8-5fde-9f5c-43fe2e74e470","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:28Z","modified":"2026-02-26T23:20:28Z","name":"Phishing domain: 0glabs.network-app.cloud","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating discord. Report & evidence: https://phishdestroy.io/domain/0glabs.network-app.cloud","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0glabs.network-app.cloud']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:28Z","labels":["malicious-activity","phishing","brand:discord"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0glabs.network-app.cloud"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5d5a5ef-7568-5a37-bd29-407fd0374177","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-04T13:20:40Z","modified":"2025-10-04T13:20:40Z","name":"Phishing domain: 0glabsfoundation.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating metamask. Report & evidence: https://phishdestroy.io/domain/0glabsfoundation.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0glabsfoundation.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-04T13:20:40Z","labels":["malicious-activity","phishing","brand:metamask"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0glabsfoundation.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--37d9796e-b2d0-5b14-b6e3-cdd10b7f27ee","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-24T12:32:30Z","modified":"2025-10-24T12:32:30Z","name":"Phishing domain: 0i-m4.fwh.is","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0i-m4.fwh.is","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0i-m4.fwh.is']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-24T12:32:30Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0i-m4.fwh.is"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e75a811-313a-5334-8912-424f7a6e5eeb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-08T02:28:02Z","modified":"2025-12-08T02:28:02Z","name":"Phishing domain: 0inch.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/0inch.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0inch.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-08T02:28:02Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0inch.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8a90357-b311-5487-adbf-68595b15cb74","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-13T06:38:52Z","modified":"2026-06-13T06:38:52Z","name":"Phishing domain: 0kxweb3wallets.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0kxweb3wallets.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0kxweb3wallets.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-13T06:38:52Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0kxweb3wallets.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--42739f58-3f96-5b59-be4c-89f2d7975323","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-20T11:37:33Z","modified":"2025-10-20T11:37:33Z","name":"Phishing domain: 0ndoflnance.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0ndoflnance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0ndoflnance.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-20T11:37:33Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0ndoflnance.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--10f63dc8-220f-55b7-97d5-2651e0c59d30","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-19T18:05:14Z","modified":"2026-01-19T18:05:14Z","name":"Phishing domain: 0nedrive.dropcloud.it","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating phishingtest. Report & evidence: https://phishdestroy.io/domain/0nedrive.dropcloud.it","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0nedrive.dropcloud.it']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-19T18:05:14Z","labels":["malicious-activity","phishing","brand:phishingtest"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0nedrive.dropcloud.it"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b569d8fe-d772-5a48-8462-1f7fe05adea1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-13T22:53:45Z","modified":"2026-07-13T22:53:45Z","name":"Phishing domain: 0nline-assessmemnt041.info","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Linea. Report & evidence: https://phishdestroy.io/domain/0nline-assessmemnt041.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0nline-assessmemnt041.info']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-13T22:53:45Z","labels":["malicious-activity","phishing","brand:linea"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0nline-assessmemnt041.info"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0d75571-dfb8-5ea3-bcd4-00cef2ea6938","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-20T17:42:54Z","modified":"2026-03-20T17:42:54Z","name":"Phishing domain: 0pen-ocean.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0pen-ocean.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0pen-ocean.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-20T17:42:54Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0pen-ocean.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--69c95e79-3b29-5c3e-8334-4fe81061ccd3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:31Z","modified":"2026-02-26T23:20:31Z","name":"Phishing domain: 0pensea-dg5.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating OpenSea. Report & evidence: https://phishdestroy.io/domain/0pensea-dg5.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0pensea-dg5.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:31Z","labels":["malicious-activity","phishing","brand:opensea"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0pensea-dg5.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--715456c9-03db-524d-8109-10c59ad1894a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-09T13:08:49Z","modified":"2025-08-09T13:08:49Z","name":"Phishing domain: 0pensea.cn","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating metamask. Report & evidence: https://phishdestroy.io/domain/0pensea.cn","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0pensea.cn']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-09T13:08:49Z","labels":["malicious-activity","phishing","brand:metamask"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0pensea.cn"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b743b398-f7ea-5c15-b1c1-0e45bb1c093d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-16T18:25:13Z","modified":"2025-12-16T18:25:13Z","name":"Phishing domain: 0pensea.gitbook.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating OpenSea. Report & evidence: https://phishdestroy.io/domain/0pensea.gitbook.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0pensea.gitbook.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-16T18:25:13Z","labels":["malicious-activity","phishing","brand:opensea"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0pensea.gitbook.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c62bdf7-79de-5b86-81d0-7ece6d9d2d38","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-10T08:47:42Z","modified":"2025-12-10T08:47:42Z","name":"Phishing domain: 0rbiterfinance.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating orbiter. Report & evidence: https://phishdestroy.io/domain/0rbiterfinance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0rbiterfinance.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-10T08:47:42Z","labels":["malicious-activity","phishing","brand:orbiter"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0rbiterfinance.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--71f45f86-a377-5d49-9d14-b6d989d8b5c5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-16T18:27:55Z","modified":"2025-12-16T18:27:55Z","name":"Phishing domain: 0rigiindefi.world","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0rigiindefi.world","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0rigiindefi.world']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-16T18:27:55Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0rigiindefi.world"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff780d97-b4af-5b13-aa3c-492b7436f753","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-09T10:30:05Z","modified":"2025-12-09T10:30:05Z","name":"Phishing domain: 0rigindefi.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0rigindefi.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0rigindefi.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-09T10:30:05Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0rigindefi.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d497b8b-6601-55fb-8650-d85a508f2647","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-14T07:49:40Z","modified":"2025-12-14T07:49:40Z","name":"Phishing domain: 0rigindefi.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0rigindefi.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0rigindefi.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-14T07:49:40Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0rigindefi.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c9fab97-b66d-5ef6-b094-3a23e61b09de","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-04T08:39:26Z","modified":"2025-11-04T08:39:26Z","name":"Phishing domain: 0rsyxwv.am.coinbase.cm","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/0rsyxwv.am.coinbase.cm","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0rsyxwv.am.coinbase.cm']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-04T08:39:26Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0rsyxwv.am.coinbase.cm"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4fb02f7-c82d-55db-81b7-feb52b1d98a0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-26T10:32:57Z","modified":"2026-06-26T10:32:57Z","name":"Phishing domain: 0s8k-x5e9-qtge.aflores-rorealty-com-s-account.workers.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0s8k-x5e9-qtge.aflores-rorealty-com-s-account.workers.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0s8k-x5e9-qtge.aflores-rorealty-com-s-account.workers.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-26T10:32:57Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0s8k-x5e9-qtge.aflores-rorealty-com-s-account.workers.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--75573b93-16d8-5d75-8b96-f0824bbe8bb5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-09T23:07:13Z","modified":"2025-11-09T23:07:13Z","name":"Phishing domain: 0tkin.viagrabuybest.online","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0tkin.viagrabuybest.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0tkin.viagrabuybest.online']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-09T23:07:13Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0tkin.viagrabuybest.online"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5feb6fba-e729-5c5b-9c92-f74a883d53a9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-22T12:58:29Z","modified":"2025-12-22T12:58:29Z","name":"Phishing domain: 0wf0acct.us","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating wells fargo. Report & evidence: https://phishdestroy.io/domain/0wf0acct.us","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0wf0acct.us']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-22T12:58:29Z","labels":["malicious-activity","phishing","brand:wells fargo"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0wf0acct.us"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0c574b9-6603-56ba-9417-5b54b9056eef","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-08T12:17:07Z","modified":"2025-11-08T12:17:07Z","name":"Phishing domain: 0wsu2fhnkv.46464tk.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0wsu2fhnkv.46464tk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0wsu2fhnkv.46464tk.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-08T12:17:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0wsu2fhnkv.46464tk.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fde6f1a-2b6a-5666-ae33-e871ae6f8496","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:47Z","modified":"2026-02-26T23:23:47Z","name":"Phishing domain: 0x-alphafi.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0x-alphafi.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0x-alphafi.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:47Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0x-alphafi.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--283fdc56-f1a8-5868-a8b1-50b7b2e6d6f6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-09T01:41:54Z","modified":"2025-09-09T01:41:54Z","name":"Phishing domain: 0x-altseason.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/0x-altseason.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0x-altseason.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-09T01:41:54Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0x-altseason.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e3f5ef3-01fc-5c92-89ec-ebc42d17df2e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-19T17:51:41Z","modified":"2026-01-19T17:51:41Z","name":"Phishing domain: 0x-base.top","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0x-base.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0x-base.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-19T17:51:41Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0x-base.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a2a2d99-9cc3-5319-8f84-80eea05d49d5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-21T17:51:56Z","modified":"2026-01-21T17:51:56Z","name":"Phishing domain: 0x-bsc.top","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0x-bsc.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0x-bsc.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-21T17:51:56Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0x-bsc.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e095b5ea-dc90-55ee-b5ec-e011e85f4f56","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-16T11:04:32Z","modified":"2025-09-16T11:04:32Z","name":"Phishing domain: 0x-distribution.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0x-distribution.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0x-distribution.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-16T11:04:32Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0x-distribution.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f25ad15a-e2a6-573f-8e82-c8ed4cdc8c72","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-07-18T21:35:29Z","modified":"2025-07-18T21:35:29Z","name":"Phishing domain: 0x-pendle.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Pendle. Report & evidence: https://phishdestroy.io/domain/0x-pendle.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0x-pendle.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-07-18T21:35:29Z","labels":["malicious-activity","phishing","brand:pendle"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0x-pendle.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a3a2754-4d62-5048-86a8-9f77ec8cf418","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-24T17:09:34Z","modified":"2026-02-24T17:09:34Z","name":"Phishing domain: 0x-pr.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/0x-pr.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0x-pr.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-24T17:09:34Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0x-pr.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c09ef0e-adaf-5b1e-8a23-91c8ed44d860","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-24T17:49:22Z","modified":"2026-01-24T17:49:22Z","name":"Phishing domain: 0x.dropit.space","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0x.dropit.space","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0x.dropit.space']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-24T17:49:22Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0x.dropit.space"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--936d39a2-23cc-572e-9dbd-790e443dde88","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-16T17:34:03Z","modified":"2025-09-16T17:34:03Z","name":"Phishing domain: 0x0.claims","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating base. Report & evidence: https://phishdestroy.io/domain/0x0.claims","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0x0.claims']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-16T17:34:03Z","labels":["malicious-activity","phishing","brand:base"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0x0.claims"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--98cf8a44-75d7-5294-b33f-c177dd7a7a89","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-03T14:24:05Z","modified":"2025-11-03T14:24:05Z","name":"Phishing domain: 0x0.sushi-cn.biz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating SushiSwap. Report & evidence: https://phishdestroy.io/domain/0x0.sushi-cn.biz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0x0.sushi-cn.biz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-03T14:24:05Z","labels":["malicious-activity","phishing","brand:sushiswap"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0x0.sushi-cn.biz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8607c6b8-4a9e-531a-ab28-a20d81ce9c62","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:43Z","modified":"2026-02-26T23:23:43Z","name":"Phishing domain: 0x0aio.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0x0aio.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0x0aio.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:43Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0x0aio.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ed6d956-8177-55b4-8762-3d14d4ebba5b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-24T11:13:16Z","modified":"2025-09-24T11:13:16Z","name":"Phishing domain: 0x0exchange.sushistakes.info","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating SushiSwap. Report & evidence: https://phishdestroy.io/domain/0x0exchange.sushistakes.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0x0exchange.sushistakes.info']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-24T11:13:16Z","labels":["malicious-activity","phishing","brand:sushiswap"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0x0exchange.sushistakes.info"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f64ca828-5943-5b75-b380-6a1aa957ef7d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-24T11:11:31Z","modified":"2025-09-24T11:11:31Z","name":"Phishing domain: 0x0exchange.sushistakes.us","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating SushiSwap. Report & evidence: https://phishdestroy.io/domain/0x0exchange.sushistakes.us","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0x0exchange.sushistakes.us']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-24T11:11:31Z","labels":["malicious-activity","phishing","brand:sushiswap"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0x0exchange.sushistakes.us"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dcfba13-957b-5597-a93f-98e482d84401","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-20T13:45:19Z","modified":"2025-09-20T13:45:19Z","name":"Phishing domain: 0x0exchange.sushiswap.onl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating SushiSwap. Report & evidence: https://phishdestroy.io/domain/0x0exchange.sushiswap.onl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0x0exchange.sushiswap.onl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-20T13:45:19Z","labels":["malicious-activity","phishing","brand:sushiswap"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0x0exchange.sushiswap.onl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--86a39d27-7b1b-5db6-8983-a1d65d2720f3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-20T13:43:42Z","modified":"2025-09-20T13:43:42Z","name":"Phishing domain: 0x0exchange.sushiswap.tech","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating SushiSwap. Report & evidence: https://phishdestroy.io/domain/0x0exchange.sushiswap.tech","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0x0exchange.sushiswap.tech']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-20T13:43:42Z","labels":["malicious-activity","phishing","brand:sushiswap"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0x0exchange.sushiswap.tech"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1522c4c1-eb20-587f-9f6e-06fbf5e4e74d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-31T09:41:50Z","modified":"2025-12-31T09:41:50Z","name":"Phishing domain: 0x0migrate.live","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating base. Report & evidence: https://phishdestroy.io/domain/0x0migrate.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0x0migrate.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-31T09:41:50Z","labels":["malicious-activity","phishing","brand:base"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0x0migrate.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d424480-77ef-581f-b727-82f7e6502db6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:15Z","modified":"2026-02-26T23:24:15Z","name":"Phishing domain: 0x0treasurepool.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/0x0treasurepool.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0x0treasurepool.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:15Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0x0treasurepool.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--552ed662-45f4-5c84-bf39-5eb49c86e446","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-23T15:41:44Z","modified":"2026-01-23T15:41:44Z","name":"Phishing domain: 0x2201.top","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0x2201.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0x2201.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-23T15:41:44Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0x2201.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4c5e386-8e8e-5883-a0fe-465e1746af34","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:46Z","modified":"2026-02-26T23:19:46Z","name":"Phishing domain: 0x2529-f0dc5-swaplolcatclub.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating ethereum. Report & evidence: https://phishdestroy.io/domain/0x2529-f0dc5-swaplolcatclub.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0x2529-f0dc5-swaplolcatclub.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:46Z","labels":["malicious-activity","phishing","brand:ethereum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0x2529-f0dc5-swaplolcatclub.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d643b33-766b-5710-ac1b-8280f2c457fa","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T14:03:49Z","modified":"2026-01-02T14:03:49Z","name":"Phishing domain: 0x26.top","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0x26.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0x26.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T14:03:49Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0x26.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--11cc6828-053f-5142-9688-fd35e650422c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-23T06:43:53Z","modified":"2026-06-23T06:43:53Z","name":"Phishing domain: 0x38.team","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0x38.team","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0x38.team']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-23T06:43:53Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0x38.team"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a42738f-ef45-5ffc-9e3c-c7c66ef01e05","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-25T04:40:09Z","modified":"2026-06-25T04:40:09Z","name":"Phishing domain: 0x4547a86ca6a84b9d60dc57af908472074de7af5f.ethledger.live","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/0x4547a86ca6a84b9d60dc57af908472074de7af5f.ethledger.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0x4547a86ca6a84b9d60dc57af908472074de7af5f.ethledger.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-25T04:40:09Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0x4547a86ca6a84b9d60dc57af908472074de7af5f.ethledger.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d3fb74e-dc8e-519f-abb6-f40df6101114","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-13T16:06:11Z","modified":"2025-11-13T16:06:11Z","name":"Phishing domain: 0x67.top","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0x67.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0x67.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-13T16:06:11Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0x67.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b4cc1e7-2139-58c0-90e4-1706ad287669","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-09T23:07:38Z","modified":"2025-11-09T23:07:38Z","name":"Phishing domain: 0x705.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0x705.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0x705.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-09T23:07:38Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0x705.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8634179e-e675-5b2b-a0ff-c7d491683026","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-25T04:40:13Z","modified":"2026-06-25T04:40:13Z","name":"Phishing domain: 0x7c8519381c1594a42d1d9ba909aa5880411977ea.ethledger.live","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/0x7c8519381c1594a42d1d9ba909aa5880411977ea.ethledger.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0x7c8519381c1594a42d1d9ba909aa5880411977ea.ethledger.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-25T04:40:13Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0x7c8519381c1594a42d1d9ba909aa5880411977ea.ethledger.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e6f0d60-8313-55f8-8c9e-dc838235d30c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-07-10T07:00:46Z","modified":"2025-07-10T07:00:46Z","name":"Phishing domain: 0xarb.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0xarb.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xarb.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-07-10T07:00:46Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0xarb.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2474d52e-3ced-56a7-b76e-5e3f8090476c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-05T18:40:10Z","modified":"2026-08-05T18:40:10Z","name":"Phishing domain: 0xbeaconlayer.co","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0xbeaconlayer.co","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xbeaconlayer.co']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-05T18:40:10Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0xbeaconlayer.co"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--192d9f88-9b5a-592d-a80a-adaa1631461b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: 0xbetcasino.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0xbetcasino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xbetcasino.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0xbetcasino.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0c6d169-b361-5621-a2ae-024df01f7585","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-09T23:07:28Z","modified":"2025-11-09T23:07:28Z","name":"Phishing domain: 0xblast.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Blast. Report & evidence: https://phishdestroy.io/domain/0xblast.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xblast.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-09T23:07:28Z","labels":["malicious-activity","phishing","brand:blast"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0xblast.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb83f8bc-9f01-553c-abf6-52b3959412f9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-26T14:49:07Z","modified":"2026-07-26T14:49:07Z","name":"Phishing domain: 0xblocklayer.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0xblocklayer.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xblocklayer.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-26T14:49:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0xblocklayer.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--645af30e-e677-5ed2-b206-b274f66ff9ff","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T04:03:44Z","modified":"2026-02-13T04:03:44Z","name":"Phishing domain: 0xbox.live","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating dYdX. Report & evidence: https://phishdestroy.io/domain/0xbox.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xbox.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T04:03:44Z","labels":["malicious-activity","phishing","brand:dydx"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0xbox.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5af7b067-e014-5160-91e4-fc2f9c5ffed8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-23T12:26:20Z","modified":"2025-12-23T12:26:20Z","name":"Phishing domain: 0xbox.top","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0xbox.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xbox.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-23T12:26:20Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0xbox.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--885e4641-6e50-5652-8597-4420b5f2bd03","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-20T12:22:12Z","modified":"2026-01-20T12:22:12Z","name":"Phishing domain: 0xbsc.top","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0xbsc.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xbsc.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-20T12:22:12Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0xbsc.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc20da18-6fc1-59cb-800a-ece77dd13ccd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-24T16:27:18Z","modified":"2026-01-24T16:27:18Z","name":"Phishing domain: 0xbscpad.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0xbscpad.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xbscpad.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-24T16:27:18Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0xbscpad.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b7d3d7d-0594-54b8-aa57-cb6d5fac9634","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-18T14:46:11Z","modified":"2026-02-18T14:46:11Z","name":"Phishing domain: 0xbull.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating arbitrum. Report & evidence: https://phishdestroy.io/domain/0xbull.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xbull.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-18T14:46:11Z","labels":["malicious-activity","phishing","brand:arbitrum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0xbull.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--647f07c6-adf6-5e62-85f4-6eceb1a60efb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-28T23:17:32Z","modified":"2026-02-28T23:17:32Z","name":"Phishing domain: 0xbull.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating arbitrum. Report & evidence: https://phishdestroy.io/domain/0xbull.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xbull.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-28T23:17:32Z","labels":["malicious-activity","phishing","brand:arbitrum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0xbull.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4305a8b-cc15-5107-9946-49e82a4f025a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-21T17:14:02Z","modified":"2026-02-21T17:14:02Z","name":"Phishing domain: 0xbulls.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/0xbulls.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xbulls.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-21T17:14:02Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0xbulls.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--489ae517-33fd-553b-842f-592e242cd785","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-08T20:29:06Z","modified":"2026-07-08T20:29:06Z","name":"Phishing domain: 0xburner.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0xburner.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xburner.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-08T20:29:06Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0xburner.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--08b105e2-3d37-5af9-876d-944013b9cb5d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-07-20T07:30:41Z","modified":"2025-07-20T07:30:41Z","name":"Phishing domain: 0xcaldera.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0xcaldera.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xcaldera.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-07-20T07:30:41Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0xcaldera.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--651fc9db-e6be-5b5b-8d5a-4719bc03d369","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-29T11:27:14Z","modified":"2025-12-29T11:27:14Z","name":"Phishing domain: 0xchain.top","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0xchain.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xchain.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-29T11:27:14Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0xchain.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba3ba244-36cc-5a4a-b095-10fa0bca5369","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-24T21:19:41Z","modified":"2026-01-24T21:19:41Z","name":"Phishing domain: 0xdac17f958d2ee523a2206206994597c13d831ec7.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating ethereum. Report & evidence: https://phishdestroy.io/domain/0xdac17f958d2ee523a2206206994597c13d831ec7.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xdac17f958d2ee523a2206206994597c13d831ec7.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-24T21:19:41Z","labels":["malicious-activity","phishing","brand:ethereum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0xdac17f958d2ee523a2206206994597c13d831ec7.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3426c903-1997-5271-9ed9-29468a976a36","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-05T12:18:28Z","modified":"2025-11-05T12:18:28Z","name":"Phishing domain: 0xdapp-shifteasetokenlifymgt.sbs","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating wordpress. Report & evidence: https://phishdestroy.io/domain/0xdapp-shifteasetokenlifymgt.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xdapp-shifteasetokenlifymgt.sbs']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-05T12:18:28Z","labels":["malicious-activity","phishing","brand:wordpress"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0xdapp-shifteasetokenlifymgt.sbs"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d49535dc-a72b-5eab-a6c3-2a1223320e01","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-22T11:21:26Z","modified":"2025-10-22T11:21:26Z","name":"Phishing domain: 0xdegen.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0xdegen.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xdegen.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-22T11:21:26Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0xdegen.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a726e17-e0c3-5fa4-92cf-d5acc1d8fb70","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-14T15:19:40Z","modified":"2025-10-14T15:19:40Z","name":"Phishing domain: 0xdeployer.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0xdeployer.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xdeployer.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-14T15:19:40Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0xdeployer.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aeac379a-65b4-5c6c-8125-b01b3f74a07e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-23T13:06:17Z","modified":"2025-12-23T13:06:17Z","name":"Phishing domain: 0xdx.top","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0xdx.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xdx.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-23T13:06:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0xdx.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0ab0190-fab9-58d9-ad89-92aa55c6d0bd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-31T18:54:14Z","modified":"2026-03-31T18:54:14Z","name":"Phishing domain: 0xe11eb181b936b47e37b8e5bd2e65c79bd71ce86f.online","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating [\"ethereum\"]. Report & evidence: https://phishdestroy.io/domain/0xe11eb181b936b47e37b8e5bd2e65c79bd71ce86f.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xe11eb181b936b47e37b8e5bd2e65c79bd71ce86f.online']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-31T18:54:14Z","labels":["malicious-activity","phishing","brand:[\"ethereum\"]"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0xe11eb181b936b47e37b8e5bd2e65c79bd71ce86f.online"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--20ab993f-5ac8-5bb5-9e28-65927fb344ce","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-03T14:21:33Z","modified":"2025-11-03T14:21:33Z","name":"Phishing domain: 0xeth.shop","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0xeth.shop","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xeth.shop']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-03T14:21:33Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0xeth.shop"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--283fbe97-14d6-5243-9517-41e1aa07ceb8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-01T10:12:33Z","modified":"2025-08-01T10:12:33Z","name":"Phishing domain: 0xethereum.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ethereum. Report & evidence: https://phishdestroy.io/domain/0xethereum.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xethereum.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-01T10:12:33Z","labels":["malicious-activity","phishing","brand:ethereum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0xethereum.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b659b01-b437-5f66-8a17-190b56505098","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-16T19:21:00Z","modified":"2026-02-16T19:21:00Z","name":"Phishing domain: 0xf2.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating discord. Report & evidence: https://phishdestroy.io/domain/0xf2.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xf2.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-16T19:21:00Z","labels":["malicious-activity","phishing","brand:discord"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0xf2.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--123be30f-cf8a-50d1-aacf-26485a948340","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-08T22:05:41Z","modified":"2025-10-08T22:05:41Z","name":"Phishing domain: 0xfluid-vote.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/0xfluid-vote.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xfluid-vote.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-08T22:05:41Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0xfluid-vote.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6447f697-7137-59c5-bae3-48bb34466baf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-31T00:53:08Z","modified":"2026-07-31T00:53:08Z","name":"Phishing domain: 0xfluid.one","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0xfluid.one","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xfluid.one']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-31T00:53:08Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0xfluid.one"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--00a73b07-87e5-565e-8118-5abc3ce5df1a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-21T20:25:40Z","modified":"2026-02-21T20:25:40Z","name":"Phishing domain: 0xhigh.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/0xhigh.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xhigh.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-21T20:25:40Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0xhigh.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a225e1a-fd43-5cac-b24f-d1f19431d8f2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-09T13:07:13Z","modified":"2025-08-09T13:07:13Z","name":"Phishing domain: 0xinuarashi.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0xinuarashi.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xinuarashi.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-09T13:07:13Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0xinuarashi.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b4b1ecc-abd0-53fb-afad-f1485f59ba92","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T12:46:14Z","modified":"2026-02-13T12:46:14Z","name":"Phishing domain: 0xkh9546e0ej5kbl.bond","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Binance. Report & evidence: https://phishdestroy.io/domain/0xkh9546e0ej5kbl.bond","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xkh9546e0ej5kbl.bond']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T12:46:14Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0xkh9546e0ej5kbl.bond"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--88a3bc63-2c55-55a4-9a75-4ec5c27f8a54","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-12T02:02:55Z","modified":"2025-12-12T02:02:55Z","name":"Phishing domain: 0xkowloon.gitbook.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/0xkowloon.gitbook.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xkowloon.gitbook.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-12T02:02:55Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0xkowloon.gitbook.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cb681f5-e748-56c9-968f-94f48ecee316","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-08T08:48:25Z","modified":"2025-08-08T08:48:25Z","name":"Phishing domain: 0xloky-access.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0xloky-access.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xloky-access.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-08T08:48:25Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0xloky-access.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--46165f5d-9f7a-564c-9224-ad0a67db997e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-09T23:07:51Z","modified":"2025-11-09T23:07:51Z","name":"Phishing domain: 0xlp.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0xlp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xlp.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-09T23:07:51Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0xlp.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--adce4ac6-cee8-568d-bca0-3d89bef70340","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-16T07:51:57Z","modified":"2025-09-16T07:51:57Z","name":"Phishing domain: 0xmachi.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0xmachi.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xmachi.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-16T07:51:57Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0xmachi.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--86760ab1-d6ef-56cc-8610-76d72b1dcacd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-26T12:14:43Z","modified":"2025-12-26T12:14:43Z","name":"Phishing domain: 0xmas.top","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0xmas.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xmas.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-26T12:14:43Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0xmas.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--97566719-40ee-5b36-a9fa-8e4f1c101779","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-06T13:16:33Z","modified":"2026-01-06T13:16:33Z","name":"Phishing domain: 0xny.top","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0xny.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xny.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-06T13:16:33Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0xny.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b015c07d-390a-518b-b0f5-80dc1ecfd9ff","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-26T16:31:01Z","modified":"2026-01-26T16:31:01Z","name":"Phishing domain: 0xp1.top","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0xp1.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xp1.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-26T16:31:01Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0xp1.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--23e7e7d6-1166-5c76-85e9-9900433320f1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-27T18:27:13Z","modified":"2026-01-27T18:27:13Z","name":"Phishing domain: 0xp2.top","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0xp2.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xp2.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-27T18:27:13Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0xp2.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cf241cc-0ea2-501b-b378-ce4288890394","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-28T12:29:14Z","modified":"2026-01-28T12:29:14Z","name":"Phishing domain: 0xp27.top","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0xp27.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xp27.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-28T12:29:14Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0xp27.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1107f8f-685f-5bb7-a6ee-359660fd43ef","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-30T14:43:22Z","modified":"2026-01-30T14:43:22Z","name":"Phishing domain: 0xp29.top","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0xp29.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xp29.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-30T14:43:22Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0xp29.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3725b3ad-149f-508f-8a90-e249e0d168a2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-04T21:20:40Z","modified":"2026-04-04T21:20:40Z","name":"Phishing domain: 0xpa.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/0xpa.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xpa.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-04T21:20:40Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0xpa.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6f71f32-b2ff-5f0a-a47f-692fdc1893fd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-23T06:21:28Z","modified":"2025-10-23T06:21:28Z","name":"Phishing domain: 0xpoolstaked.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ethereum. Report & evidence: https://phishdestroy.io/domain/0xpoolstaked.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xpoolstaked.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-23T06:21:28Z","labels":["malicious-activity","phishing","brand:ethereum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0xpoolstaked.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--da46a423-bdbd-5cf6-98d4-9438e2287d4e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-22T20:30:11Z","modified":"2026-02-22T20:30:11Z","name":"Phishing domain: 0xpr.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating arbitrum. Report & evidence: https://phishdestroy.io/domain/0xpr.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xpr.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-22T20:30:11Z","labels":["malicious-activity","phishing","brand:arbitrum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0xpr.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--18beb61e-93ba-5a50-8ddd-d16bf82f3b37","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:55Z","modified":"2026-02-26T23:22:55Z","name":"Phishing domain: 0xpromo.top","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0xpromo.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xpromo.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:55Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0xpromo.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b4007fb-c6bf-54d6-bd00-5a6b3edc3c85","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-23T14:26:51Z","modified":"2026-02-23T14:26:51Z","name":"Phishing domain: 0xprs.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating arbitrum. Report & evidence: https://phishdestroy.io/domain/0xprs.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xprs.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-23T14:26:51Z","labels":["malicious-activity","phishing","brand:arbitrum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0xprs.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6900e9a9-01a4-5ad6-881d-5e44d9ff4bc9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-23T16:10:28Z","modified":"2026-05-23T16:10:28Z","name":"Phishing domain: 0xpv1.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/0xpv1.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xpv1.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-23T16:10:28Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0xpv1.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3265ac7d-80cc-5d07-a6bd-ef7234c813ad","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-17T15:46:54Z","modified":"2026-04-17T15:46:54Z","name":"Phishing domain: 0xqr.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/0xqr.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xqr.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-17T15:46:54Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0xqr.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef181bf2-32aa-5b78-81b0-60fe586066f2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-28T10:37:41Z","modified":"2025-10-28T10:37:41Z","name":"Phishing domain: 0xrewpool.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0xrewpool.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xrewpool.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-28T10:37:41Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0xrewpool.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f893466d-0ddc-58ac-8dca-9f1ce1d23784","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-23T06:21:10Z","modified":"2025-10-23T06:21:10Z","name":"Phishing domain: 0xscanpool.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0xscanpool.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xscanpool.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-23T06:21:10Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0xscanpool.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e388361-9602-5860-96c8-f845ba22a000","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:54Z","modified":"2026-02-26T23:21:54Z","name":"Phishing domain: 0xss.top","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0xss.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xss.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:54Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0xss.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d380b41-e82b-5d45-9492-edc19c7d3789","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-30T11:46:23Z","modified":"2025-12-30T11:46:23Z","name":"Phishing domain: 0xstable.top","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0xstable.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xstable.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-30T11:46:23Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0xstable.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfbdaf73-edad-5c0f-a6a4-0a42c5aed5fa","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T00:48:36Z","modified":"2026-02-26T00:48:36Z","name":"Phishing domain: 0xstitch.fun","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0xstitch.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xstitch.fun']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T00:48:36Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0xstitch.fun"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce147ed8-a381-50fe-a179-7f6b43baf962","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-07-17T14:21:14Z","modified":"2025-07-17T14:21:14Z","name":"Phishing domain: 0xsummer.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0xsummer.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xsummer.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-07-17T14:21:14Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0xsummer.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c668f61-fb33-5df7-ae50-4e47b210e0d4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-30T11:48:30Z","modified":"2025-12-30T11:48:30Z","name":"Phishing domain: 0xsynchain.online","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating wordpress. Report & evidence: https://phishdestroy.io/domain/0xsynchain.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xsynchain.online']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-30T11:48:30Z","labels":["malicious-activity","phishing","brand:wordpress"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0xsynchain.online"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5aca924-5eac-51de-bea5-d828d116849b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-22T14:22:48Z","modified":"2026-02-22T14:22:48Z","name":"Phishing domain: 0xtrends.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/0xtrends.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xtrends.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-22T14:22:48Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0xtrends.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--38f49604-1b61-5ba1-b5af-7ce48df7b4a5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-05T10:28:53Z","modified":"2026-02-05T10:28:53Z","name":"Phishing domain: 0xv4.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/0xv4.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '0xv4.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-05T10:28:53Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/0xv4.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--67c3b7e7-6ad6-5b7c-83d6-9204935f51ef","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-26T17:28:46Z","modified":"2026-03-26T17:28:46Z","name":"Phishing domain: 1-1kr.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Binance. Report & evidence: https://phishdestroy.io/domain/1-1kr.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-1kr.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-26T17:28:46Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1-1kr.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea077a7a-37e6-5ae4-be30-e5750b7d0e19","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-01T12:48:51Z","modified":"2026-05-01T12:48:51Z","name":"Phishing domain: 1-39b.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1-39b.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-39b.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-01T12:48:51Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1-39b.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c217f54c-fe12-5b90-a3fc-7eb1eb9b4066","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-23T00:12:20Z","modified":"2026-06-23T00:12:20Z","name":"Phishing domain: 1-800-contactssucks.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1-800-contactssucks.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-800-contactssucks.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-23T00:12:20Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1-800-contactssucks.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3eae47d-34bb-5a3f-8d25-ae44acdfe412","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-11T14:41:25Z","modified":"2025-10-11T14:41:25Z","name":"Phishing domain: 1-acess2025.dynv6.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/1-acess2025.dynv6.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-acess2025.dynv6.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-11T14:41:25Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1-acess2025.dynv6.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d993021-f0e1-5bc9-8df5-521c91872ff3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-18T16:11:43Z","modified":"2025-10-18T16:11:43Z","name":"Phishing domain: 1-acessando2025.dns.army","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/1-acessando2025.dns.army","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-acessando2025.dns.army']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-18T16:11:43Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1-acessando2025.dns.army"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ffadbba-8110-5415-ba4d-b5338c99ea4b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-25T20:42:53Z","modified":"2026-03-25T20:42:53Z","name":"Phishing domain: 1-collab.land","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating discord. Report & evidence: https://phishdestroy.io/domain/1-collab.land","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-collab.land']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-25T20:42:53Z","labels":["malicious-activity","phishing","brand:discord"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1-collab.land"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfbfecd5-144a-56cd-ab9f-0ee216d8684a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-03T16:45:14Z","modified":"2025-09-03T16:45:14Z","name":"Phishing domain: 1-dex.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Raydium. Report & evidence: https://phishdestroy.io/domain/1-dex.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-dex.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-03T16:45:14Z","labels":["malicious-activity","phishing","brand:raydium"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1-dex.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b472536f-a69d-5882-a388-0c3d8b1a2d71","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-07T15:14:14Z","modified":"2025-12-07T15:14:14Z","name":"Phishing domain: 1-easybank-landing-page-master.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericbanking. Report & evidence: https://phishdestroy.io/domain/1-easybank-landing-page-master.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-easybank-landing-page-master.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-07T15:14:14Z","labels":["malicious-activity","phishing","brand:genericbanking"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1-easybank-landing-page-master.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0de807de-eb23-5d7a-b596-b1b1c4b394d2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T05:49:26Z","modified":"2026-02-13T05:49:26Z","name":"Phishing domain: 1-fuel.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1-fuel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-fuel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T05:49:26Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1-fuel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d0045be-af41-5f3c-9b4c-d7d7ec478286","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-08T01:32:17Z","modified":"2026-08-08T01:32:17Z","name":"Phishing domain: 1-google.com.cn","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/1-google.com.cn","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-google.com.cn']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-08T01:32:17Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1-google.com.cn"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d9a99d6-458e-501e-ab99-b0b2a32d6125","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-04T02:37:54Z","modified":"2025-11-04T02:37:54Z","name":"Phishing domain: 1-in.apac2.coinbase.com.ph","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/1-in.apac2.coinbase.com.ph","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-in.apac2.coinbase.com.ph']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-04T02:37:54Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1-in.apac2.coinbase.com.ph"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--abf0a268-d8ed-577a-9a5d-375a80ecdaa3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-22T07:22:31Z","modified":"2026-01-22T07:22:31Z","name":"Phishing domain: 1-inch.eu.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1-inch.eu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-inch.eu.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-22T07:22:31Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1-inch.eu.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--72be4b7a-a70e-5d25-8834-6327554ee30c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-16T08:04:47Z","modified":"2025-12-16T08:04:47Z","name":"Phishing domain: 1-kra46-at.ru","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1-kra46-at.ru","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-kra46-at.ru']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-16T08:04:47Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1-kra46-at.ru"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--da5e1ae1-b09a-5447-8a60-88ce704ed408","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-16T13:53:01Z","modified":"2025-12-16T13:53:01Z","name":"Phishing domain: 1-krab1-cc.ru","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1-krab1-cc.ru","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-krab1-cc.ru']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-16T13:53:01Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1-krab1-cc.ru"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4e77ff2-a89f-5294-9551-09ffda917690","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-27T23:00:13Z","modified":"2026-02-27T23:00:13Z","name":"Phishing domain: 1-krab5at.ru","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating [\"telegram\"]. Report & evidence: https://phishdestroy.io/domain/1-krab5at.ru","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-krab5at.ru']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-27T23:00:13Z","labels":["malicious-activity","phishing","brand:[\"telegram\"]"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1-krab5at.ru"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2943a4b-0a1a-500f-a09d-9f65d66c2b1d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-29T01:31:51Z","modified":"2026-03-29T01:31:51Z","name":"Phishing domain: 1-krab5cc.ru","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1-krab5cc.ru","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-krab5cc.ru']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-29T01:31:51Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1-krab5cc.ru"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ce08560-459d-5f0f-a70e-6ddde269bc39","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-15T12:56:48Z","modified":"2025-11-15T12:56:48Z","name":"Phishing domain: 1-line.bet","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Linea. Report & evidence: https://phishdestroy.io/domain/1-line.bet","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-line.bet']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-15T12:56:48Z","labels":["malicious-activity","phishing","brand:linea"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1-line.bet"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9b6fc7b-ef24-51fa-80dd-d7eb9a528632","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-24T14:09:44Z","modified":"2026-07-24T14:09:44Z","name":"Phishing domain: 1-line.cloud","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1-line.cloud","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-line.cloud']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-24T14:09:44Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1-line.cloud"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--67eae025-2ae7-5b7b-afe5-5cc5ddd4f358","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-15T08:52:14Z","modified":"2026-05-15T08:52:14Z","name":"Phishing domain: 1-line.vip","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Linea. Report & evidence: https://phishdestroy.io/domain/1-line.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-line.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-15T08:52:14Z","labels":["malicious-activity","phishing","brand:linea"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1-line.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--18747397-38e9-565b-94c8-df1e5d00eeb7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T14:32:45Z","modified":"2026-02-13T14:32:45Z","name":"Phishing domain: 1-mir.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1-mir.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-mir.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T14:32:45Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1-mir.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d44b0c60-9d57-5f57-876b-8956a0e34e87","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-08T15:11:20Z","modified":"2026-08-08T15:11:20Z","name":"Phishing domain: 1-on-sign-sync-online.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1-on-sign-sync-online.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-on-sign-sync-online.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-08T15:11:20Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1-on-sign-sync-online.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3ae97c9-c504-596f-975d-a94e1050123a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-24T12:32:35Z","modified":"2025-10-24T12:32:35Z","name":"Phishing domain: 1-shopify.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1-shopify.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-shopify.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-24T12:32:35Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1-shopify.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--28cc795f-a621-5c73-8f94-172d6863aa76","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-28T07:57:16Z","modified":"2026-03-28T07:57:16Z","name":"Phishing domain: 1-slon3-at.ru","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating [\"kraken\"]. Report & evidence: https://phishdestroy.io/domain/1-slon3-at.ru","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-slon3-at.ru']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-28T07:57:16Z","labels":["malicious-activity","phishing","brand:[\"kraken\"]"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1-slon3-at.ru"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ae0f0d0-e937-52bf-a88b-01d5c49469da","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-28T07:57:15Z","modified":"2026-03-28T07:57:15Z","name":"Phishing domain: 1-slon3at.ru","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating [\"telegram\"]. Report & evidence: https://phishdestroy.io/domain/1-slon3at.ru","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-slon3at.ru']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-28T07:57:15Z","labels":["malicious-activity","phishing","brand:[\"telegram\"]"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1-slon3at.ru"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--48885bd1-3007-53e6-949b-bd79459b1626","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-06T12:59:04Z","modified":"2025-08-06T12:59:04Z","name":"Phishing domain: 1-slots.world","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1-slots.world","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-slots.world']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-06T12:59:04Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1-slots.world"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ad12ea3-9f87-5e7f-8391-6b685afdd70f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-17T09:22:00Z","modified":"2025-10-17T09:22:00Z","name":"Phishing domain: 1-trump.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1-trump.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-trump.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-17T09:22:00Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1-trump.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0422d5f9-10ee-57af-bdb9-875311b96787","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-02T19:53:17Z","modified":"2026-03-02T19:53:17Z","name":"Phishing domain: 1-win.pro","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/1-win.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-win.pro']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-02T19:53:17Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1-win.pro"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--177b6882-9bc3-520a-85bf-e01d2b55ff20","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-20T06:45:48Z","modified":"2026-01-20T06:45:48Z","name":"Phishing domain: 1-win.rest","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/1-win.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-win.rest']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-20T06:45:48Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1-win.rest"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--85b95e2e-a75d-570f-a27a-d9d1f4741aec","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-08T20:32:53Z","modified":"2026-02-08T20:32:53Z","name":"Phishing domain: 1-win.uk","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/1-win.uk","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-win.uk']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-08T20:32:53Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1-win.uk"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f7434e0-8afb-5a1d-bc8a-e400f5c5c0d2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-06T20:07:12Z","modified":"2026-02-06T20:07:12Z","name":"Phishing domain: 1-win.vin","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/1-win.vin","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-win.vin']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-06T20:07:12Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1-win.vin"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--95d6c691-20bf-5376-9cf1-22e94d38f771","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-17T19:08:31Z","modified":"2026-02-17T19:08:31Z","name":"Phishing domain: 1-xbet.club","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1-xbet.club","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-xbet.club']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-17T19:08:31Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1-xbet.club"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a099539-4cc5-57ee-9453-4f2dda744e81","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-06T20:07:24Z","modified":"2026-02-06T20:07:24Z","name":"Phishing domain: 1-xbet.icu","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/1-xbet.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-xbet.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-06T20:07:24Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1-xbet.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--58fc72f8-be80-5bb4-a8d6-261de1cd85d3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-25T15:00:47Z","modified":"2025-12-25T15:00:47Z","name":"Phishing domain: 1-xbet.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/1-xbet.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-xbet.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-25T15:00:47Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1-xbet.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a7184e5-c320-5eff-b5e0-de12353321cd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:40Z","modified":"2026-02-26T23:20:40Z","name":"Phishing domain: 1-xbet.one","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/1-xbet.one","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-xbet.one']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:40Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1-xbet.one"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b22d2e9c-cdaf-592b-9556-3c69bdb5b313","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-20T06:43:42Z","modified":"2026-01-20T06:43:42Z","name":"Phishing domain: 1-xline.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/1-xline.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1-xline.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-20T06:43:42Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1-xline.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4961f65-01d2-5376-8e8a-6cc794e70c08","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-14T01:30:38Z","modified":"2025-12-14T01:30:38Z","name":"Phishing domain: 1.baudokraken.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Kraken. Report & evidence: https://phishdestroy.io/domain/1.baudokraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1.baudokraken.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-14T01:30:38Z","labels":["malicious-activity","phishing","brand:kraken"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1.baudokraken.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1d921e0-51f8-551b-9889-dba8339c7649","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:45Z","modified":"2026-02-26T23:23:45Z","name":"Phishing domain: 1.inch.co.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1.inch.co.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1.inch.co.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:45Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1.inch.co.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0891c934-e926-5c71-90ad-da135e14912c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:33Z","modified":"2026-02-26T23:23:33Z","name":"Phishing domain: 1.inch.it.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1.inch.it.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1.inch.it.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:33Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1.inch.it.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--42ee4a08-9a48-5a61-9d5c-7d86739fa387","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-23T12:31:30Z","modified":"2025-12-23T12:31:30Z","name":"Phishing domain: 1.okx019.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating OKX. Report & evidence: https://phishdestroy.io/domain/1.okx019.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1.okx019.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-23T12:31:30Z","labels":["malicious-activity","phishing","brand:okx"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1.okx019.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbabb33f-c1b3-52a4-a45a-ced7a26c633b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-13T22:54:37Z","modified":"2026-07-13T22:54:37Z","name":"Phishing domain: 10-07-pasiaugos.info","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/10-07-pasiaugos.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10-07-pasiaugos.info']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-13T22:54:37Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/10-07-pasiaugos.info"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1274fd20-17c7-52cf-8796-fcc15b10581a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T14:33:07Z","modified":"2026-02-13T14:33:07Z","name":"Phishing domain: 10-mir.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/10-mir.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10-mir.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T14:33:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/10-mir.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9caec94b-8074-5915-87c6-2193fb41127b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-07T09:06:37Z","modified":"2026-01-07T09:06:37Z","name":"Phishing domain: 10-xcapital.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating argent. Report & evidence: https://phishdestroy.io/domain/10-xcapital.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10-xcapital.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-07T09:06:37Z","labels":["malicious-activity","phishing","brand:argent"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/10-xcapital.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5a5b0c8-90d3-5f6d-84bb-f7c2eff0bba8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-03T11:38:22Z","modified":"2026-05-03T11:38:22Z","name":"Phishing domain: 100-likes-roblox-game.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Roblox. Report & evidence: https://phishdestroy.io/domain/100-likes-roblox-game.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '100-likes-roblox-game.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-03T11:38:22Z","labels":["malicious-activity","phishing","brand:roblox"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/100-likes-roblox-game.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5114cfd4-ac3d-5dad-90c0-3378cfe7c614","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-17T11:11:50Z","modified":"2026-02-17T11:11:50Z","name":"Phishing domain: 100-test-100.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating cryptoscam. Report & evidence: https://phishdestroy.io/domain/100-test-100.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '100-test-100.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-17T11:11:50Z","labels":["malicious-activity","phishing","brand:cryptoscam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/100-test-100.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--631672e4-c287-5951-ae77-069ed44b3ee0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-18T16:33:05Z","modified":"2026-02-18T16:33:05Z","name":"Phishing domain: 100-test-101.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/100-test-101.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '100-test-101.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-18T16:33:05Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/100-test-101.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--110918b2-b267-54ea-bdb1-33edd2c80270","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-02T02:21:38Z","modified":"2026-08-02T02:21:38Z","name":"Phishing domain: 10000mutual.blogspot.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating instagram. Report & evidence: https://phishdestroy.io/domain/10000mutual.blogspot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10000mutual.blogspot.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-02T02:21:38Z","labels":["malicious-activity","phishing","brand:instagram"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/10000mutual.blogspot.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f20596e7-795f-5b1d-b80d-04777a9d40c9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-19T16:58:14Z","modified":"2026-02-19T16:58:14Z","name":"Phishing domain: 10001311.dojiner.at","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating steam. Report & evidence: https://phishdestroy.io/domain/10001311.dojiner.at","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10001311.dojiner.at']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-19T16:58:14Z","labels":["malicious-activity","phishing","brand:steam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/10001311.dojiner.at"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5abc6a9b-0af0-5033-9298-5394510e35f8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-21T10:41:35Z","modified":"2025-12-21T10:41:35Z","name":"Phishing domain: 10007.vip","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/10007.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10007.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-21T10:41:35Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/10007.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d3584ea-86a2-54b1-baf1-703e06b5ecb5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:04Z","modified":"2026-02-26T23:24:04Z","name":"Phishing domain: 1000easy-level.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1000easy-level.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1000easy-level.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:04Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1000easy-level.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9068a70-7833-5300-9177-dc9a2664ab23","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-02T02:24:30Z","modified":"2025-11-02T02:24:30Z","name":"Phishing domain: 1000xdrop.info","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating foundation. Report & evidence: https://phishdestroy.io/domain/1000xdrop.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1000xdrop.info']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-02T02:24:30Z","labels":["malicious-activity","phishing","brand:foundation"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1000xdrop.info"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--09e1ed76-e193-5fd4-8e0a-a155bb0a2a8f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T18:40:07Z","modified":"2026-08-09T18:40:07Z","name":"Phishing domain: 100150coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/100150coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '100150coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T18:40:07Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/100150coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--779af620-4dc4-5f1b-911c-a43737d88ece","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-27T07:52:37Z","modified":"2026-02-27T07:52:37Z","name":"Phishing domain: 10032marsbahis.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/10032marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10032marsbahis.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-27T07:52:37Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/10032marsbahis.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--187fa5d1-1e62-5440-a7c0-85fcb5542ffe","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-05T18:40:10Z","modified":"2026-08-05T18:40:10Z","name":"Phishing domain: 1005kingroyal.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1005kingroyal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1005kingroyal.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-05T18:40:10Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1005kingroyal.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce95817b-a881-5acd-b2f9-951acac33277","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-10T11:08:29Z","modified":"2026-07-10T11:08:29Z","name":"Phishing domain: 100925kraken.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Kraken. Report & evidence: https://phishdestroy.io/domain/100925kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '100925kraken.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-10T11:08:29Z","labels":["malicious-activity","phishing","brand:kraken"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/100925kraken.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--af2dace4-994e-5906-a49e-a9315a1fc9e9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-28T15:48:00Z","modified":"2026-06-28T15:48:00Z","name":"Phishing domain: 100cucitp.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/100cucitp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '100cucitp.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-28T15:48:00Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/100cucitp.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--40982773-d30f-50ec-b269-7c915624a6d9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-09T14:09:44Z","modified":"2025-08-09T14:09:44Z","name":"Phishing domain: 100jili8.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating chase. Report & evidence: https://phishdestroy.io/domain/100jili8.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '100jili8.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-09T14:09:44Z","labels":["malicious-activity","phishing","brand:chase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/100jili8.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7912146-e5f6-592b-b9e3-733538851fec","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-03T14:00:39Z","modified":"2025-12-03T14:00:39Z","name":"Phishing domain: 100k4yo.netlify.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating roblox. Report & evidence: https://phishdestroy.io/domain/100k4yo.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '100k4yo.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-03T14:00:39Z","labels":["malicious-activity","phishing","brand:roblox"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/100k4yo.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c67002c4-bd92-5d76-b637-432fe898af94","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: 100mg-hyclate-doxycycline.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/100mg-hyclate-doxycycline.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '100mg-hyclate-doxycycline.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/100mg-hyclate-doxycycline.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3debae7-15a9-5d4f-96da-f3d880e9b31a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-08T15:36:30Z","modified":"2026-04-08T15:36:30Z","name":"Phishing domain: 100queenbet.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/100queenbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '100queenbet.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-08T15:36:30Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/100queenbet.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4e1843f-48fd-5ad3-bebe-0b9b0b694170","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-09T23:07:28Z","modified":"2025-11-09T23:07:28Z","name":"Phishing domain: 100x-airdrop.online","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/100x-airdrop.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '100x-airdrop.online']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-09T23:07:28Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/100x-airdrop.online"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ff32d82-c090-5565-9fd3-7b8270e20ab6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-20T17:00:22Z","modified":"2025-09-20T17:00:22Z","name":"Phishing domain: 100xcopyoption.live","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/100xcopyoption.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '100xcopyoption.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-20T17:00:22Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/100xcopyoption.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ac703ba-1aec-553d-909b-1cc1ccb4bd34","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-20T17:00:23Z","modified":"2025-09-20T17:00:23Z","name":"Phishing domain: 100xglobalgainfare.click","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/100xglobalgainfare.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '100xglobalgainfare.click']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-20T17:00:23Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/100xglobalgainfare.click"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a67632e-e146-53da-9bc0-09b689dd0fb3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T07:02:12Z","modified":"2026-07-27T07:02:12Z","name":"Phishing domain: 100xliquidityvault.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Investment Scam. Report & evidence: https://phishdestroy.io/domain/100xliquidityvault.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '100xliquidityvault.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T07:02:12Z","labels":["malicious-activity","phishing","brand:investment scam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/100xliquidityvault.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3ee31e8-d9c3-572b-9631-7cb9eee02697","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T23:36:17Z","modified":"2026-08-09T23:36:17Z","name":"Phishing domain: 100xliquidityvault.com.shepherdsolicitors.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/100xliquidityvault.com.shepherdsolicitors.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '100xliquidityvault.com.shepherdsolicitors.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T23:36:17Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/100xliquidityvault.com.shepherdsolicitors.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--278bdfd3-12d3-5f84-b9c7-28373df6c427","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-04T15:07:57Z","modified":"2025-08-04T15:07:57Z","name":"Phishing domain: 100xslot.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating blast. Report & evidence: https://phishdestroy.io/domain/100xslot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '100xslot.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-04T15:07:57Z","labels":["malicious-activity","phishing","brand:blast"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/100xslot.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c44c0e1-44ab-549a-a3cc-d10917be5c4e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-19T08:05:57Z","modified":"2025-10-19T08:05:57Z","name":"Phishing domain: 100xtrade.pro","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating chase. Report & evidence: https://phishdestroy.io/domain/100xtrade.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '100xtrade.pro']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-19T08:05:57Z","labels":["malicious-activity","phishing","brand:chase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/100xtrade.pro"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f24abc29-286f-56c1-9fcb-902e6c6e56bf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-09T23:08:05Z","modified":"2025-11-09T23:08:05Z","name":"Phishing domain: 1010.top","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1010.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1010.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-09T23:08:05Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1010.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--740852b7-2f1a-5f4c-a0e0-658ca4e99825","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-10T12:18:37Z","modified":"2026-07-10T12:18:37Z","name":"Phishing domain: 10115bets10.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/10115bets10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10115bets10.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-10T12:18:37Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/10115bets10.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a628c29-84ec-5282-a3d4-d9dbe195bf0a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-30T15:56:09Z","modified":"2026-07-30T15:56:09Z","name":"Phishing domain: 10120bets10.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating mastercard. Report & evidence: https://phishdestroy.io/domain/10120bets10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10120bets10.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-30T15:56:09Z","labels":["malicious-activity","phishing","brand:mastercard"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/10120bets10.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--30e885e8-01b4-544b-98fc-76b05a7a5653","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-24T17:55:23Z","modified":"2026-06-24T17:55:23Z","name":"Phishing domain: 1015kingroyal.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1015kingroyal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1015kingroyal.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-24T17:55:23Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1015kingroyal.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0d0d5d0-55d0-58cc-a16f-2ed25447dc56","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T18:40:07Z","modified":"2026-08-09T18:40:07Z","name":"Phishing domain: 1017kingroyal.co","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/1017kingroyal.co","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1017kingroyal.co']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T18:40:07Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1017kingroyal.co"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b21427fd-9460-5c4b-897a-b59e6381b25b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-05T13:53:19Z","modified":"2026-01-05T13:53:19Z","name":"Phishing domain: 101bet.us","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/101bet.us","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '101bet.us']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-05T13:53:19Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/101bet.us"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fbfcade-8d2c-5a60-9081-91eb7578b50d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-27T01:12:09Z","modified":"2026-03-27T01:12:09Z","name":"Phishing domain: 101dumps.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/101dumps.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '101dumps.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-27T01:12:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/101dumps.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--49df85ec-0efd-512c-97b0-816455b50e9c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-11T03:05:09Z","modified":"2026-04-11T03:05:09Z","name":"Phishing domain: 101m.next-cryptolist.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/101m.next-cryptolist.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '101m.next-cryptolist.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-11T03:05:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/101m.next-cryptolist.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f14b0255-154d-5f53-a9e1-bd269948d207","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 101silver.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/101silver.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '101silver.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/101silver.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9785f864-6c6a-519e-af35-61828fe6837b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:04Z","modified":"2026-02-26T23:21:04Z","name":"Phishing domain: 101x.info","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/101x.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '101x.info']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:04Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/101x.info"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bbbce91-0db2-52c9-adb9-2b250bc6b16f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-15T01:03:27Z","modified":"2025-10-15T01:03:27Z","name":"Phishing domain: 102025-gemini.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/102025-gemini.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '102025-gemini.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-15T01:03:27Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/102025-gemini.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--be018df3-e159-522d-9be6-b32f4abd59d0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:17Z","modified":"2026-07-27T06:02:17Z","name":"Phishing domain: 1023.pw","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1023.pw","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1023.pw']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1023.pw"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf44fd9e-da16-5f9d-9ade-c6797387d36c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 102863746165.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/102863746165.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '102863746165.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/102863746165.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc32a6ee-b08e-5ba2-ac73-fc4e32c238a6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-02T16:44:11Z","modified":"2026-03-02T16:44:11Z","name":"Phishing domain: 103-187-146-157.cpanel.site","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating dana. Report & evidence: https://phishdestroy.io/domain/103-187-146-157.cpanel.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '103-187-146-157.cpanel.site']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-02T16:44:11Z","labels":["malicious-activity","phishing","brand:dana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/103-187-146-157.cpanel.site"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--95b86692-2cab-56b1-bfe3-e1fe44ae7cc6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-28T18:18:48Z","modified":"2026-02-28T18:18:48Z","name":"Phishing domain: 1034marsbahisi.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1034marsbahisi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1034marsbahisi.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-28T18:18:48Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1034marsbahisi.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8f9e855-8d96-5412-be6a-ce353e341e9a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 10361652.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/10361652.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10361652.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/10361652.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--83d8772f-5554-5209-8e23-8468fbdb061b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-28T18:50:24Z","modified":"2026-02-28T18:50:24Z","name":"Phishing domain: 1038marsbahisi.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1038marsbahisi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1038marsbahisi.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-28T18:50:24Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1038marsbahisi.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc529a5d-06fa-53f8-a7f1-3408bdc1fb75","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:49Z","modified":"2026-02-26T23:20:49Z","name":"Phishing domain: 104-236-34-62.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/104-236-34-62.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '104-236-34-62.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:49Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/104-236-34-62.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d34d80b-a53d-5ae1-9673-b69bda05e493","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-07T11:22:19Z","modified":"2025-11-07T11:22:19Z","name":"Phishing domain: 104.233.194.10.nip.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/104.233.194.10.nip.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '104.233.194.10.nip.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-07T11:22:19Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/104.233.194.10.nip.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3105bdb4-ddb2-5510-b401-563e18ec3777","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-26T15:13:30Z","modified":"2026-07-26T15:13:30Z","name":"Phishing domain: 104365-ticket.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/104365-ticket.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '104365-ticket.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-26T15:13:30Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/104365-ticket.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--64793213-4be7-54ca-a298-32d99c362881","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-02T16:20:13Z","modified":"2025-12-02T16:20:13Z","name":"Phishing domain: 10487-trezor.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Trezor. Report & evidence: https://phishdestroy.io/domain/10487-trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10487-trezor.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-02T16:20:13Z","labels":["malicious-activity","phishing","brand:trezor"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/10487-trezor.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3e987bf-2d91-5743-aa2a-78f1eb6ddc44","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-28T18:22:49Z","modified":"2026-02-28T18:22:49Z","name":"Phishing domain: 1055galabet.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1055galabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1055galabet.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-28T18:22:49Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1055galabet.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c89d5cad-be50-58b4-b431-09e987f8f429","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-31T04:32:02Z","modified":"2025-08-31T04:32:02Z","name":"Phishing domain: 105633111.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/105633111.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '105633111.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-31T04:32:02Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/105633111.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1699339-5e37-5a74-886f-ea4f15d34be7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T14:11:54Z","modified":"2026-06-15T14:11:54Z","name":"Phishing domain: 105633222.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/105633222.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '105633222.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T14:11:54Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/105633222.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a21a4312-fae3-5a72-95fc-d34247f49c1a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-30T20:22:12Z","modified":"2026-06-30T20:22:12Z","name":"Phishing domain: 105633333.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/105633333.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '105633333.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-30T20:22:12Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/105633333.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--be9d7728-4341-501f-8844-931baaec6ed5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-18T13:17:34Z","modified":"2026-06-18T13:17:34Z","name":"Phishing domain: 105655222.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/105655222.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '105655222.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-18T13:17:34Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/105655222.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b723571-ae8d-5e5b-8629-8b21ea67fe51","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-10T14:20:24Z","modified":"2026-06-10T14:20:24Z","name":"Phishing domain: 105655777.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/105655777.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '105655777.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-10T14:20:24Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/105655777.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdc33d83-e65b-50dd-b127-22e9221f16ee","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T14:05:51Z","modified":"2026-01-02T14:05:51Z","name":"Phishing domain: 1056ww.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating gmail. Report & evidence: https://phishdestroy.io/domain/1056ww.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1056ww.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T14:05:51Z","labels":["malicious-activity","phishing","brand:gmail"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1056ww.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--74a35ec3-18b7-5248-96c5-d34d26e54f30","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-28T18:50:33Z","modified":"2026-02-28T18:50:33Z","name":"Phishing domain: 1058galabet.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1058galabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1058galabet.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-28T18:50:33Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1058galabet.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--04e49877-d907-55ec-b397-85226d6240f8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-07T15:49:42Z","modified":"2026-03-07T15:49:42Z","name":"Phishing domain: 1063galabet.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating galabet. Report & evidence: https://phishdestroy.io/domain/1063galabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1063galabet.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-07T15:49:42Z","labels":["malicious-activity","phishing","brand:galabet"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1063galabet.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea21af22-1fa4-5295-8ed4-79a89215b898","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:44:56Z","modified":"2026-07-27T04:44:56Z","name":"Phishing domain: 10700.tw","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/10700.tw","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10700.tw']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:44:56Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/10700.tw"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--84c7c7fc-06e7-5997-98ce-e7a3ebbad7e6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-13T22:54:49Z","modified":"2026-07-13T22:54:49Z","name":"Phishing domain: 107389coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/107389coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '107389coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-13T22:54:49Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/107389coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b88ff43e-bd5c-5b86-9bac-a177583d1b0c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-01T20:45:56Z","modified":"2026-08-01T20:45:56Z","name":"Phishing domain: 107casibom.cam","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/107casibom.cam","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '107casibom.cam']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-01T20:45:56Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/107casibom.cam"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e82ea5d-ee00-56dc-b4b3-9079d5b8f2b3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-03T14:05:15Z","modified":"2025-12-03T14:05:15Z","name":"Phishing domain: 108283b.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating unicredit. Report & evidence: https://phishdestroy.io/domain/108283b.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '108283b.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-03T14:05:15Z","labels":["malicious-activity","phishing","brand:unicredit"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/108283b.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdfa168b-7cf4-5ad0-b9d2-50cd7fb17b9d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-13T23:00:53Z","modified":"2026-07-13T23:00:53Z","name":"Phishing domain: 108738coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/108738coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '108738coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-13T23:00:53Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/108738coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5f14ae8-60f1-58ad-b6de-33113c447566","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-08T02:28:04Z","modified":"2025-12-08T02:28:04Z","name":"Phishing domain: 108909-cb.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/108909-cb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '108909-cb.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-08T02:28:04Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/108909-cb.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a834339e-3f24-5905-9454-04f21562106d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-11T16:57:20Z","modified":"2026-07-11T16:57:20Z","name":"Phishing domain: 108ulrabet.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/108ulrabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '108ulrabet.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-11T16:57:20Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/108ulrabet.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5047178-78d6-5943-8f33-47d6ed968ad8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-11T18:32:03Z","modified":"2026-08-11T18:32:03Z","name":"Phishing domain: 10920c.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/10920c.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10920c.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-11T18:32:03Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/10920c.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4fd93f8-55c9-530f-9616-a098eb37e8fc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-24T13:28:54Z","modified":"2026-01-24T13:28:54Z","name":"Phishing domain: 10975biogdf843er9gbc.cyou","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/10975biogdf843er9gbc.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10975biogdf843er9gbc.cyou']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-24T13:28:54Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/10975biogdf843er9gbc.cyou"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--38e50301-11e9-5f97-8583-94e146fccb45","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-13T22:54:51Z","modified":"2026-07-13T22:54:51Z","name":"Phishing domain: 109952coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/109952coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '109952coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-13T22:54:51Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/109952coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--141b2c74-e720-5187-9a00-d3eae69cfa26","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-11T14:34:59Z","modified":"2026-06-11T14:34:59Z","name":"Phishing domain: 109tyesy.vercel.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/109tyesy.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '109tyesy.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-11T14:34:59Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/109tyesy.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ac3c1ab-638c-5f01-833f-0d6bff08c0c1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-06T17:17:28Z","modified":"2026-03-06T17:17:28Z","name":"Phishing domain: 10betbrazil.bet","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/10betbrazil.bet","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10betbrazil.bet']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-06T17:17:28Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/10betbrazil.bet"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5319c216-736a-5b9a-8c55-e7a01c09ea51","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-06T17:17:23Z","modified":"2026-03-06T17:17:23Z","name":"Phishing domain: 10betmexico.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/10betmexico.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10betmexico.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-06T17:17:23Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/10betmexico.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e94c2ae6-8ea6-58d1-8fd2-10423761d262","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-06T17:20:14Z","modified":"2026-03-06T17:20:14Z","name":"Phishing domain: 10betplaybrasil.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating counter-strike. Report & evidence: https://phishdestroy.io/domain/10betplaybrasil.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10betplaybrasil.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-06T17:20:14Z","labels":["malicious-activity","phishing","brand:counter-strike"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/10betplaybrasil.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca8fbaad-9987-5af3-8f3f-10856f76998f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-15T22:00:05Z","modified":"2025-11-15T22:00:05Z","name":"Phishing domain: 10bnb.cfd","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating base. Report & evidence: https://phishdestroy.io/domain/10bnb.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10bnb.cfd']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-15T22:00:05Z","labels":["malicious-activity","phishing","brand:base"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/10bnb.cfd"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--68caa1ae-529c-540e-af51-fc93136f7c81","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T15:49:20Z","modified":"2026-08-09T15:49:20Z","name":"Phishing domain: 10ed95.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/10ed95.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10ed95.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T15:49:20Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/10ed95.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e79cc941-6324-529c-9224-fe7bb6e60899","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:42Z","modified":"2026-02-26T23:22:42Z","name":"Phishing domain: 10eth.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/10eth.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10eth.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:42Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/10eth.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2d8ee42-7cd5-5783-a61d-bca8a34f261e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-31T14:15:23Z","modified":"2026-07-31T14:15:23Z","name":"Phishing domain: 10k--robux2026.blogspot.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating roblox. Report & evidence: https://phishdestroy.io/domain/10k--robux2026.blogspot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10k--robux2026.blogspot.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-31T14:15:23Z","labels":["malicious-activity","phishing","brand:roblox"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/10k--robux2026.blogspot.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3116a23f-8fd0-531d-97e1-4a34697d28cf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-12T14:17:37Z","modified":"2026-02-12T14:17:37Z","name":"Phishing domain: 10mbeforevaientine.online","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/10mbeforevaientine.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10mbeforevaientine.online']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-12T14:17:37Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/10mbeforevaientine.online"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1dcde498-9db0-590a-8a8b-6c5b157b170c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-19T17:23:32Z","modified":"2026-02-19T17:23:32Z","name":"Phishing domain: 10pay.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/10pay.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10pay.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-19T17:23:32Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/10pay.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b2de5ef-aad6-5550-bc1c-955bc06be038","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-09T09:49:05Z","modified":"2026-03-09T09:49:05Z","name":"Phishing domain: 10thyeareth.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ethereum. Report & evidence: https://phishdestroy.io/domain/10thyeareth.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10thyeareth.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-09T09:49:05Z","labels":["malicious-activity","phishing","brand:ethereum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/10thyeareth.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4da7793e-fa27-5b47-a20a-a0e26b84f491","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-07T09:07:04Z","modified":"2026-01-07T09:07:04Z","name":"Phishing domain: 10x-capital.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating argent. Report & evidence: https://phishdestroy.io/domain/10x-capital.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10x-capital.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-07T09:07:04Z","labels":["malicious-activity","phishing","brand:argent"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/10x-capital.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--62516f9f-fe35-5199-b8db-b8c62aeee1f1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:42:00Z","modified":"2026-07-27T04:42:00Z","name":"Phishing domain: 10xbet.club","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/10xbet.club","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10xbet.club']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:42:00Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/10xbet.club"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--68221227-2e0e-5bf1-9a54-9ea1e4d63904","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T18:40:07Z","modified":"2026-08-09T18:40:07Z","name":"Phishing domain: 10xra.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/10xra.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10xra.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T18:40:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/10xra.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--45ef4de6-9b73-5c3e-85bc-4a36a85b74d6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-12T15:23:21Z","modified":"2026-02-12T15:23:21Z","name":"Phishing domain: 10xtradio.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating [\"across\"]. Report & evidence: https://phishdestroy.io/domain/10xtradio.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10xtradio.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-12T15:23:21Z","labels":["malicious-activity","phishing","brand:[\"across\"]"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/10xtradio.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8005f2b0-ca4b-5916-ac14-a21d42ae3f32","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-21T18:17:32Z","modified":"2026-02-21T18:17:32Z","name":"Phishing domain: 10yearminting.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ethereum. Report & evidence: https://phishdestroy.io/domain/10yearminting.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10yearminting.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-21T18:17:32Z","labels":["malicious-activity","phishing","brand:ethereum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/10yearminting.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcb06688-1d1c-5cc1-8585-a95bc558c518","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-05T16:46:52Z","modified":"2026-03-05T16:46:52Z","name":"Phishing domain: 10yearseth.pro","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ethereum. Report & evidence: https://phishdestroy.io/domain/10yearseth.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10yearseth.pro']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-05T16:46:52Z","labels":["malicious-activity","phishing","brand:ethereum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/10yearseth.pro"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d7e4ab8-7273-54ef-b6b8-da1efd86ee70","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-27T06:19:08Z","modified":"2026-02-27T06:19:08Z","name":"Phishing domain: 10yearsgifts.click","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/10yearsgifts.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10yearsgifts.click']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-27T06:19:08Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/10yearsgifts.click"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--31cabe44-8df3-562d-833b-563f530d373c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-11T04:34:00Z","modified":"2026-03-11T04:34:00Z","name":"Phishing domain: 10yearsofeth.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ethereum. Report & evidence: https://phishdestroy.io/domain/10yearsofeth.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10yearsofeth.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-11T04:34:00Z","labels":["malicious-activity","phishing","brand:ethereum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/10yearsofeth.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e3280c5-1ce6-5ee7-b76c-3aa7f99fcd78","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-18T19:08:32Z","modified":"2026-07-18T19:08:32Z","name":"Phishing domain: 10yogesh10.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating netflix. Report & evidence: https://phishdestroy.io/domain/10yogesh10.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '10yogesh10.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-18T19:08:32Z","labels":["malicious-activity","phishing","brand:netflix"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/10yogesh10.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3db20f51-62f5-5d45-abdc-1d5b206a9fc9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-02T12:17:20Z","modified":"2026-06-02T12:17:20Z","name":"Phishing domain: 11-cfm.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Rabby. Report & evidence: https://phishdestroy.io/domain/11-cfm.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11-cfm.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-02T12:17:20Z","labels":["malicious-activity","phishing","brand:rabby"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/11-cfm.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ad43ed5-f6eb-5b06-a936-d1979d09232e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-13T04:17:21Z","modified":"2026-06-13T04:17:21Z","name":"Phishing domain: 11-ese.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/11-ese.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11-ese.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-13T04:17:21Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/11-ese.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4dbe49cd-05ea-5e96-aa30-856aacd4abb4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-22T12:07:52Z","modified":"2026-06-22T12:07:52Z","name":"Phishing domain: 11-icloud.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Apple. Report & evidence: https://phishdestroy.io/domain/11-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11-icloud.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-22T12:07:52Z","labels":["malicious-activity","phishing","brand:apple"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/11-icloud.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cb051b9-fdcb-5df6-802b-89b50eb24a4e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 11061652.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/11061652.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11061652.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/11061652.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f455bb4-460e-562c-9c44-d844261372bc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-28T18:34:13Z","modified":"2026-02-28T18:34:13Z","name":"Phishing domain: 1106marsbahis.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/1106marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1106marsbahis.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-28T18:34:13Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1106marsbahis.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d496f97-8457-5e68-8829-32f9fa12da32","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-28T10:19:57Z","modified":"2026-05-28T10:19:57Z","name":"Phishing domain: 111-3vr.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/111-3vr.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '111-3vr.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-28T10:19:57Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/111-3vr.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cda683e-3104-5e60-bf03-f52d36e698b7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-06T00:34:55Z","modified":"2025-12-06T00:34:55Z","name":"Phishing domain: 1111111111xzc.sbs","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1111111111xzc.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1111111111xzc.sbs']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-06T00:34:55Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1111111111xzc.sbs"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ced6a629-f682-5c70-80c6-dc84205e2867","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-30T19:53:22Z","modified":"2026-04-30T19:53:22Z","name":"Phishing domain: 11111121.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/11111121.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11111121.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-30T19:53:22Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/11111121.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9790b7d5-a77e-5c09-9802-1b01357751c6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-05T16:03:03Z","modified":"2025-12-05T16:03:03Z","name":"Phishing domain: 1111365wz.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating gmail. Report & evidence: https://phishdestroy.io/domain/1111365wz.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1111365wz.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-05T16:03:03Z","labels":["malicious-activity","phishing","brand:gmail"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1111365wz.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--de0463a4-3fd1-5aa7-bca6-779c58cb66d9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-04T15:03:56Z","modified":"2026-01-04T15:03:56Z","name":"Phishing domain: 1111365zw.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating gmail. Report & evidence: https://phishdestroy.io/domain/1111365zw.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1111365zw.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-04T15:03:56Z","labels":["malicious-activity","phishing","brand:gmail"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1111365zw.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb8d5816-65a3-5b96-8dbf-06e6919f5bec","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-28T18:37:29Z","modified":"2026-02-28T18:37:29Z","name":"Phishing domain: 1114betasus.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1114betasus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1114betasus.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-28T18:37:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1114betasus.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--398b65b8-7892-5648-be9d-556ae338c03a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-04T20:01:03Z","modified":"2026-03-04T20:01:03Z","name":"Phishing domain: 111htxpj.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating HTX. Report & evidence: https://phishdestroy.io/domain/111htxpj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '111htxpj.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-04T20:01:03Z","labels":["malicious-activity","phishing","brand:htx"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/111htxpj.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c5e2aa6-3f48-5564-ab2b-90a8dfc0d64c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-04T14:18:25Z","modified":"2026-03-04T14:18:25Z","name":"Phishing domain: 111pj8.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericgambling. Report & evidence: https://phishdestroy.io/domain/111pj8.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '111pj8.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-04T14:18:25Z","labels":["malicious-activity","phishing","brand:genericgambling"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/111pj8.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3ac966d-7649-56e4-9dcd-aeaf2d28161b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-03T09:51:52Z","modified":"2025-09-03T09:51:52Z","name":"Phishing domain: 11223.academy","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/11223.academy","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11223.academy']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-03T09:51:52Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/11223.academy"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--85c25a53-c296-506d-896e-3ec1a152d05d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 11229126.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/11229126.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11229126.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/11229126.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e44f2c3c-4cef-5384-b432-81a9242efaba","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-22T17:59:00Z","modified":"2026-02-22T17:59:00Z","name":"Phishing domain: 1124243453453.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1124243453453.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1124243453453.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-22T17:59:00Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1124243453453.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa16b4b6-97ae-5a84-bd8a-fb62debac839","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-28T18:10:43Z","modified":"2026-02-28T18:10:43Z","name":"Phishing domain: 1124ultrabet.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1124ultrabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1124ultrabet.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-28T18:10:43Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1124ultrabet.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--07c57e87-e220-534e-8768-3378f13a3c51","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-04T01:10:11Z","modified":"2026-03-04T01:10:11Z","name":"Phishing domain: 1125xpj.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericgambling. Report & evidence: https://phishdestroy.io/domain/1125xpj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1125xpj.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-04T01:10:11Z","labels":["malicious-activity","phishing","brand:genericgambling"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1125xpj.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8468049a-88da-5b09-be4b-fbca1bec9ce9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-22T15:02:55Z","modified":"2025-12-22T15:02:55Z","name":"Phishing domain: 1126ea0c.bfhjbfhjfh.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/1126ea0c.bfhjbfhjfh.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1126ea0c.bfhjbfhjfh.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-22T15:02:55Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1126ea0c.bfhjbfhjfh.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f3e3747-8156-5b32-a229-c77edde8c5ca","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-16T14:29:02Z","modified":"2026-06-16T14:29:02Z","name":"Phishing domain: 11365app.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/11365app.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11365app.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-16T14:29:02Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/11365app.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2678827e-7b92-5dfb-8ad8-145886c7117f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:09Z","modified":"2026-02-26T23:22:09Z","name":"Phishing domain: 114030coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/114030coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '114030coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:09Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/114030coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--088a2e0b-516b-543a-ba9f-c9cbf5a6e5ca","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-22T11:19:50Z","modified":"2025-10-22T11:19:50Z","name":"Phishing domain: 1143zoom.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating godaddy. Report & evidence: https://phishdestroy.io/domain/1143zoom.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1143zoom.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-22T11:19:50Z","labels":["malicious-activity","phishing","brand:godaddy"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1143zoom.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9451a1b6-e651-5fe4-91ac-42d7d1468497","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:24Z","modified":"2026-02-26T23:23:24Z","name":"Phishing domain: 114514.allocated.live","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/114514.allocated.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '114514.allocated.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:24Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/114514.allocated.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e06bb596-9736-50fc-834b-5d73d00a4995","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-07T18:52:34Z","modified":"2026-01-07T18:52:34Z","name":"Phishing domain: 114514.exchange","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/114514.exchange","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '114514.exchange']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-07T18:52:34Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/114514.exchange"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--14f8f6fa-c105-5b47-9097-38ad07d659e5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-05T19:59:20Z","modified":"2026-01-05T19:59:20Z","name":"Phishing domain: 114514meme.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/114514meme.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '114514meme.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-05T19:59:20Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/114514meme.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--389b8855-7996-5c37-aaeb-17a546a4062e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:14Z","modified":"2026-02-26T23:24:14Z","name":"Phishing domain: 114514meme.click","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/114514meme.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '114514meme.click']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:14Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/114514meme.click"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--65177bc9-67ee-5d66-bcc2-eef8e1e396ee","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-12T23:01:07Z","modified":"2026-02-12T23:01:07Z","name":"Phishing domain: 114514meme.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/114514meme.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '114514meme.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-12T23:01:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/114514meme.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--33830fb7-9a24-5ec0-8485-cc02ffc576ec","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-26T10:43:09Z","modified":"2026-01-26T10:43:09Z","name":"Phishing domain: 115.goldslots.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/115.goldslots.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '115.goldslots.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-26T10:43:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/115.goldslots.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--db278da3-4aa7-513d-8950-850925cd4b12","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:21Z","modified":"2026-02-26T23:22:21Z","name":"Phishing domain: 115224-crypto.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Crypto.com. Report & evidence: https://phishdestroy.io/domain/115224-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '115224-crypto.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:21Z","labels":["malicious-activity","phishing","brand:crypto.com"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/115224-crypto.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--baaaab38-3b08-53e5-a0c0-930b368fdb48","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-01T05:48:37Z","modified":"2026-07-01T05:48:37Z","name":"Phishing domain: 115piabet.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/115piabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '115piabet.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-01T05:48:37Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/115piabet.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--00532886-9de0-5820-b903-67380f995c06","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-03T09:58:15Z","modified":"2025-09-03T09:58:15Z","name":"Phishing domain: 11638.my","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/11638.my","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11638.my']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-03T09:58:15Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/11638.my"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1481437c-8536-5b78-bd29-4272d780fffe","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T13:11:30Z","modified":"2026-01-02T13:11:30Z","name":"Phishing domain: 11654455.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/11654455.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11654455.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T13:11:30Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/11654455.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e426974e-27d3-55a8-a14c-84a23c1bf032","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:07Z","modified":"2026-02-26T23:21:07Z","name":"Phishing domain: 11654488.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/11654488.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11654488.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:07Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/11654488.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8749067-0a1e-572a-ba3d-30a417e6b18d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:43Z","modified":"2026-02-26T23:22:43Z","name":"Phishing domain: 11658877.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/11658877.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11658877.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:43Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/11658877.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c590644e-1215-5cd5-8814-c682a69f2423","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-14T01:46:00Z","modified":"2025-12-14T01:46:00Z","name":"Phishing domain: 11659944.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/11659944.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11659944.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-14T01:46:00Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/11659944.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a30e49d-4994-5748-a83f-125eda03c3ee","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:30Z","modified":"2026-02-26T23:22:30Z","name":"Phishing domain: 1165llll.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/1165llll.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1165llll.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:30Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1165llll.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9c861fd-e479-58d0-8cef-2b1e09082e9b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:31Z","modified":"2026-02-26T23:20:31Z","name":"Phishing domain: 1165rrrr.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/1165rrrr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1165rrrr.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:31Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1165rrrr.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--02e0cf8b-f50d-5109-a880-1dadaf1f80dc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-03T00:15:15Z","modified":"2026-01-03T00:15:15Z","name":"Phishing domain: 1165tt.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/1165tt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1165tt.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-03T00:15:15Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1165tt.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--355d8027-b89a-520d-8ac0-53715874b854","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-14T17:00:10Z","modified":"2026-07-14T17:00:10Z","name":"Phishing domain: 116ec3a1ad128d7d.darkwebf.workers.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating microsoft. Report & evidence: https://phishdestroy.io/domain/116ec3a1ad128d7d.darkwebf.workers.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '116ec3a1ad128d7d.darkwebf.workers.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-14T17:00:10Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/116ec3a1ad128d7d.darkwebf.workers.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e735afb-8b32-542b-9e95-e9a8a12c0250","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-08T14:32:38Z","modified":"2026-07-08T14:32:38Z","name":"Phishing domain: 117426.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/117426.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '117426.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-08T14:32:38Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/117426.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc6f57f0-0b52-54bd-a7a8-22d4075f687d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-22T20:34:33Z","modified":"2026-07-22T20:34:33Z","name":"Phishing domain: 118-scale-model.top","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/118-scale-model.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '118-scale-model.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-22T20:34:33Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/118-scale-model.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d87ced8-ba41-53ea-aac1-9b91a6151067","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-03T09:51:01Z","modified":"2025-09-03T09:51:01Z","name":"Phishing domain: 11871.one","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/11871.one","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11871.one']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-03T09:51:01Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/11871.one"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0318440-20a9-5bf6-8ddf-acebd361b2b1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-31T17:47:23Z","modified":"2026-01-31T17:47:23Z","name":"Phishing domain: 118834-ledger.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/118834-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '118834-ledger.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-31T17:47:23Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/118834-ledger.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff2a202c-bdf0-519b-838f-ac412fd7cb05","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-24T14:28:29Z","modified":"2026-06-24T14:28:29Z","name":"Phishing domain: 1188xinpujing.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1188xinpujing.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1188xinpujing.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-24T14:28:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1188xinpujing.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--faaec6bd-8538-5dba-8681-85ac73aa7704","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-03T13:19:16Z","modified":"2025-09-03T13:19:16Z","name":"Phishing domain: 118924-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/118924-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '118924-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-03T13:19:16Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/118924-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7768249-f74b-54ca-8ea2-32c2baf7b51e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-22T20:20:20Z","modified":"2026-07-22T20:20:20Z","name":"Phishing domain: 118scalemodel.life","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/118scalemodel.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '118scalemodel.life']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-22T20:20:20Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/118scalemodel.life"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1923df2-f37d-5759-9360-084a2315c4e6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-22T20:21:44Z","modified":"2026-07-22T20:21:44Z","name":"Phishing domain: 118scalemodels.top","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/118scalemodels.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '118scalemodels.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-22T20:21:44Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/118scalemodels.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6923d400-1056-5be8-9a69-e7cce62c86ac","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 118z888.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/118z888.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '118z888.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/118z888.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f0a0c9a-bcb1-5b86-b832-1446282c8ac3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-27T13:53:20Z","modified":"2026-01-27T13:53:20Z","name":"Phishing domain: 11a830f.netsolhost.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/11a830f.netsolhost.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11a830f.netsolhost.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-27T13:53:20Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/11a830f.netsolhost.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--32c38bb2-1a3c-525c-b7c8-bc37620a64d4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-11T03:37:35Z","modified":"2026-02-11T03:37:35Z","name":"Phishing domain: 11cf777.netsolhost.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating networksolutions. Report & evidence: https://phishdestroy.io/domain/11cf777.netsolhost.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11cf777.netsolhost.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-11T03:37:35Z","labels":["malicious-activity","phishing","brand:networksolutions"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/11cf777.netsolhost.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8536f629-33fd-5420-9e5d-0ec8fa5ddb04","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-11T04:41:25Z","modified":"2026-03-11T04:41:25Z","name":"Phishing domain: 11cra.at","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/11cra.at","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11cra.at']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-11T04:41:25Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/11cra.at"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc38499e-c91c-5f65-a86c-f1512a0c04bd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T07:31:44Z","modified":"2026-08-10T07:31:44Z","name":"Phishing domain: 11cs.fail","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating cs2. Report & evidence: https://phishdestroy.io/domain/11cs.fail","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11cs.fail']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T07:31:44Z","labels":["malicious-activity","phishing","brand:cs2"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/11cs.fail"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8796410e-d323-5952-802f-3d0b6877b3f6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-09T02:22:07Z","modified":"2026-06-09T02:22:07Z","name":"Phishing domain: 11e7a932-d733-4749-ba10-e31478422b84.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/11e7a932-d733-4749-ba10-e31478422b84.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11e7a932-d733-4749-ba10-e31478422b84.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-09T02:22:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/11e7a932-d733-4749-ba10-e31478422b84.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--88ab02c6-53f1-58ad-808a-247adb08e644","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-26T14:43:07Z","modified":"2026-07-26T14:43:07Z","name":"Phishing domain: 11inch.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/11inch.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11inch.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-26T14:43:07Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/11inch.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9614c78d-7c55-5eb5-8a57-47fe9d061483","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-29T09:57:45Z","modified":"2026-03-29T09:57:45Z","name":"Phishing domain: 11januari.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/11januari.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11januari.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-29T09:57:45Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/11januari.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d3b3cda-459e-51d3-9657-ef5ec960963e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-24T16:42:33Z","modified":"2025-10-24T16:42:33Z","name":"Phishing domain: 11nch.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/11nch.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11nch.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-24T16:42:33Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/11nch.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3008a598-3ce3-5b51-a722-541eb5234e72","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-22T07:37:51Z","modified":"2026-01-22T07:37:51Z","name":"Phishing domain: 11pump.fun","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating curve. Report & evidence: https://phishdestroy.io/domain/11pump.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11pump.fun']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-22T07:37:51Z","labels":["malicious-activity","phishing","brand:curve"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/11pump.fun"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ef01866-8e80-5187-bb34-1f9809f6ce69","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:16Z","modified":"2026-02-26T23:24:16Z","name":"Phishing domain: 11ysb8.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/11ysb8.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '11ysb8.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:16Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/11ysb8.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec26e285-9b02-50e3-a056-57bc6c256185","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T14:51:32Z","modified":"2026-02-13T14:51:32Z","name":"Phishing domain: 12-trip.biz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/12-trip.biz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '12-trip.biz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T14:51:32Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/12-trip.biz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--168493b6-41a1-505f-8c53-1d5de9dc9094","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-19T17:51:14Z","modified":"2026-01-19T17:51:14Z","name":"Phishing domain: 121178-cb.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/121178-cb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '121178-cb.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-19T17:51:14Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/121178-cb.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd2d165b-51f1-596e-9c17-d05d605a072d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T06:41:07Z","modified":"2026-06-15T06:41:07Z","name":"Phishing domain: 1213marsbahis.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1213marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1213marsbahis.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T06:41:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1213marsbahis.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a4d7a8c-4c24-542e-8222-e0ee7b9c1ee5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:17Z","modified":"2026-02-26T23:24:17Z","name":"Phishing domain: 1217.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1217.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1217.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1217.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8aaca90a-15ed-538f-bb4e-d2ab14dabb30","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-13T15:01:00Z","modified":"2025-12-13T15:01:00Z","name":"Phishing domain: 121723398207.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating outlook. Report & evidence: https://phishdestroy.io/domain/121723398207.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '121723398207.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-13T15:01:00Z","labels":["malicious-activity","phishing","brand:outlook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/121723398207.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ee526a7-ff21-5fb1-8df5-db806977ec6a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-28T18:29:26Z","modified":"2026-02-28T18:29:26Z","name":"Phishing domain: 1217ultrabet.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1217ultrabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1217ultrabet.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-28T18:29:26Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1217ultrabet.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e854297-b93c-5b07-aa78-b1c68891c901","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-30T18:44:17Z","modified":"2025-10-30T18:44:17Z","name":"Phishing domain: 12189294.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/12189294.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '12189294.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-30T18:44:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/12189294.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4485b683-ed7a-5925-a722-598244109b3d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-25T15:18:15Z","modified":"2026-02-25T15:18:15Z","name":"Phishing domain: 121bax.brellia.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/121bax.brellia.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '121bax.brellia.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-25T15:18:15Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/121bax.brellia.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6848f9aa-0cba-58d9-b7ed-7c4d0eeb8880","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-01T10:22:34Z","modified":"2026-08-01T10:22:34Z","name":"Phishing domain: 121dax.senes.at","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/121dax.senes.at","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '121dax.senes.at']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-01T10:22:34Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/121dax.senes.at"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e71c1a0-f104-561f-8706-3f66263a4380","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-12T11:07:48Z","modified":"2026-06-12T11:07:48Z","name":"Phishing domain: 121deo.senes.at","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/121deo.senes.at","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '121deo.senes.at']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-12T11:07:48Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/121deo.senes.at"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--97640e3b-3a14-596f-8ce0-9efe79ae93be","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-31T02:13:31Z","modified":"2026-07-31T02:13:31Z","name":"Phishing domain: 121gle.senes.at","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/121gle.senes.at","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '121gle.senes.at']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-31T02:13:31Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/121gle.senes.at"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f2c8514-3a0a-5f11-acd1-67db74fba68b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-02T16:09:45Z","modified":"2026-03-02T16:09:45Z","name":"Phishing domain: 121glo.proxer.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/121glo.proxer.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '121glo.proxer.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-02T16:09:45Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/121glo.proxer.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--815c2179-a5c0-5fba-be77-d6856ad87bdc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-18T13:09:40Z","modified":"2026-06-18T13:09:40Z","name":"Phishing domain: 121hiu.senes.at","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/121hiu.senes.at","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '121hiu.senes.at']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-18T13:09:40Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/121hiu.senes.at"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f3d8cee-9f9c-535e-a604-5801d5cd042f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-15T15:48:13Z","modified":"2026-03-15T15:48:13Z","name":"Phishing domain: 121imn.helades.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/121imn.helades.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '121imn.helades.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-15T15:48:13Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/121imn.helades.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac6dd41f-46fb-5157-b32b-f78a620b20a4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-18T13:47:34Z","modified":"2026-03-18T13:47:34Z","name":"Phishing domain: 121jio.luxemte.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/121jio.luxemte.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '121jio.luxemte.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-18T13:47:34Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/121jio.luxemte.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5235604-9daa-54dc-9fe3-3f06220a6bb0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-20T12:56:26Z","modified":"2026-07-20T12:56:26Z","name":"Phishing domain: 121jio.senes.at","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/121jio.senes.at","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '121jio.senes.at']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-20T12:56:26Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/121jio.senes.at"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3276477-cef4-5809-881a-db2bb42572ca","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-21T15:20:46Z","modified":"2026-02-21T15:20:46Z","name":"Phishing domain: 121sef.dartello.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/121sef.dartello.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '121sef.dartello.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-21T15:20:46Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/121sef.dartello.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--10786832-2170-5b29-beea-979b2bb005e6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-18T15:34:08Z","modified":"2026-02-18T15:34:08Z","name":"Phishing domain: 121yio.dartello.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/121yio.dartello.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '121yio.dartello.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-18T15:34:08Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/121yio.dartello.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b03fd348-731d-5302-94e1-c48df8b3ab96","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-10T14:35:15Z","modified":"2026-06-10T14:35:15Z","name":"Phishing domain: 121z2.catex.at","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/121z2.catex.at","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '121z2.catex.at']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-10T14:35:15Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/121z2.catex.at"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4aa4ee89-1050-5017-a4f9-96e2715d4ddd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-21T15:20:12Z","modified":"2026-02-21T15:20:12Z","name":"Phishing domain: 122alo.borotti.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/122alo.borotti.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '122alo.borotti.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-21T15:20:12Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/122alo.borotti.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--be53535b-d4a6-52d7-bfc3-0010fa3454d9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-07T03:34:14Z","modified":"2026-02-07T03:34:14Z","name":"Phishing domain: 122lop.brellia.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/122lop.brellia.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '122lop.brellia.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-07T03:34:14Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/122lop.brellia.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9401c5bb-e645-54ae-bc13-3e2dcc33fdd5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:49Z","modified":"2026-02-26T23:24:49Z","name":"Phishing domain: 123-7bf.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/123-7bf.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '123-7bf.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:49Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/123-7bf.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--45fd3723-87c9-5caa-a757-d78840717926","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-24T14:10:36Z","modified":"2026-07-24T14:10:36Z","name":"Phishing domain: 123-facebook.blogspot.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Facebook. Report & evidence: https://phishdestroy.io/domain/123-facebook.blogspot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '123-facebook.blogspot.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-24T14:10:36Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/123-facebook.blogspot.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef6e90d5-eb1b-5dab-9ba7-0216ab5a202e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-14T01:30:09Z","modified":"2025-12-14T01:30:09Z","name":"Phishing domain: 123.baseportal.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/123.baseportal.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '123.baseportal.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-14T01:30:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/123.baseportal.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0024c4d7-88f1-5d6a-9a9b-43d609ce1fed","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-27T16:58:08Z","modified":"2026-02-27T16:58:08Z","name":"Phishing domain: 123.bmt-whatsapp.com.cn","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating whatsapp. Report & evidence: https://phishdestroy.io/domain/123.bmt-whatsapp.com.cn","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '123.bmt-whatsapp.com.cn']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-27T16:58:08Z","labels":["malicious-activity","phishing","brand:whatsapp"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/123.bmt-whatsapp.com.cn"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e174744f-9ab0-5175-934a-e40abb173854","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-31T17:45:27Z","modified":"2026-01-31T17:45:27Z","name":"Phishing domain: 1239194-ledger.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/1239194-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1239194-ledger.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-31T17:45:27Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1239194-ledger.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d69a4109-ea48-520e-ba0f-6cc47de37e4f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T18:40:07Z","modified":"2026-08-09T18:40:07Z","name":"Phishing domain: 123games.bond","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/123games.bond","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '123games.bond']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T18:40:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/123games.bond"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--15dfced6-8d54-506f-a6db-65f6c20794e1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-17T08:37:24Z","modified":"2025-09-17T08:37:24Z","name":"Phishing domain: 123officialwebsite.site","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/123officialwebsite.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '123officialwebsite.site']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-17T08:37:24Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/123officialwebsite.site"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1e44c74-36f4-5f5a-b218-282cb9eb20b4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T11:51:18Z","modified":"2026-02-13T11:51:18Z","name":"Phishing domain: 123testeos.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/123testeos.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '123testeos.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T11:51:18Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/123testeos.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf626c55-87e2-5a50-9ff5-2417ab2f75a7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 124126448159.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/124126448159.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '124126448159.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/124126448159.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffc20365-e57f-5a0e-8072-8833604f61b9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: 12487guest-booking.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/12487guest-booking.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '12487guest-booking.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/12487guest-booking.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfb2242f-50fa-57b0-a764-1a77de99f351","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-03T09:56:45Z","modified":"2025-09-03T09:56:45Z","name":"Phishing domain: 12502.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/12502.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '12502.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-03T09:56:45Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/12502.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6909a1e2-669e-536f-844d-4d4f2cc68a72","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:35Z","modified":"2026-02-26T23:21:35Z","name":"Phishing domain: 12515215.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating instagram. Report & evidence: https://phishdestroy.io/domain/12515215.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '12515215.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:35Z","labels":["malicious-activity","phishing","brand:instagram"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/12515215.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cb3c916-056b-5312-886c-7f564fa85a1b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-28T16:32:20Z","modified":"2026-06-28T16:32:20Z","name":"Phishing domain: 1258perabet.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1258perabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1258perabet.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-28T16:32:20Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1258perabet.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--059791f5-fa4e-5b3a-a893-9ee476c1663f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-28T12:53:29Z","modified":"2026-06-28T12:53:29Z","name":"Phishing domain: 1266perabet.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1266perabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1266perabet.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-28T12:53:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1266perabet.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d051a10c-cc86-5728-95c8-93476af6ef7b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-25T15:18:14Z","modified":"2026-02-25T15:18:14Z","name":"Phishing domain: 126qiyeyou.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/126qiyeyou.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '126qiyeyou.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-25T15:18:14Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/126qiyeyou.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--62fd4641-1ee2-56e7-ad1c-017bd58c412d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-03T09:57:59Z","modified":"2025-09-03T09:57:59Z","name":"Phishing domain: 12783.my","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/12783.my","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '12783.my']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-03T09:57:59Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/12783.my"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--76efe09e-6818-5e80-8e0a-14b2fa0153f3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-31T20:08:36Z","modified":"2026-07-31T20:08:36Z","name":"Phishing domain: 1282perabet.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1282perabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1282perabet.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-31T20:08:36Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1282perabet.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c678e948-7e94-501e-bfc1-8646eb515a95","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-17T15:21:51Z","modified":"2026-03-17T15:21:51Z","name":"Phishing domain: 128747-recovery.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating apple. Report & evidence: https://phishdestroy.io/domain/128747-recovery.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '128747-recovery.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-17T15:21:51Z","labels":["malicious-activity","phishing","brand:apple"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/128747-recovery.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a11ca50-a67e-5fff-bbf3-c1ab1a875f83","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-16T13:40:08Z","modified":"2025-12-16T13:40:08Z","name":"Phishing domain: 128byteorigin.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/128byteorigin.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '128byteorigin.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-16T13:40:08Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/128byteorigin.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1893ed68-7c76-5b07-9dc1-14894e81747a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-01T02:36:52Z","modified":"2026-07-01T02:36:52Z","name":"Phishing domain: 128tyesy.vercel.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/128tyesy.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '128tyesy.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-01T02:36:52Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/128tyesy.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2771413-70e2-58a8-acc0-01d7fec0144e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-31T17:42:49Z","modified":"2026-01-31T17:42:49Z","name":"Phishing domain: 1294925-ledger.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/1294925-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1294925-ledger.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-31T17:42:49Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1294925-ledger.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--90be3f8f-ebe2-59e8-8dad-b64fd416dab5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:01Z","modified":"2026-02-26T23:20:01Z","name":"Phishing domain: 129a2f81.ajkevmslay.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/129a2f81.ajkevmslay.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '129a2f81.ajkevmslay.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:01Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/129a2f81.ajkevmslay.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--495e01a2-a2d7-5015-80df-8a2af668fb7a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:30Z","modified":"2026-02-26T23:19:30Z","name":"Phishing domain: 12acr.online","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/12acr.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '12acr.online']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:30Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/12acr.online"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--35c2b91b-3e39-5ecb-9166-ba7fc2b86b73","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:43Z","modified":"2026-02-26T23:24:43Z","name":"Phishing domain: 12bitcoin-hyper.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating solana. Report & evidence: https://phishdestroy.io/domain/12bitcoin-hyper.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '12bitcoin-hyper.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:43Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/12bitcoin-hyper.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b80f7c0f-69f4-55d4-af37-5531639e1f74","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T07:31:19Z","modified":"2026-08-10T07:31:19Z","name":"Phishing domain: 12cs.fail","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating cs2. Report & evidence: https://phishdestroy.io/domain/12cs.fail","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '12cs.fail']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T07:31:19Z","labels":["malicious-activity","phishing","brand:cs2"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/12cs.fail"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4907dc0f-d797-5853-a710-eadca66efa23","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-13T20:34:40Z","modified":"2026-08-13T20:34:40Z","name":"Phishing domain: 12f198.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/12f198.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '12f198.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-13T20:34:40Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/12f198.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9446cdf6-e516-5534-9cb1-3f0269ec131e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-12T00:17:44Z","modified":"2025-08-12T00:17:44Z","name":"Phishing domain: 12hourstrading.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating binance. Report & evidence: https://phishdestroy.io/domain/12hourstrading.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '12hourstrading.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-12T00:17:44Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/12hourstrading.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f3c677e-9721-51bc-8cb5-06f9830b6dc9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-12T00:17:35Z","modified":"2025-08-12T00:17:35Z","name":"Phishing domain: 12hourstrading.pro","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Binance. Report & evidence: https://phishdestroy.io/domain/12hourstrading.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '12hourstrading.pro']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-12T00:17:35Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/12hourstrading.pro"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f17bc7b-61f1-5c24-a373-0a689bfc57d3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:48Z","modified":"2026-02-26T23:23:48Z","name":"Phishing domain: 12hourstradings.com.industrialbankamerica.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating binance. Report & evidence: https://phishdestroy.io/domain/12hourstradings.com.industrialbankamerica.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '12hourstradings.com.industrialbankamerica.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:48Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/12hourstradings.com.industrialbankamerica.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc643047-696f-5a7a-b01b-e5c2d540af8c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-03T19:18:24Z","modified":"2026-04-03T19:18:24Z","name":"Phishing domain: 130.prasolovpartners.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/130.prasolovpartners.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '130.prasolovpartners.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-03T19:18:24Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/130.prasolovpartners.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b91af7e-bfb3-5bd3-8d10-0debc769acfc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-14T20:21:09Z","modified":"2026-02-14T20:21:09Z","name":"Phishing domain: 1307restbet.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1307restbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1307restbet.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-14T20:21:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1307restbet.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb99de74-406a-5b13-90b8-1e81a27d7f6d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-03T13:21:46Z","modified":"2025-12-03T13:21:46Z","name":"Phishing domain: 13122q34rf4534tg456tg5655fwesfsd3432412342454.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/13122q34rf4534tg456tg5655fwesfsd3432412342454.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '13122q34rf4534tg456tg5655fwesfsd3432412342454.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-03T13:21:46Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/13122q34rf4534tg456tg5655fwesfsd3432412342454.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d2051c4-fbba-594c-a4a5-a312ea558e18","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-19T16:56:13Z","modified":"2026-02-19T16:56:13Z","name":"Phishing domain: 1312669063.dojiner.at","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Steam. Report & evidence: https://phishdestroy.io/domain/1312669063.dojiner.at","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1312669063.dojiner.at']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-19T16:56:13Z","labels":["malicious-activity","phishing","brand:steam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1312669063.dojiner.at"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4dae5297-b875-5d3c-aa90-083771eed1d1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-04T20:03:08Z","modified":"2026-03-04T20:03:08Z","name":"Phishing domain: 13286102867.vip","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/13286102867.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '13286102867.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-04T20:03:08Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/13286102867.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a368356-23ea-5c8c-8544-fa38836564ca","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-07T16:46:17Z","modified":"2026-03-07T16:46:17Z","name":"Phishing domain: 132carrental.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/132carrental.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '132carrental.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-07T16:46:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/132carrental.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4fef1a0-d19b-5278-ad21-e8501c831d2f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-13T15:12:30Z","modified":"2025-12-13T15:12:30Z","name":"Phishing domain: 13355.vip","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/13355.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '13355.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-13T15:12:30Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/13355.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bf99d41-215b-58c4-b8ed-3590d28141e8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-05T12:21:05Z","modified":"2026-01-05T12:21:05Z","name":"Phishing domain: 1336051.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/1336051.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1336051.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-05T12:21:05Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1336051.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5080adfa-8c80-527b-8163-c696a04fb197","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T03:01:59Z","modified":"2026-08-10T03:01:59Z","name":"Phishing domain: 1336ooo7.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/1336ooo7.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1336ooo7.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T03:01:59Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1336ooo7.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b37b71e4-edbf-5fe5-82bb-6843ecc39804","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-27T16:49:24Z","modified":"2025-11-27T16:49:24Z","name":"Phishing domain: 133750-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/133750-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '133750-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-27T16:49:24Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/133750-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1a9d1a1-218c-5c2e-bb55-87fa504f2ce6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-03T16:52:35Z","modified":"2026-03-03T16:52:35Z","name":"Phishing domain: 1337reports.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1337reports.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1337reports.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-03T16:52:35Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1337reports.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f950ac8-bd21-5802-b404-4fa4d3bf789a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-12T14:12:21Z","modified":"2026-06-12T14:12:21Z","name":"Phishing domain: 134-112-56-85.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating dpd. Report & evidence: https://phishdestroy.io/domain/134-112-56-85.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '134-112-56-85.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-12T14:12:21Z","labels":["malicious-activity","phishing","brand:dpd"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/134-112-56-85.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe993368-beb2-57aa-80ce-dbeef2ba01b0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-11T14:37:30Z","modified":"2026-06-11T14:37:30Z","name":"Phishing domain: 1341863365.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/1341863365.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1341863365.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-11T14:37:30Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1341863365.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1541499b-08b4-590e-81a5-5ea492dadcb5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-07T15:12:47Z","modified":"2025-12-07T15:12:47Z","name":"Phishing domain: 134712.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/134712.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '134712.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-07T15:12:47Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/134712.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c90114f1-a0df-542d-ba98-bd212d58ff2e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-21T13:47:49Z","modified":"2025-11-21T13:47:49Z","name":"Phishing domain: 135461223.site","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Microsoft. Report & evidence: https://phishdestroy.io/domain/135461223.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '135461223.site']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-21T13:47:49Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/135461223.site"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2493bd45-15fa-58f0-aeed-71dbe407fd64","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:18Z","modified":"2026-02-26T23:22:18Z","name":"Phishing domain: 13707.academy","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/13707.academy","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '13707.academy']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:18Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/13707.academy"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f05fead8-d6c3-5255-960b-0651b1b4cfff","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 13761652.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/13761652.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '13761652.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/13761652.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ad211ca-365d-514f-95ea-8bbec5df0905","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-29T15:29:16Z","modified":"2026-01-29T15:29:16Z","name":"Phishing domain: 1379733676.kocaresteel.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Facebook. Report & evidence: https://phishdestroy.io/domain/1379733676.kocaresteel.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1379733676.kocaresteel.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-29T15:29:16Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1379733676.kocaresteel.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--031ad1f0-0f29-52c3-ac6d-d603c661f161","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-01T02:21:31Z","modified":"2026-07-01T02:21:31Z","name":"Phishing domain: 137tyesy.vercel.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/137tyesy.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '137tyesy.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-01T02:21:31Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/137tyesy.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e0b3e2c-c574-582f-95ca-15d389465f8a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-13T14:58:52Z","modified":"2025-12-13T14:58:52Z","name":"Phishing domain: 138-68-183-9.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/138-68-183-9.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '138-68-183-9.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-13T14:58:52Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/138-68-183-9.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--94ce8379-04c8-5c22-9fc1-ab523fb4886d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-06T12:37:32Z","modified":"2026-03-06T12:37:32Z","name":"Phishing domain: 138-68-65-188.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/138-68-65-188.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '138-68-65-188.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-06T12:37:32Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/138-68-65-188.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1425cf8-a14f-5a2d-bfdb-df0d2a65fe13","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:18Z","modified":"2026-07-27T06:02:18Z","name":"Phishing domain: 13823.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/13823.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '13823.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:18Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/13823.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f663a10-c635-5d68-b101-dc4f44334be6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-03T13:19:29Z","modified":"2025-09-03T13:19:29Z","name":"Phishing domain: 138btc.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/138btc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '138btc.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-03T13:19:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/138btc.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6ae57ae-20ed-550d-9d73-fe8f6077d98e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T15:51:22Z","modified":"2026-08-09T15:51:22Z","name":"Phishing domain: 13972.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating gmail. Report & evidence: https://phishdestroy.io/domain/13972.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '13972.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T15:51:22Z","labels":["malicious-activity","phishing","brand:gmail"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/13972.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--39ed20bb-3422-56ad-acbe-ae4682d4e847","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-31T16:37:51Z","modified":"2026-01-31T16:37:51Z","name":"Phishing domain: 139web.whatsapwacz.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating whatsapp. Report & evidence: https://phishdestroy.io/domain/139web.whatsapwacz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '139web.whatsapwacz.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-31T16:37:51Z","labels":["malicious-activity","phishing","brand:whatsapp"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/139web.whatsapwacz.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7297cf24-4e30-590d-96d7-cb20b909d6e7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T07:39:28Z","modified":"2026-08-10T07:39:28Z","name":"Phishing domain: 13cs.fail","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating cs2. Report & evidence: https://phishdestroy.io/domain/13cs.fail","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '13cs.fail']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T07:39:28Z","labels":["malicious-activity","phishing","brand:cs2"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/13cs.fail"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4332dc73-2198-58bb-9cdd-d628cbcb5e64","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-08T10:14:20Z","modified":"2026-02-08T10:14:20Z","name":"Phishing domain: 13pump.fun","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating curve. Report & evidence: https://phishdestroy.io/domain/13pump.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '13pump.fun']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-08T10:14:20Z","labels":["malicious-activity","phishing","brand:curve"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/13pump.fun"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e68fe207-b6da-5340-9c37-c8d4a00faa50","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T15:56:14Z","modified":"2026-08-09T15:56:14Z","name":"Phishing domain: 14001.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating gmail. Report & evidence: https://phishdestroy.io/domain/14001.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '14001.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T15:56:14Z","labels":["malicious-activity","phishing","brand:gmail"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/14001.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4965b6a1-e745-598f-943b-0dad7bf22e8c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T15:52:10Z","modified":"2026-08-09T15:52:10Z","name":"Phishing domain: 14008.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating gmail. Report & evidence: https://phishdestroy.io/domain/14008.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '14008.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T15:52:10Z","labels":["malicious-activity","phishing","brand:gmail"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/14008.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dec3d7ae-7807-585c-bcfa-ee3e62b0979e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:02:23Z","modified":"2026-08-10T00:02:23Z","name":"Phishing domain: 14014.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/14014.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '14014.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:02:23Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/14014.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--312a95b6-c3cd-54e5-8983-c92a44608695","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-21T15:02:14Z","modified":"2026-07-21T15:02:14Z","name":"Phishing domain: 14091.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/14091.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '14091.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-21T15:02:14Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/14091.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc5f979e-f131-55bd-8602-a8cf7bf194a8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-12T11:09:17Z","modified":"2026-06-12T11:09:17Z","name":"Phishing domain: 140bae.senes.at","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Binance. Report & evidence: https://phishdestroy.io/domain/140bae.senes.at","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '140bae.senes.at']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-12T11:09:17Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/140bae.senes.at"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--af99159c-61b6-5711-99c5-b4854cd9b777","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-12T03:31:22Z","modified":"2026-08-12T03:31:22Z","name":"Phishing domain: 140bc1.arcadejafet.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/140bc1.arcadejafet.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '140bc1.arcadejafet.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-12T03:31:22Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/140bc1.arcadejafet.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b434e638-d8ef-5f55-b408-8aca9920a7f8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:41Z","modified":"2026-02-26T23:23:41Z","name":"Phishing domain: 141-164-62-92.plesk.page","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/141-164-62-92.plesk.page","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '141-164-62-92.plesk.page']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:41Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/141-164-62-92.plesk.page"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fac3baf7-20aa-58ba-bbff-60d02debf44e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-31T09:38:10Z","modified":"2025-12-31T09:38:10Z","name":"Phishing domain: 141-95-100-178.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/141-95-100-178.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '141-95-100-178.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-31T09:38:10Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/141-95-100-178.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--abe45c8e-538e-5579-9fd3-bcbbf358b3df","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-02T15:24:52Z","modified":"2026-07-02T15:24:52Z","name":"Phishing domain: 14146.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/14146.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '14146.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-02T15:24:52Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/14146.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3ef9cce-fde3-5ccd-bf4d-ce490e9a324c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-02T15:24:23Z","modified":"2026-07-02T15:24:23Z","name":"Phishing domain: 14151.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/14151.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '14151.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-02T15:24:23Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/14151.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d1e301e-0db4-52f4-8a56-d9bb88e9324e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-07T02:12:24Z","modified":"2026-06-07T02:12:24Z","name":"Phishing domain: 14152.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/14152.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '14152.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-07T02:12:24Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/14152.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc4beb98-a478-548b-98cf-4919fb96b4dd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T00:32:45Z","modified":"2026-02-13T00:32:45Z","name":"Phishing domain: 141model.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/141model.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '141model.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T00:32:45Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/141model.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8904f013-75d3-53f6-aed9-330ccba44b3a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-04T12:41:56Z","modified":"2026-07-04T12:41:56Z","name":"Phishing domain: 14211.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/14211.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '14211.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-04T12:41:56Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/14211.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--048b7c93-93cc-51d7-af29-20788e544436","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-07T02:12:26Z","modified":"2026-06-07T02:12:26Z","name":"Phishing domain: 14267.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/14267.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '14267.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-07T02:12:26Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/14267.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e57cd4f-46df-5188-82d6-87f3a496c68d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-24T17:01:38Z","modified":"2026-02-24T17:01:38Z","name":"Phishing domain: 144581-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/144581-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '144581-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-24T17:01:38Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/144581-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b95a26b-84d4-5fd0-865f-4c8f2a6e9f5f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-05T20:47:45Z","modified":"2026-07-05T20:47:45Z","name":"Phishing domain: 144618trezor.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Trezor. Report & evidence: https://phishdestroy.io/domain/144618trezor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '144618trezor.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-05T20:47:45Z","labels":["malicious-activity","phishing","brand:trezor"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/144618trezor.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff6ce2d9-e9b3-5185-9e35-c550356bd43e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-07T02:20:15Z","modified":"2026-07-07T02:20:15Z","name":"Phishing domain: 144818crypto.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Crypto.com. Report & evidence: https://phishdestroy.io/domain/144818crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '144818crypto.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-07T02:20:15Z","labels":["malicious-activity","phishing","brand:crypto.com"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/144818crypto.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d07ee82b-38be-520a-9c06-c0bb1fe5437a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-05T20:47:41Z","modified":"2026-07-05T20:47:41Z","name":"Phishing domain: 144818icloud.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Apple. Report & evidence: https://phishdestroy.io/domain/144818icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '144818icloud.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-05T20:47:41Z","labels":["malicious-activity","phishing","brand:apple"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/144818icloud.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fcca6d1-b399-5689-bf6b-4c3bdd64ab63","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:42:11Z","modified":"2026-07-27T04:42:11Z","name":"Phishing domain: 146165.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/146165.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '146165.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:42:11Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/146165.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--393cfbf6-2955-523c-9b07-b168453c3229","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-30T08:50:00Z","modified":"2026-01-30T08:50:00Z","name":"Phishing domain: 14735-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Apple. Report & evidence: https://phishdestroy.io/domain/14735-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '14735-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-30T08:50:00Z","labels":["malicious-activity","phishing","brand:apple"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/14735-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--990695fe-bb47-53e6-8508-0c965fc2ac57","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T11:59:50Z","modified":"2026-02-13T11:59:50Z","name":"Phishing domain: 147841-ledger.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/147841-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '147841-ledger.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T11:59:50Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/147841-ledger.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--58cf61c5-3cea-5c5f-9fc8-aa08bca962dd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-07T13:41:04Z","modified":"2026-07-07T13:41:04Z","name":"Phishing domain: 1479182-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/1479182-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1479182-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-07T13:41:04Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1479182-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d4d053f-56d8-5b39-9e9e-ca805b1abbcb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-18T19:38:05Z","modified":"2026-07-18T19:38:05Z","name":"Phishing domain: 148293kraken.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Kraken. Report & evidence: https://phishdestroy.io/domain/148293kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '148293kraken.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-18T19:38:05Z","labels":["malicious-activity","phishing","brand:kraken"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/148293kraken.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a4a409b-70dc-576c-b3d5-59932039e211","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-25T08:06:38Z","modified":"2026-07-25T08:06:38Z","name":"Phishing domain: 14893coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/14893coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '14893coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-25T08:06:38Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/14893coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--75050172-e06e-5eb5-a9f9-6af65c56b3d0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T03:57:30Z","modified":"2026-08-10T03:57:30Z","name":"Phishing domain: 1494120-ledger.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/1494120-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1494120-ledger.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T03:57:30Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1494120-ledger.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--44b1806d-0519-5672-80d9-e6dfaeeb29d9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: 149561coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/149561coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '149561coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/149561coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb1c994d-28db-5960-b46d-95768369282b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T15:51:38Z","modified":"2026-08-09T15:51:38Z","name":"Phishing domain: 14b52e.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/14b52e.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '14b52e.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T15:51:38Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/14b52e.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--22e6b0dd-f69e-5e0e-9627-3908aee46c2b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-20T00:52:13Z","modified":"2025-11-20T00:52:13Z","name":"Phishing domain: 14research.online","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/14research.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '14research.online']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-20T00:52:13Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/14research.online"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7000d14b-c11d-5ec4-a544-53a44c9c1eec","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-24T00:56:47Z","modified":"2025-11-24T00:56:47Z","name":"Phishing domain: 15005.vip","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/15005.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '15005.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-24T00:56:47Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/15005.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5d5366d-92d3-5b36-94a5-8e2746959a8f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T13:11:10Z","modified":"2026-01-02T13:11:10Z","name":"Phishing domain: 15052233.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/15052233.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '15052233.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T13:11:10Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/15052233.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fa96165-0920-5ec3-ad49-1813b6ae0bed","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:29Z","modified":"2026-02-26T23:23:29Z","name":"Phishing domain: 15056699.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/15056699.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '15056699.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:29Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/15056699.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--654f7264-2b43-5310-8536-2768eb914163","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:51Z","modified":"2026-02-26T23:23:51Z","name":"Phishing domain: 15059911.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/15059911.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '15059911.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:51Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/15059911.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f13943bb-9c94-5abf-b27f-c71d911e5750","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-31T16:39:33Z","modified":"2026-01-31T16:39:33Z","name":"Phishing domain: 150web.whatsapwacz.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating whatsapp. Report & evidence: https://phishdestroy.io/domain/150web.whatsapwacz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '150web.whatsapwacz.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-31T16:39:33Z","labels":["malicious-activity","phishing","brand:whatsapp"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/150web.whatsapwacz.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--abe4ccff-e6d7-59ef-bcf1-46f167128932","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-21T13:23:57Z","modified":"2025-11-21T13:23:57Z","name":"Phishing domain: 151-115-111-112.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/151-115-111-112.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '151-115-111-112.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-21T13:23:57Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/151-115-111-112.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--98dab3d3-b19a-553b-a34d-9e634924bd0b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-21T13:24:02Z","modified":"2025-11-21T13:24:02Z","name":"Phishing domain: 151-115-55-229.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/151-115-55-229.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '151-115-55-229.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-21T13:24:02Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/151-115-55-229.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6794ff3-6cbc-5bda-8db0-9a0e341c2bab","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-09T15:51:22Z","modified":"2026-03-09T15:51:22Z","name":"Phishing domain: 151-242-2-118.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/151-242-2-118.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '151-242-2-118.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-09T15:51:22Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/151-242-2-118.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8031d45a-d87f-57a7-88a7-40a3317b8e75","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:48Z","modified":"2026-02-26T23:21:48Z","name":"Phishing domain: 1511.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/1511.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1511.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:48Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1511.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--da6b30cd-edba-58ee-badc-5cf3c2f1cafb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-29T13:00:40Z","modified":"2025-12-29T13:00:40Z","name":"Phishing domain: 1511.us","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/1511.us","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1511.us']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-29T13:00:40Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1511.us"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a5e175d-392d-5990-8065-3258e4665312","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 151112824.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/151112824.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '151112824.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/151112824.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fa9e219-6bec-5cdc-b6b8-b92a6aa9f385","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-01T12:38:59Z","modified":"2025-11-01T12:38:59Z","name":"Phishing domain: 1511dx555.sbs","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/1511dx555.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1511dx555.sbs']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-01T12:38:59Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1511dx555.sbs"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--77205a37-9300-5d0b-afad-b05a180ac89a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T06:37:04Z","modified":"2026-06-15T06:37:04Z","name":"Phishing domain: 15125guest-booking.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/15125guest-booking.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '15125guest-booking.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T06:37:04Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/15125guest-booking.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b3c0175-98ff-55db-b91e-162324ca5db0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-27T12:40:17Z","modified":"2025-12-27T12:40:17Z","name":"Phishing domain: 151bc849.knfdjfhusurje.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/151bc849.knfdjfhusurje.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '151bc849.knfdjfhusurje.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-27T12:40:17Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/151bc849.knfdjfhusurje.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c74827ec-2961-540f-90b3-28cc9c0733d0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-19T03:17:41Z","modified":"2026-03-19T03:17:41Z","name":"Phishing domain: 152-42-252-251.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/152-42-252-251.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '152-42-252-251.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-19T03:17:41Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/152-42-252-251.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fdad1a8-e52a-5134-8dc5-d657a7fe5e51","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 152976.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/152976.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '152976.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/152976.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4efeafcb-ce10-5307-a9cb-e06b373ca21a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 15323749---61652.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/15323749---61652.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '15323749---61652.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/15323749---61652.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb57ceb8-91b9-5b08-b954-8fee8f2e6054","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-03T09:50:36Z","modified":"2025-09-03T09:50:36Z","name":"Phishing domain: 15325.loan","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/15325.loan","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '15325.loan']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-03T09:50:36Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/15325.loan"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1594990-3232-58c9-91d2-95313098c4bf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T03:11:15Z","modified":"2026-08-10T03:11:15Z","name":"Phishing domain: 15375.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating gmail. Report & evidence: https://phishdestroy.io/domain/15375.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '15375.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T03:11:15Z","labels":["malicious-activity","phishing","brand:gmail"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/15375.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--738929dc-52d9-576f-898b-f819a0dd1f5b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 153vns.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/153vns.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '153vns.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/153vns.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1896dd54-2d81-5ae1-91a4-b3d1633a673c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-01T18:34:37Z","modified":"2026-07-01T18:34:37Z","name":"Phishing domain: 154693-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/154693-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '154693-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-01T18:34:37Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/154693-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6920259-e92c-5bf7-9a88-d972db92384b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-28T18:20:04Z","modified":"2026-07-28T18:20:04Z","name":"Phishing domain: 1548789459.github.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1548789459.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1548789459.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-28T18:20:04Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1548789459.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--815ab8ae-3859-5e66-a760-c8dcac2e4fb9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-20T14:20:57Z","modified":"2026-06-20T14:20:57Z","name":"Phishing domain: 155378.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/155378.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '155378.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-20T14:20:57Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/155378.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0536aa9e-af74-56ce-a1c9-49758ef9395a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-10T14:36:58Z","modified":"2026-06-10T14:36:58Z","name":"Phishing domain: 1555365.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/1555365.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1555365.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-10T14:36:58Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1555365.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6600d506-0201-5e5d-84c8-03548b5c5a76","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:17Z","modified":"2026-07-27T06:02:17Z","name":"Phishing domain: 1556.am","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1556.am","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1556.am']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1556.am"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--912a5d44-79ca-5f99-935a-1ff377e7e69e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-08T00:31:16Z","modified":"2025-12-08T00:31:16Z","name":"Phishing domain: 156.67.218.149.sslip.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Apple. Report & evidence: https://phishdestroy.io/domain/156.67.218.149.sslip.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '156.67.218.149.sslip.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-08T00:31:16Z","labels":["malicious-activity","phishing","brand:apple"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/156.67.218.149.sslip.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--335cb01e-d1ad-5d78-bc93-292d8527a2a3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-07T01:54:54Z","modified":"2026-06-07T01:54:54Z","name":"Phishing domain: 15638.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/15638.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '15638.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-07T01:54:54Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/15638.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4384af08-3861-5465-bc1b-cf508bd70b5e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:18Z","modified":"2026-02-26T23:21:18Z","name":"Phishing domain: 15650055.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/15650055.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '15650055.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:18Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/15650055.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf246b85-0093-5914-b63d-bf18cfdbabd4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-26T00:11:00Z","modified":"2025-12-26T00:11:00Z","name":"Phishing domain: 1565222.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1565222.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1565222.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-26T00:11:00Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1565222.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f794f2bd-1bfe-540a-b927-80734e26a035","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:32Z","modified":"2026-02-26T23:23:32Z","name":"Phishing domain: 15653333.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/15653333.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '15653333.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:32Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/15653333.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--006c85d7-9b57-5c86-acd3-8edd2b80338f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T13:16:07Z","modified":"2026-01-02T13:16:07Z","name":"Phishing domain: 15654422.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/15654422.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '15654422.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T13:16:07Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/15654422.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--24bf0078-f9dc-592d-a040-051a3551b777","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:40Z","modified":"2026-02-26T23:22:40Z","name":"Phishing domain: 1565555333.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/1565555333.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1565555333.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:40Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1565555333.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9406c7e0-1ddc-55a5-998c-494b1187f4a7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-08T17:32:43Z","modified":"2026-02-08T17:32:43Z","name":"Phishing domain: 15656655.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/15656655.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '15656655.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-08T17:32:43Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/15656655.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--510b8c24-20e8-5a27-98bb-e9c9d2613b0b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T14:04:36Z","modified":"2026-01-02T14:04:36Z","name":"Phishing domain: 15657722.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/15657722.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '15657722.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T14:04:36Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/15657722.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--faabd8e5-ffe5-556b-9fa7-7ad9fe0ab197","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-14T01:45:11Z","modified":"2025-12-14T01:45:11Z","name":"Phishing domain: 1565777444.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/1565777444.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1565777444.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-14T01:45:11Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1565777444.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f03f6c53-a153-513e-8f9d-796bfe9f25ab","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:43Z","modified":"2026-02-26T23:23:43Z","name":"Phishing domain: 1565777999.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/1565777999.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1565777999.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:43Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1565777999.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ed6d32b-a42b-5174-bebf-c6b310b94721","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-24T03:17:35Z","modified":"2026-01-24T03:17:35Z","name":"Phishing domain: 15657799.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/15657799.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '15657799.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-24T03:17:35Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/15657799.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c3996c3-2b5e-52de-88fa-bd5411715b6d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-03T00:10:10Z","modified":"2026-01-03T00:10:10Z","name":"Phishing domain: 15659966.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/15659966.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '15659966.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-03T00:10:10Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/15659966.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0ff5bad-a739-5649-9cc0-e674f1e09c1f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-08T17:30:56Z","modified":"2026-02-08T17:30:56Z","name":"Phishing domain: 1565999222.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1565999222.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1565999222.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-08T17:30:56Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1565999222.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a32e68e9-09cc-5753-911a-5e1531298ff5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-12T22:21:29Z","modified":"2025-12-12T22:21:29Z","name":"Phishing domain: 1565999555.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/1565999555.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1565999555.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-12T22:21:29Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1565999555.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd3b16aa-64b7-5eb3-a9e3-88dd449b772d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T13:11:36Z","modified":"2026-01-02T13:11:36Z","name":"Phishing domain: 1565999777.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/1565999777.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1565999777.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T13:11:36Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1565999777.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6122afcc-c786-5512-a86a-ca02b1d5fccc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-09T12:08:38Z","modified":"2025-12-09T12:08:38Z","name":"Phishing domain: 1565999999.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/1565999999.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1565999999.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-09T12:08:38Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1565999999.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--61367951-d13b-5ea9-b288-b64eca7bdd2a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-03T00:10:50Z","modified":"2026-01-03T00:10:50Z","name":"Phishing domain: 1565lllll.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/1565lllll.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1565lllll.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-03T00:10:50Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1565lllll.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--747dc8ee-8e1d-5f04-8f1d-b9d1c0f59324","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-03T00:11:31Z","modified":"2026-01-03T00:11:31Z","name":"Phishing domain: 1565nnnnn.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/1565nnnnn.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1565nnnnn.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-03T00:11:31Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1565nnnnn.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a950a415-2fef-5a51-937d-8160b1fccb4b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T13:16:26Z","modified":"2026-01-02T13:16:26Z","name":"Phishing domain: 1565ppp.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1565ppp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1565ppp.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T13:16:26Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1565ppp.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--54f3dd3f-3d1e-573e-a22b-5de2473bcb23","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T13:17:33Z","modified":"2026-01-02T13:17:33Z","name":"Phishing domain: 1565vv.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/1565vv.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1565vv.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T13:17:33Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1565vv.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bd7b6e0-146e-5a03-a254-1df576231434","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:16Z","modified":"2026-02-26T23:20:16Z","name":"Phishing domain: 1565ww.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/1565ww.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1565ww.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:16Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1565ww.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--42edcdfa-a8b4-50bd-8c2c-2b1e8d94f65f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:58Z","modified":"2026-02-26T23:22:58Z","name":"Phishing domain: 1565wwwww.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/1565wwwww.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1565wwwww.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:58Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1565wwwww.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b79d58a-58a6-52a0-b214-a448b964c370","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T13:11:20Z","modified":"2026-01-02T13:11:20Z","name":"Phishing domain: 1565xx.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/1565xx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1565xx.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T13:11:20Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1565xx.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--90139c22-7129-52d5-9fc8-2a0286666640","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-04T14:43:11Z","modified":"2026-01-04T14:43:11Z","name":"Phishing domain: 1565yyyyy.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/1565yyyyy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1565yyyyy.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-04T14:43:11Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1565yyyyy.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--61df54b0-2766-5b1a-8810-1675547951d4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-30T14:25:54Z","modified":"2026-07-30T14:25:54Z","name":"Phishing domain: 158-158-1-61.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating dpd. Report & evidence: https://phishdestroy.io/domain/158-158-1-61.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '158-158-1-61.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-30T14:25:54Z","labels":["malicious-activity","phishing","brand:dpd"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/158-158-1-61.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a352a53a-5c42-5f15-80fe-61a416ec441a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-10T14:32:03Z","modified":"2026-06-10T14:32:03Z","name":"Phishing domain: 158-158-8-83.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/158-158-8-83.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '158-158-8-83.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-10T14:32:03Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/158-158-8-83.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a96cb66-2d6a-52c8-9cd2-06f512b8eae0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:46:39Z","modified":"2026-07-27T04:46:39Z","name":"Phishing domain: 158518.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/158518.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '158518.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:46:39Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/158518.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--39651e59-9621-541b-b55b-1dbf274d6004","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-03T13:13:34Z","modified":"2025-08-03T13:13:34Z","name":"Phishing domain: 158940-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/158940-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '158940-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-03T13:13:34Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/158940-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa68d605-f824-575f-bc50-780284cf6c5f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-06T12:41:37Z","modified":"2026-03-06T12:41:37Z","name":"Phishing domain: 159-65-121-33.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/159-65-121-33.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '159-65-121-33.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-06T12:41:37Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/159-65-121-33.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b400cf9b-e488-5f81-8f18-0e583f3cbae4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-09T14:27:34Z","modified":"2026-06-09T14:27:34Z","name":"Phishing domain: 15908.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/15908.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '15908.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-09T14:27:34Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/15908.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--798be815-082c-5898-bdd5-666d30d0cf01","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 15961652.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/15961652.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '15961652.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/15961652.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bbdefcf-9977-5a4c-b514-49f9b1875e40","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-13T20:38:46Z","modified":"2026-08-13T20:38:46Z","name":"Phishing domain: 159c0f.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/159c0f.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '159c0f.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-13T20:38:46Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/159c0f.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2f99ab7-f0fc-5ae7-987d-f1653b13052c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-03T14:30:54Z","modified":"2026-07-03T14:30:54Z","name":"Phishing domain: 16072.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/16072.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '16072.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-03T14:30:54Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/16072.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a91a44a4-4f79-5b13-91b1-c467fdd19dc3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-13T20:40:15Z","modified":"2026-08-13T20:40:15Z","name":"Phishing domain: 160e87.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/160e87.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '160e87.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-13T20:40:15Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/160e87.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--99464337-c07e-5303-b8df-94338d68c72c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-25T02:19:59Z","modified":"2026-06-25T02:19:59Z","name":"Phishing domain: 160tyesy.vercel.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/160tyesy.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '160tyesy.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-25T02:19:59Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/160tyesy.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfe15bf3-74e0-5d6c-8bab-7e82ac269312","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-03T13:22:54Z","modified":"2025-12-03T13:22:54Z","name":"Phishing domain: 161-35-216-34.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/161-35-216-34.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '161-35-216-34.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-03T13:22:54Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/161-35-216-34.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--57be0df9-58e8-5f2f-9372-cbd495fda566","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-16T16:35:14Z","modified":"2026-02-16T16:35:14Z","name":"Phishing domain: 1613.bft-whatsapp.com.cn","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1613.bft-whatsapp.com.cn","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1613.bft-whatsapp.com.cn']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-16T16:35:14Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1613.bft-whatsapp.com.cn"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--de6f8f36-87eb-5193-8850-97eb78001bd1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:38Z","modified":"2026-02-26T23:22:38Z","name":"Phishing domain: 1615000000.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/1615000000.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1615000000.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:38Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1615000000.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0ce74fb-0dcd-5c73-befc-ffd1432a69c1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T13:18:21Z","modified":"2026-01-02T13:18:21Z","name":"Phishing domain: 1615000888.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1615000888.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1615000888.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T13:18:21Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1615000888.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a853efa-6c30-54bd-b68e-d01f99f98181","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-25T15:53:18Z","modified":"2026-01-25T15:53:18Z","name":"Phishing domain: 16152200.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/16152200.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '16152200.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-25T15:53:18Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/16152200.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f55de84c-3034-51a9-a82e-5aa2f4648fdc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-13T15:13:17Z","modified":"2025-12-13T15:13:17Z","name":"Phishing domain: 1615222333.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/1615222333.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1615222333.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-13T15:13:17Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1615222333.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--43c45d9d-d9f6-5795-b025-70b7a497fc78","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T14:06:22Z","modified":"2026-01-02T14:06:22Z","name":"Phishing domain: 1615444222.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/1615444222.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1615444222.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T14:06:22Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1615444222.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--af905cf4-6ae2-5c3f-9cb9-31937eec3b00","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-21T14:17:12Z","modified":"2026-01-21T14:17:12Z","name":"Phishing domain: 16155544.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/16155544.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '16155544.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-21T14:17:12Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/16155544.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f56cc55-cdec-5d9f-bd7d-dbde09ab1337","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-10T05:05:39Z","modified":"2025-12-10T05:05:39Z","name":"Phishing domain: 1615666666.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/1615666666.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1615666666.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-10T05:05:39Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1615666666.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d36fbd91-1947-598c-a93e-baf9e1e144b6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T13:18:15Z","modified":"2026-01-02T13:18:15Z","name":"Phishing domain: 1615jjjj.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/1615jjjj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1615jjjj.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T13:18:15Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1615jjjj.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ba8694e-46bf-5e61-8c88-5e8bc625f5fb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:30Z","modified":"2026-02-26T23:21:30Z","name":"Phishing domain: 1615lll.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/1615lll.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1615lll.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:30Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1615lll.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--86a6321e-ee8b-55f2-86c6-b7936d16a59a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T13:17:13Z","modified":"2026-01-02T13:17:13Z","name":"Phishing domain: 1615p.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/1615p.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1615p.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T13:17:13Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1615p.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b040bdca-7dec-576a-93cd-797c4426fd00","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:41:51Z","modified":"2026-07-27T04:41:51Z","name":"Phishing domain: 16165aa.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/16165aa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '16165aa.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:41:51Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/16165aa.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d4da8fc-8a2f-5ae6-82a3-172a02d0a1ad","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 16165hd.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/16165hd.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '16165hd.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/16165hd.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8313a75a-4da1-53e0-a2d1-d4b1912bf176","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 16165j.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/16165j.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '16165j.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/16165j.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--93a7e0e8-9d68-5abc-96db-79e02fcce813","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 16165pp.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/16165pp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '16165pp.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/16165pp.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b9091a8-5159-5ec3-91e8-01ca7307bfd6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:42:07Z","modified":"2026-07-27T04:42:07Z","name":"Phishing domain: 16165tt.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/16165tt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '16165tt.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:42:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/16165tt.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--79869216-7c9e-5d9c-b3b4-3819a7e0dbf6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 16165yh.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/16165yh.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '16165yh.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/16165yh.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa5cba6c-2a29-56d0-8efe-23e826c3720c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-01T02:16:42Z","modified":"2026-07-01T02:16:42Z","name":"Phishing domain: 161tyesy.vercel.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/161tyesy.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '161tyesy.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-01T02:16:42Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/161tyesy.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--02d0c307-298d-558c-a47f-bff87c570799","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-03T09:57:45Z","modified":"2025-09-03T09:57:45Z","name":"Phishing domain: 16278.my","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/16278.my","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '16278.my']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-03T09:57:45Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/16278.my"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b589203-5528-5cfb-b356-b683514c6eb3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-21T13:44:37Z","modified":"2025-11-21T13:44:37Z","name":"Phishing domain: 163-5-109-112.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/163-5-109-112.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '163-5-109-112.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-21T13:44:37Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/163-5-109-112.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4ce83ed-9ae7-53d6-a88f-3637392fc558","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-04T15:00:07Z","modified":"2026-07-04T15:00:07Z","name":"Phishing domain: 16375.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/16375.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '16375.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-04T15:00:07Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/16375.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4142205-714b-53af-a787-a05a3121a7a5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-04T14:16:23Z","modified":"2026-07-04T14:16:23Z","name":"Phishing domain: 16376.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/16376.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '16376.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-04T14:16:23Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/16376.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cd9c5f5-78a3-50ec-944b-7af117ad8c09","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:59Z","modified":"2026-02-26T23:24:59Z","name":"Phishing domain: 1639748-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/1639748-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1639748-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:59Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1639748-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--30b6077a-c885-5188-9515-cf0966ce3e72","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-05T21:19:34Z","modified":"2026-03-05T21:19:34Z","name":"Phishing domain: 163buffcs.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/163buffcs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '163buffcs.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-05T21:19:34Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/163buffcs.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--df488577-b3ba-5397-b8c8-0a7358acc245","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-10T22:18:37Z","modified":"2026-03-10T22:18:37Z","name":"Phishing domain: 163bufl.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/163bufl.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '163bufl.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-10T22:18:37Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/163bufl.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9975daee-0845-5ae2-b37a-d384f2f09452","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-05T21:19:40Z","modified":"2026-03-05T21:19:40Z","name":"Phishing domain: 163lll.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/163lll.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '163lll.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-05T21:19:40Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/163lll.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c1a700e-941b-513a-9623-19f123404367","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-19T03:20:18Z","modified":"2026-03-19T03:20:18Z","name":"Phishing domain: 164-92-65-182.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/164-92-65-182.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '164-92-65-182.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-19T03:20:18Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/164-92-65-182.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7740ce9-1880-5b1f-9c5b-51ac1b938de6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-15T01:03:32Z","modified":"2025-10-15T01:03:32Z","name":"Phishing domain: 1640-gemini.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating gemini. Report & evidence: https://phishdestroy.io/domain/1640-gemini.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1640-gemini.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-15T01:03:32Z","labels":["malicious-activity","phishing","brand:gemini"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1640-gemini.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--82d64c8b-2bd3-5f2c-8d23-aa14428831ff","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-13T19:55:23Z","modified":"2026-08-13T19:55:23Z","name":"Phishing domain: 164196-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/164196-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '164196-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-13T19:55:23Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/164196-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--af62cfd2-8e44-573c-a7e6-1378286f187e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-01T02:24:38Z","modified":"2026-07-01T02:24:38Z","name":"Phishing domain: 164tyesy.vercel.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/164tyesy.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '164tyesy.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-01T02:24:38Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/164tyesy.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d64aea4-cbb5-5ba6-9b66-b7d4e797a68f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:11Z","modified":"2026-02-26T23:21:11Z","name":"Phishing domain: 165-22-82-35.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/165-22-82-35.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '165-22-82-35.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:11Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/165-22-82-35.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d23dd10-dba2-54ef-9a18-092f9db14c9a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-18T15:28:03Z","modified":"2026-02-18T15:28:03Z","name":"Phishing domain: 165-227-112-65.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/165-227-112-65.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '165-227-112-65.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-18T15:28:03Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/165-227-112-65.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--feb71991-f19b-51d4-aad1-dc935eb44ce7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-04T12:42:50Z","modified":"2026-07-04T12:42:50Z","name":"Phishing domain: 16574.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/16574.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '16574.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-04T12:42:50Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/16574.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a30e26d-76b0-5f99-8d3a-0982d85cc373","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-01T02:21:57Z","modified":"2026-07-01T02:21:57Z","name":"Phishing domain: 165tyesy.vercel.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/165tyesy.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '165tyesy.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-01T02:21:57Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/165tyesy.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--10c1c6b9-51de-50f7-8b52-73879f7a18ce","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T13:17:21Z","modified":"2026-01-02T13:17:21Z","name":"Phishing domain: 1665000666.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/1665000666.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1665000666.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T13:17:21Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1665000666.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f7181df-c64f-59a8-9410-d0e74bd826a8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-12T07:04:02Z","modified":"2026-08-12T07:04:02Z","name":"Phishing domain: 1665274281.dojiner.at","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating steam. Report & evidence: https://phishdestroy.io/domain/1665274281.dojiner.at","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1665274281.dojiner.at']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-12T07:04:02Z","labels":["malicious-activity","phishing","brand:steam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1665274281.dojiner.at"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--19a0e749-2fe5-5db2-9b51-310c648c70fb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T14:05:30Z","modified":"2026-01-02T14:05:30Z","name":"Phishing domain: 16653388.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/16653388.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '16653388.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T14:05:30Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/16653388.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--adf3ff53-3c8e-5b0e-9698-18b4acb64b8f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T14:06:13Z","modified":"2026-01-02T14:06:13Z","name":"Phishing domain: 16655511.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/16655511.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '16655511.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T14:06:13Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/16655511.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8169f34-4753-5382-935d-57e9bd254db5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T13:18:18Z","modified":"2026-01-02T13:18:18Z","name":"Phishing domain: 16659988.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/16659988.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '16659988.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T13:18:18Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/16659988.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--12d2a087-9404-52fa-9b97-d18844ee82f6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T13:17:31Z","modified":"2026-01-02T13:17:31Z","name":"Phishing domain: 1665app.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/1665app.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1665app.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T13:17:31Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1665app.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--da9eab33-e707-5653-850e-1af22fe579f2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-22T03:36:31Z","modified":"2026-01-22T03:36:31Z","name":"Phishing domain: 1665cccc.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/1665cccc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1665cccc.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-22T03:36:31Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1665cccc.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a40fc747-bce3-5fde-b9af-008d47648620","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-03T00:11:24Z","modified":"2026-01-03T00:11:24Z","name":"Phishing domain: 1665ddd.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/1665ddd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1665ddd.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-03T00:11:24Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1665ddd.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8019f07-9cc4-5601-9499-9593c9351875","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T14:04:50Z","modified":"2026-01-02T14:04:50Z","name":"Phishing domain: 1665ee.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/1665ee.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1665ee.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T14:04:50Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1665ee.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0de2ec93-3d6d-5494-96f9-f43130f48a17","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T13:18:17Z","modified":"2026-01-02T13:18:17Z","name":"Phishing domain: 1665pp.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/1665pp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1665pp.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T13:18:17Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1665pp.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6dacca0b-2634-5f0a-977c-9916323bf4be","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-18T23:58:30Z","modified":"2026-01-18T23:58:30Z","name":"Phishing domain: 1665rrr.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/1665rrr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1665rrr.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-18T23:58:30Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1665rrr.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--288e9c15-6a6d-5bd7-8d54-05cbbb77abdd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T13:16:05Z","modified":"2026-01-02T13:16:05Z","name":"Phishing domain: 1665ttt.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/1665ttt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1665ttt.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T13:16:05Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1665ttt.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a7140e4-dd9e-52e8-a047-87fb9f789923","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-12T13:24:19Z","modified":"2026-07-12T13:24:19Z","name":"Phishing domain: 166798365756.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/166798365756.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '166798365756.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-12T13:24:19Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/166798365756.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--78ff9cd3-270e-508b-bb59-a22575c6c06a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-01T02:32:22Z","modified":"2026-07-01T02:32:22Z","name":"Phishing domain: 166tyesy.vercel.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/166tyesy.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '166tyesy.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-01T02:32:22Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/166tyesy.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--072906d5-e304-5686-bf3d-8ab10a6a759d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-19T16:58:15Z","modified":"2026-02-19T16:58:15Z","name":"Phishing domain: 1670082278.dojiner.at","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Steam. Report & evidence: https://phishdestroy.io/domain/1670082278.dojiner.at","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1670082278.dojiner.at']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-19T16:58:15Z","labels":["malicious-activity","phishing","brand:steam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1670082278.dojiner.at"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--beb9a97f-6054-50d3-b65a-54f0af25726e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-24T16:59:37Z","modified":"2025-10-24T16:59:37Z","name":"Phishing domain: 167253-binance.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Binance. Report & evidence: https://phishdestroy.io/domain/167253-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '167253-binance.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-24T16:59:37Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/167253-binance.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--474ab7b5-6348-5c5c-8d01-46daf8d0ab9c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-30T19:59:43Z","modified":"2026-06-30T19:59:43Z","name":"Phishing domain: 16769.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/16769.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '16769.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-30T19:59:43Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/16769.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f29d5783-23a7-5998-add9-26aeab36fe8e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-30T21:00:06Z","modified":"2026-06-30T21:00:06Z","name":"Phishing domain: 16773.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/16773.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '16773.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-30T21:00:06Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/16773.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c73667cc-f80a-5263-a225-b2eb82c8dde4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-30T19:42:51Z","modified":"2026-06-30T19:42:51Z","name":"Phishing domain: 16774.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/16774.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '16774.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-30T19:42:51Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/16774.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--10ce6248-f0cf-5b96-8756-0547b45bb5c8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-11T14:33:12Z","modified":"2026-06-11T14:33:12Z","name":"Phishing domain: 1690ee.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1690ee.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1690ee.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-11T14:33:12Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1690ee.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--92f910a1-33cf-512e-ab22-502f31c7d912","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T15:57:29Z","modified":"2026-08-09T15:57:29Z","name":"Phishing domain: 1691fe.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1691fe.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1691fe.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T15:57:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1691fe.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--35e01ac9-0461-54cf-87d3-7b829f63ebdb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T15:45:54Z","modified":"2026-08-09T15:45:54Z","name":"Phishing domain: 16a47b.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/16a47b.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '16a47b.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T15:45:54Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/16a47b.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa31522b-27e3-53ae-a873-246bb2784718","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-11T02:25:47Z","modified":"2026-07-11T02:25:47Z","name":"Phishing domain: 16betax.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/16betax.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '16betax.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-11T02:25:47Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/16betax.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f4bfcb5-0c37-585a-a0e0-ab9355b93376","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-29T05:17:09Z","modified":"2025-08-29T05:17:09Z","name":"Phishing domain: 16bettelegram.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating telegram. Report & evidence: https://phishdestroy.io/domain/16bettelegram.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '16bettelegram.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-29T05:17:09Z","labels":["malicious-activity","phishing","brand:telegram"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/16bettelegram.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--625fd5bd-3f4f-5158-97ec-a4b3e477c940","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-12T02:17:45Z","modified":"2025-12-12T02:17:45Z","name":"Phishing domain: 16fdc029-01ca-4047-933e-bf5575463977.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bancolombia. Report & evidence: https://phishdestroy.io/domain/16fdc029-01ca-4047-933e-bf5575463977.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '16fdc029-01ca-4047-933e-bf5575463977.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-12T02:17:45Z","labels":["malicious-activity","phishing","brand:bancolombia"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/16fdc029-01ca-4047-933e-bf5575463977.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a124c86-2305-59b3-ba1e-f2f9cce83b94","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-31T16:41:59Z","modified":"2026-01-31T16:41:59Z","name":"Phishing domain: 16web.whatsapwcso.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating whatsapp. Report & evidence: https://phishdestroy.io/domain/16web.whatsapwcso.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '16web.whatsapwcso.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-31T16:41:59Z","labels":["malicious-activity","phishing","brand:whatsapp"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/16web.whatsapwcso.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7feadf95-b3b8-5cb4-bbd3-7b6285402ac2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-23T12:36:05Z","modified":"2025-11-23T12:36:05Z","name":"Phishing domain: 17000.vip","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/17000.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '17000.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-23T12:36:05Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/17000.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1411b382-fb93-5a5d-a488-d0a77572d4d6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-19T16:58:15Z","modified":"2026-02-19T16:58:15Z","name":"Phishing domain: 1703351226.dojiner.at","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Steam. Report & evidence: https://phishdestroy.io/domain/1703351226.dojiner.at","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1703351226.dojiner.at']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-19T16:58:15Z","labels":["malicious-activity","phishing","brand:steam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1703351226.dojiner.at"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9c4901d-67a4-5120-b0f2-88101c46260f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-09T14:27:29Z","modified":"2026-06-09T14:27:29Z","name":"Phishing domain: 17054.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/17054.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '17054.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-09T14:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/17054.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4afb82f0-40b4-5a0c-bed9-edab88f1d701","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-09T14:24:35Z","modified":"2026-06-09T14:24:35Z","name":"Phishing domain: 17065.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/17065.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '17065.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-09T14:24:35Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/17065.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fdcb643-3fff-5e3c-a299-ebfb0803a134","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-08T13:36:33Z","modified":"2026-06-08T13:36:33Z","name":"Phishing domain: 17092.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/17092.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '17092.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-08T13:36:33Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/17092.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--db4b96c8-e156-5f2f-a83e-14bd48c434d9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-08T13:27:08Z","modified":"2026-06-08T13:27:08Z","name":"Phishing domain: 17094.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/17094.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '17094.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-08T13:27:08Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/17094.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e413745-ee49-5e63-bd34-6825de9d8455","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-01T02:20:34Z","modified":"2026-07-01T02:20:34Z","name":"Phishing domain: 170tyesy.vercel.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/170tyesy.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '170tyesy.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-01T02:20:34Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/170tyesy.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--226a3d00-cb52-59a7-9592-b8ebf4fa4590","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 171166.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/171166.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '171166.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/171166.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--273c1ad1-1ab4-563b-856d-242386d1b59e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 1717399---6165.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1717399---6165.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1717399---6165.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1717399---6165.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8278a87-3f0f-56d9-a899-25355032c492","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-01T02:28:40Z","modified":"2026-07-01T02:28:40Z","name":"Phishing domain: 171tyesy.vercel.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/171tyesy.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '171tyesy.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-01T02:28:40Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/171tyesy.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b9ccace-14ee-564f-ac60-6a491d1719bd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-13T14:24:14Z","modified":"2026-07-13T14:24:14Z","name":"Phishing domain: 172-104-5-58.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating dpd. Report & evidence: https://phishdestroy.io/domain/172-104-5-58.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '172-104-5-58.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-13T14:24:14Z","labels":["malicious-activity","phishing","brand:dpd"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/172-104-5-58.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--04baed7b-a0bd-57e8-a40f-d9748b21782d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-04T12:41:44Z","modified":"2026-07-04T12:41:44Z","name":"Phishing domain: 17204.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/17204.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '17204.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-04T12:41:44Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/17204.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9390994e-2c62-5200-b690-d1fbd71492fe","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-07T02:12:07Z","modified":"2026-06-07T02:12:07Z","name":"Phishing domain: 17206.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/17206.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '17206.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-07T02:12:07Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/17206.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e253077-0066-504c-8fb5-af6063e3990c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-07T02:11:32Z","modified":"2026-06-07T02:11:32Z","name":"Phishing domain: 17209.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/17209.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '17209.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-07T02:11:32Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/17209.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d40db79b-105d-5182-b091-c3b1db5df41e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-07T02:11:08Z","modified":"2026-06-07T02:11:08Z","name":"Phishing domain: 17210.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/17210.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '17210.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-07T02:11:08Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/17210.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--af91fd0d-b6d2-5ed5-8b76-fec45b6f58d6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-07T02:11:45Z","modified":"2026-06-07T02:11:45Z","name":"Phishing domain: 17211.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/17211.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '17211.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-07T02:11:45Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/17211.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cca62bd8-aa86-5aaa-98ed-6b79e32c7f37","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-27T07:54:40Z","modified":"2026-02-27T07:54:40Z","name":"Phishing domain: 1722marsbahis.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1722marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1722marsbahis.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-27T07:54:40Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1722marsbahis.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--63a1d251-8ba6-5b0a-81f0-923646083b15","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-15T09:11:20Z","modified":"2026-02-15T09:11:20Z","name":"Phishing domain: 172840-crypto.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Crypto.com. Report & evidence: https://phishdestroy.io/domain/172840-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '172840-crypto.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-15T09:11:20Z","labels":["malicious-activity","phishing","brand:crypto.com"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/172840-crypto.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c20d60a-88e8-50bc-ab66-27218ce79a56","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:19Z","modified":"2026-02-26T23:22:19Z","name":"Phishing domain: 172943-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/172943-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '172943-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:19Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/172943-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e4ce1a1-2ebd-5695-953d-a6a56cbb46a9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-29T01:19:57Z","modified":"2025-08-29T01:19:57Z","name":"Phishing domain: 1729549-ledger.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/1729549-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1729549-ledger.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-29T01:19:57Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1729549-ledger.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--791351d6-3833-5299-84ce-8fb2e7724747","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-07T02:11:17Z","modified":"2026-06-07T02:11:17Z","name":"Phishing domain: 17298.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/17298.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '17298.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-07T02:11:17Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/17298.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--29e95b9d-5d38-54bb-9cf0-fd2f512edf82","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-01T02:16:40Z","modified":"2026-07-01T02:16:40Z","name":"Phishing domain: 172tyesy.vercel.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/172tyesy.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '172tyesy.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-01T02:16:40Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/172tyesy.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e0fe37a-0dd3-582d-88a2-d1e1c5f44112","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-07T01:50:56Z","modified":"2026-06-07T01:50:56Z","name":"Phishing domain: 17330.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/17330.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '17330.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-07T01:50:56Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/17330.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a070eeb-ce00-5071-b6d2-57259c4fe0ed","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-31T18:55:23Z","modified":"2025-12-31T18:55:23Z","name":"Phishing domain: 1733028403581721830946.braindera.de","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1733028403581721830946.braindera.de","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1733028403581721830946.braindera.de']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-31T18:55:23Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1733028403581721830946.braindera.de"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7efc3d22-e188-5ccd-8e00-8787f4a066d5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-07T01:50:52Z","modified":"2026-06-07T01:50:52Z","name":"Phishing domain: 17332.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/17332.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '17332.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-07T01:50:52Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/17332.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--794dab1b-cbb7-5eb1-8363-94c5e154b477","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-07T01:28:17Z","modified":"2026-06-07T01:28:17Z","name":"Phishing domain: 17338.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/17338.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '17338.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-07T01:28:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/17338.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc845c74-df8e-58fa-a13b-6701a2c390cd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T02:15:19Z","modified":"2026-06-15T02:15:19Z","name":"Phishing domain: 1737063365.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/1737063365.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1737063365.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T02:15:19Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1737063365.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1f72193-94e3-58ba-93df-a9e63d1f6a4e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-07T01:28:35Z","modified":"2026-06-07T01:28:35Z","name":"Phishing domain: 17382.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/17382.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '17382.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-07T01:28:35Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/17382.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fa27abf-3f04-50cc-865c-a8dbf7348158","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:42:01Z","modified":"2026-07-27T04:42:01Z","name":"Phishing domain: 173946161653.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/173946161653.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '173946161653.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:42:01Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/173946161653.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbd5d53f-b627-5623-ae22-9543dc96ec35","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-01T02:38:49Z","modified":"2026-07-01T02:38:49Z","name":"Phishing domain: 173tyesy.vercel.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/173tyesy.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '173tyesy.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-01T02:38:49Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/173tyesy.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d7b6a1c-b3f2-5216-a6e6-96a8da97f5c0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T03:09:24Z","modified":"2026-08-10T03:09:24Z","name":"Phishing domain: 17548.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating gmail. Report & evidence: https://phishdestroy.io/domain/17548.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '17548.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T03:09:24Z","labels":["malicious-activity","phishing","brand:gmail"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/17548.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--17499304-0fff-5b24-973e-7dcfdd57e4dc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-14T15:33:52Z","modified":"2026-03-14T15:33:52Z","name":"Phishing domain: 175629-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/175629-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '175629-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-14T15:33:52Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/175629-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7fb40bd-619d-5956-8dd6-2e4398531b66","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:24Z","modified":"2026-02-26T23:22:24Z","name":"Phishing domain: 1756402135.zrmvdefi.top","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1756402135.zrmvdefi.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1756402135.zrmvdefi.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:24Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1756402135.zrmvdefi.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e02e19d4-0502-5d0f-bca3-ce2ce8c04ca6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-17T15:09:21Z","modified":"2025-09-17T15:09:21Z","name":"Phishing domain: 1757423534344-dexscreener.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1757423534344-dexscreener.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1757423534344-dexscreener.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-17T15:09:21Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1757423534344-dexscreener.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d68aad6-69cd-5b9b-a7d2-3ef61dfc334d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 175vns.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/175vns.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '175vns.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/175vns.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4dca55ca-b7fe-5e69-b874-ae6517afc8b2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-03T14:18:26Z","modified":"2025-11-03T14:18:26Z","name":"Phishing domain: 176541.am.coinbase.com.lc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/176541.am.coinbase.com.lc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '176541.am.coinbase.com.lc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-03T14:18:26Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/176541.am.coinbase.com.lc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c6e907b-7076-5c60-a35f-1b1c6f2e6d16","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-17T03:43:15Z","modified":"2026-07-17T03:43:15Z","name":"Phishing domain: 17656.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/17656.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '17656.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-17T03:43:15Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/17656.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9f6322a-3f12-5d75-80c5-879c53667a52","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-30T10:09:19Z","modified":"2026-06-30T10:09:19Z","name":"Phishing domain: 1765683335.829rli.top","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1765683335.829rli.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1765683335.829rli.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-30T10:09:19Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1765683335.829rli.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e13dcf9e-6755-5e10-a6ba-b8910ef1842b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-09T02:32:05Z","modified":"2026-07-09T02:32:05Z","name":"Phishing domain: 17669.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/17669.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '17669.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-09T02:32:05Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/17669.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6bff528-2a37-504b-ae23-be8e2722cd68","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-09T02:31:57Z","modified":"2026-07-09T02:31:57Z","name":"Phishing domain: 17674.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/17674.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '17674.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-09T02:31:57Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/17674.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcab8a0e-ca9e-55bc-bc02-91b650b36df3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-31T16:34:24Z","modified":"2026-01-31T16:34:24Z","name":"Phishing domain: 176web.whatsapwacz.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating whatsapp. Report & evidence: https://phishdestroy.io/domain/176web.whatsapwacz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '176web.whatsapwacz.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-31T16:34:24Z","labels":["malicious-activity","phishing","brand:whatsapp"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/176web.whatsapwacz.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e094e3c-4f96-5020-b840-3462291a7de4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-28T14:38:22Z","modified":"2026-06-28T14:38:22Z","name":"Phishing domain: 17712.wang","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/17712.wang","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '17712.wang']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-28T14:38:22Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/17712.wang"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3492ea11-fcf3-56f8-8ef1-7e524face99f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-08T17:45:15Z","modified":"2026-02-08T17:45:15Z","name":"Phishing domain: 17752233.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/17752233.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '17752233.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-08T17:45:15Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/17752233.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f01470f8-3aef-5a12-ab32-ab3246e5c879","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:41Z","modified":"2026-02-26T23:19:41Z","name":"Phishing domain: 17752288.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/17752288.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '17752288.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:41Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/17752288.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a21a8dc6-cbb1-5951-8f6d-ba366085084e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T13:11:30Z","modified":"2026-01-02T13:11:30Z","name":"Phishing domain: 17752299.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/17752299.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '17752299.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T13:11:30Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/17752299.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e0c69e2-e3c8-543f-b9c4-4b24ceaa4f44","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-04T14:43:06Z","modified":"2026-01-04T14:43:06Z","name":"Phishing domain: 17753322.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/17753322.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '17753322.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-04T14:43:06Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/17753322.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8003921-b856-5692-b7a6-61c1ad660489","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-03T00:10:33Z","modified":"2026-01-03T00:10:33Z","name":"Phishing domain: 17753377.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/17753377.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '17753377.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-03T00:10:33Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/17753377.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--52997525-5c23-50ae-89ee-748dd02119a4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-05T00:23:02Z","modified":"2026-01-05T00:23:02Z","name":"Phishing domain: 17755588.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/17755588.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '17755588.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-05T00:23:02Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/17755588.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea0eed0f-88b6-57bc-883a-cc089909e7bf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-03T00:16:14Z","modified":"2026-01-03T00:16:14Z","name":"Phishing domain: 17755599.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/17755599.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '17755599.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-03T00:16:14Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/17755599.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2eae6f5-6c10-5fd2-ac1c-2a015dfe44f6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 17755i.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/17755i.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '17755i.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/17755i.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--39dc27db-10d5-5e27-9d48-e92bcc8e4c4b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-05T00:23:16Z","modified":"2026-01-05T00:23:16Z","name":"Phishing domain: 1775ee.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/1775ee.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1775ee.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-05T00:23:16Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1775ee.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--66501c83-b591-5184-a3f9-f640ba857c29","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T13:18:23Z","modified":"2026-01-02T13:18:23Z","name":"Phishing domain: 1775rr.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/1775rr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1775rr.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T13:18:23Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1775rr.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3891b927-633e-5c31-856b-30f032ebde37","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T13:11:03Z","modified":"2026-01-02T13:11:03Z","name":"Phishing domain: 1775tt.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/1775tt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1775tt.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T13:11:03Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1775tt.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e3ffe0c-a3b1-5b67-9560-d1a90e2b541c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-04T14:42:07Z","modified":"2026-01-04T14:42:07Z","name":"Phishing domain: 1775ww.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/1775ww.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1775ww.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-04T14:42:07Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1775ww.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--758ff279-e08d-5d85-9823-8354a4b02ae0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T06:49:04Z","modified":"2026-06-15T06:49:04Z","name":"Phishing domain: 1776qfs.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1776qfs.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1776qfs.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T06:49:04Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1776qfs.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f54d2877-918d-558a-9ff0-93642d1b34fe","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-28T12:01:50Z","modified":"2026-06-28T12:01:50Z","name":"Phishing domain: 1778winoi.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1778winoi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1778winoi.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-28T12:01:50Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1778winoi.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb7693bf-4107-5a00-9600-adeeedefa208","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-28T12:01:24Z","modified":"2026-06-28T12:01:24Z","name":"Phishing domain: 177betbaixar.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/177betbaixar.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '177betbaixar.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-28T12:01:24Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/177betbaixar.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--74b610c0-ea75-53db-9f40-f89744fecf7e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-01T02:14:32Z","modified":"2026-07-01T02:14:32Z","name":"Phishing domain: 177tyesy.vercel.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/177tyesy.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '177tyesy.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-01T02:14:32Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/177tyesy.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bf1b50b-f70e-5b81-bbc9-5e18b7d88c5e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 177vns.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/177vns.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '177vns.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/177vns.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fb8b957-8510-5507-b062-30385d95df1f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-21T10:43:21Z","modified":"2025-12-21T10:43:21Z","name":"Phishing domain: 178490-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/178490-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '178490-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-21T10:43:21Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/178490-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d374571-e9a5-5617-8f45-35463dd820d7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:03Z","modified":"2026-02-26T23:22:03Z","name":"Phishing domain: 1785.lizziesemijoias.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating whatsapp. Report & evidence: https://phishdestroy.io/domain/1785.lizziesemijoias.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1785.lizziesemijoias.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:03Z","labels":["malicious-activity","phishing","brand:whatsapp"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1785.lizziesemijoias.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf20b634-c01a-5be3-8864-11e9f9a44c58","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 178vns.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/178vns.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '178vns.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/178vns.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa795e9c-282f-5460-9ef6-76c148ce7932","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-04T14:16:26Z","modified":"2026-07-04T14:16:26Z","name":"Phishing domain: 17901.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Microsoft. Report & evidence: https://phishdestroy.io/domain/17901.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '17901.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-04T14:16:26Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/17901.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--321c8a39-d904-517d-bbee-12a0c4cde6b5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:51Z","modified":"2026-02-26T23:20:51Z","name":"Phishing domain: 17a2e78d.connewall.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/17a2e78d.connewall.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '17a2e78d.connewall.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:51Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/17a2e78d.connewall.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ef4d0ec-33a8-5531-bfee-55450af2039a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-02T14:49:34Z","modified":"2026-02-02T14:49:34Z","name":"Phishing domain: 17i.70b.myftpupload.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating facebook. Report & evidence: https://phishdestroy.io/domain/17i.70b.myftpupload.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '17i.70b.myftpupload.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-02T14:49:34Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/17i.70b.myftpupload.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--508f4191-65b0-5495-8d54-9fc773d9c12d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-07T01:54:52Z","modified":"2026-06-07T01:54:52Z","name":"Phishing domain: 17ishan.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Discord. Report & evidence: https://phishdestroy.io/domain/17ishan.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '17ishan.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-07T01:54:52Z","labels":["malicious-activity","phishing","brand:discord"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/17ishan.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--edc553e1-3e50-5c64-8649-b42fd97fce38","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T13:09:30Z","modified":"2026-06-15T13:09:30Z","name":"Phishing domain: 17nishuodeac.top","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/17nishuodeac.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '17nishuodeac.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T13:09:30Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/17nishuodeac.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9c86e03-572b-534a-9b8f-52bb1f63aa24","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-12T22:20:52Z","modified":"2025-12-12T22:20:52Z","name":"Phishing domain: 17saloon.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/17saloon.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '17saloon.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-12T22:20:52Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/17saloon.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--caf38aea-c49a-54b7-a723-d7ab0b1a25c3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-23T12:24:09Z","modified":"2025-12-23T12:24:09Z","name":"Phishing domain: 17ty01.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/17ty01.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '17ty01.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-23T12:24:09Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/17ty01.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aae7054b-4f96-5543-b971-ab3ae9bfd374","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-16T14:26:03Z","modified":"2026-07-16T14:26:03Z","name":"Phishing domain: 17ty03.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/17ty03.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '17ty03.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-16T14:26:03Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/17ty03.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4390475-159f-567f-a15d-895bb060a170","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-07T15:00:59Z","modified":"2025-12-07T15:00:59Z","name":"Phishing domain: 17vip17.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/17vip17.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '17vip17.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-07T15:00:59Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/17vip17.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8755f01-a095-5e0e-91bc-0e21173bfcf7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-21T15:01:11Z","modified":"2026-07-21T15:01:11Z","name":"Phishing domain: 1800crown.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1800crown.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1800crown.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-21T15:01:11Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1800crown.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--57b7c8b4-1789-592b-ba25-7ee39c5885a4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-30T19:36:05Z","modified":"2026-06-30T19:36:05Z","name":"Phishing domain: 18053.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/18053.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18053.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-30T19:36:05Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/18053.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cba18049-def5-5fd8-9b23-3b8cab228544","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-01T14:20:24Z","modified":"2026-07-01T14:20:24Z","name":"Phishing domain: 18057.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/18057.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18057.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-01T14:20:24Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/18057.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad841c4d-4302-566e-9fdc-3aae4706219e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-27T08:11:08Z","modified":"2026-02-27T08:11:08Z","name":"Phishing domain: 1806betnano.direct","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1806betnano.direct","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1806betnano.direct']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-27T08:11:08Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1806betnano.direct"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--276f19de-40f9-5bcf-a9dd-63b1311a62cd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-01T02:23:20Z","modified":"2026-07-01T02:23:20Z","name":"Phishing domain: 18075.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/18075.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18075.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-01T02:23:20Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/18075.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--78a39794-0ab7-54fd-b4da-80cbe210ca8a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-01T14:24:42Z","modified":"2026-07-01T14:24:42Z","name":"Phishing domain: 18091.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/18091.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18091.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-01T14:24:42Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/18091.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a24882c4-d86b-5bfe-b6bf-71d2ce7ab81b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-03T14:24:53Z","modified":"2026-07-03T14:24:53Z","name":"Phishing domain: 18131.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/18131.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18131.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-03T14:24:53Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/18131.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0530427c-4a79-5f7e-a83b-3fef4268ef9b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-31T17:53:51Z","modified":"2026-01-31T17:53:51Z","name":"Phishing domain: 18172-ledger.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating ledger. Report & evidence: https://phishdestroy.io/domain/18172-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18172-ledger.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-31T17:53:51Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/18172-ledger.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3bdffe7-f908-5312-9053-5f1b1dd27344","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-30T14:27:21Z","modified":"2026-07-30T14:27:21Z","name":"Phishing domain: 1818.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericemail. Report & evidence: https://phishdestroy.io/domain/1818.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1818.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-30T14:27:21Z","labels":["malicious-activity","phishing","brand:genericemail"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1818.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0e718dd-aa45-5c50-8f2d-193a089099e5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-01T02:27:37Z","modified":"2026-07-01T02:27:37Z","name":"Phishing domain: 181tyesy.vercel.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/181tyesy.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '181tyesy.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-01T02:27:37Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/181tyesy.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8824a4b-23bd-5f48-8115-12358c23d26f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-09T10:00:05Z","modified":"2026-05-09T10:00:05Z","name":"Phishing domain: 182233.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/182233.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '182233.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-09T10:00:05Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/182233.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--601940f0-e8b9-5ace-88fc-61d1eb56450c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-19T00:12:51Z","modified":"2026-01-19T00:12:51Z","name":"Phishing domain: 182327-cb.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/182327-cb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '182327-cb.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-19T00:12:51Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/182327-cb.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad72f39c-38dc-5cbf-9804-9079e236f973","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:24Z","modified":"2026-02-26T23:19:24Z","name":"Phishing domain: 182a066d.connwl.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/182a066d.connwl.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '182a066d.connwl.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:24Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/182a066d.connwl.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f13ef614-38d9-58f4-b14b-8a4a0fbfecdc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-01T15:00:07Z","modified":"2026-07-01T15:00:07Z","name":"Phishing domain: 18311.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/18311.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18311.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-01T15:00:07Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/18311.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--905c93e3-5042-5ab0-ace1-97d35d5e8e21","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-01T14:22:29Z","modified":"2026-07-01T14:22:29Z","name":"Phishing domain: 18313.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/18313.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18313.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-01T14:22:29Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/18313.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b7b13da-b42b-588d-a982-a74a967b4eb0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-10T14:37:12Z","modified":"2026-07-10T14:37:12Z","name":"Phishing domain: 18315.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/18315.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18315.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-10T14:37:12Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/18315.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd8e251c-4577-5d4f-bb0e-40a4aa7d6f52","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-01T15:00:07Z","modified":"2026-07-01T15:00:07Z","name":"Phishing domain: 18320.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/18320.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18320.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-01T15:00:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/18320.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a35da63-e5fa-528d-bd2f-44aad13eb259","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-01T15:00:07Z","modified":"2026-07-01T15:00:07Z","name":"Phishing domain: 18322.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/18322.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18322.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-01T15:00:07Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/18322.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--14d43946-729a-5138-b939-b5887effe36c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-01T15:00:07Z","modified":"2026-07-01T15:00:07Z","name":"Phishing domain: 18323.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/18323.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18323.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-01T15:00:07Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/18323.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c893436-7c3f-5065-8cc1-a0c31c5f4396","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-01T02:24:38Z","modified":"2026-07-01T02:24:38Z","name":"Phishing domain: 18341.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/18341.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18341.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-01T02:24:38Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/18341.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b78abae2-3e41-55a1-b8c8-e82f2d8235c2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-25T14:46:35Z","modified":"2025-12-25T14:46:35Z","name":"Phishing domain: 1839236c.mfgjgnihfh.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/1839236c.mfgjgnihfh.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1839236c.mfgjgnihfh.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-25T14:46:35Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1839236c.mfgjgnihfh.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ca789e4-0a8b-5475-baa0-e66cc4215dfb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-06T23:14:41Z","modified":"2026-03-06T23:14:41Z","name":"Phishing domain: 18397coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/18397coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18397coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-06T23:14:41Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/18397coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab708763-c374-5cb7-9f4f-eaa67d6bd6d7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:12Z","modified":"2026-02-26T23:21:12Z","name":"Phishing domain: 18434.academy","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/18434.academy","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18434.academy']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:12Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/18434.academy"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f316b805-180c-5edb-8982-c12178fa62bd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T18:40:07Z","modified":"2026-08-09T18:40:07Z","name":"Phishing domain: 1850kingroyal.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/1850kingroyal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1850kingroyal.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T18:40:07Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1850kingroyal.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a90f1ff3-6f20-51cb-81af-17bcd4526f11","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-21T02:12:17Z","modified":"2026-07-21T02:12:17Z","name":"Phishing domain: 18551.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/18551.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18551.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-21T02:12:17Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/18551.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a1b2ef1-0bea-55cf-b11d-ee56daf581cf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-01T02:22:12Z","modified":"2026-07-01T02:22:12Z","name":"Phishing domain: 185tyesy.vercel.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/185tyesy.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '185tyesy.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-01T02:22:12Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/185tyesy.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4ae2ba0-4027-5dda-8e1b-ca0e65561444","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-01T02:16:44Z","modified":"2026-07-01T02:16:44Z","name":"Phishing domain: 186tyesy.vercel.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/186tyesy.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '186tyesy.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-01T02:16:44Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/186tyesy.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5d4a9e1-f40a-5068-aa9c-e53e2c6a0adb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-28T18:44:24Z","modified":"2026-07-28T18:44:24Z","name":"Phishing domain: 18754.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/18754.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18754.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-28T18:44:24Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/18754.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ed9176b-480d-53e1-98e7-9660a32c330a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-28T18:52:29Z","modified":"2026-07-28T18:52:29Z","name":"Phishing domain: 18778.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/18778.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18778.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-28T18:52:29Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/18778.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6f5a431-2960-5c92-a022-eed57418222d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-30T21:00:06Z","modified":"2026-06-30T21:00:06Z","name":"Phishing domain: 18799.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/18799.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18799.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-30T21:00:06Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/18799.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--44391639-6485-5a3d-a78e-160ac2f64a76","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-01T02:21:53Z","modified":"2026-07-01T02:21:53Z","name":"Phishing domain: 187tyesy.vercel.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/187tyesy.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '187tyesy.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-01T02:21:53Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/187tyesy.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4db2789f-e0c9-5060-b4de-1947a7654ec2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-01T10:24:40Z","modified":"2026-03-01T10:24:40Z","name":"Phishing domain: 188-137-176-251.netherlands-3.vps.ac","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Exodus. Report & evidence: https://phishdestroy.io/domain/188-137-176-251.netherlands-3.vps.ac","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '188-137-176-251.netherlands-3.vps.ac']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-01T10:24:40Z","labels":["malicious-activity","phishing","brand:exodus"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/188-137-176-251.netherlands-3.vps.ac"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--234f244b-bf84-5af8-be74-dd3e506e2256","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:49Z","modified":"2026-02-26T23:23:49Z","name":"Phishing domain: 188-166-151-27.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/188-166-151-27.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '188-166-151-27.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:49Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/188-166-151-27.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8af3392e-0f33-5a1b-8bef-e2a2cad15a10","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-30T19:42:13Z","modified":"2026-06-30T19:42:13Z","name":"Phishing domain: 18819.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/18819.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18819.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-30T19:42:13Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/18819.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6189240-91de-5372-94e4-025d7622aa75","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-30T20:03:28Z","modified":"2026-06-30T20:03:28Z","name":"Phishing domain: 18821.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating MetaMask. Report & evidence: https://phishdestroy.io/domain/18821.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18821.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-30T20:03:28Z","labels":["malicious-activity","phishing","brand:metamask"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/18821.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--62b592d9-a210-5618-bd51-9cb5a0928b34","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T08:02:44Z","modified":"2026-08-10T08:02:44Z","name":"Phishing domain: 18827.click","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating WalletConnect. Report & evidence: https://phishdestroy.io/domain/18827.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18827.click']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T08:02:44Z","labels":["malicious-activity","phishing","brand:walletconnect"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/18827.click"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c2bd646-b16b-5f0f-957b-eaaa3a68aafb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-16T15:00:07Z","modified":"2026-07-16T15:00:07Z","name":"Phishing domain: 18831.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/18831.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18831.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-16T15:00:07Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/18831.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--243ee1c8-e75d-5f5e-b83a-cf2a73290c41","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-16T15:00:07Z","modified":"2026-07-16T15:00:07Z","name":"Phishing domain: 18838.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/18838.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18838.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-16T15:00:07Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/18838.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--87d57b94-77a1-5f6e-8254-338689367e2a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-16T15:00:07Z","modified":"2026-07-16T15:00:07Z","name":"Phishing domain: 18895.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/18895.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18895.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-16T15:00:07Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/18895.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--90197fe1-3635-56af-9bdb-58b63787c271","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-30T19:37:49Z","modified":"2026-06-30T19:37:49Z","name":"Phishing domain: 18909.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/18909.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18909.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-30T19:37:49Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/18909.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f152dde2-2362-59d8-a44c-9af770a76b1c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-30T19:38:04Z","modified":"2026-06-30T19:38:04Z","name":"Phishing domain: 18914.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/18914.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18914.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-30T19:38:04Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/18914.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c312e2ee-806d-5408-98c0-a01720c6a407","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-30T19:41:38Z","modified":"2026-06-30T19:41:38Z","name":"Phishing domain: 18923.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/18923.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18923.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-30T19:41:38Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/18923.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--764b45e2-e920-54df-af82-dda6926094ab","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 1893769---6165.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1893769---6165.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1893769---6165.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1893769---6165.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9a7af1a-e8fb-5190-b3c7-8a568a7f6456","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-16T07:52:49Z","modified":"2025-09-16T07:52:49Z","name":"Phishing domain: 189724-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/189724-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '189724-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-16T07:52:49Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/189724-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b239759-370e-523b-b4c8-8cf5d610e1db","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-01T02:26:33Z","modified":"2026-07-01T02:26:33Z","name":"Phishing domain: 189tyesy.vercel.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/189tyesy.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '189tyesy.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-01T02:26:33Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/189tyesy.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0d00e6b-d853-5702-ad79-91692170e973","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-11T18:11:52Z","modified":"2026-08-11T18:11:52Z","name":"Phishing domain: 18aafc.winnicart.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/18aafc.winnicart.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18aafc.winnicart.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-11T18:11:52Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/18aafc.winnicart.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--966eccf0-87b5-5714-b8ac-d895a318e27a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-13T20:30:09Z","modified":"2026-08-13T20:30:09Z","name":"Phishing domain: 18d1f4.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/18d1f4.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18d1f4.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-13T20:30:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/18d1f4.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b535fa42-e216-5892-ab52-8203130b4fd6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-27T05:05:41Z","modified":"2026-04-27T05:05:41Z","name":"Phishing domain: 18jelas777.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/18jelas777.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18jelas777.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-27T05:05:41Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/18jelas777.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--64792604-c5db-57c7-9556-4ad0c2f9979c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:18Z","modified":"2026-02-26T23:23:18Z","name":"Phishing domain: 18p19p.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/18p19p.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '18p19p.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:18Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/18p19p.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc20e5ee-77db-5fbb-91e4-1d73fb1d296a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-20T15:21:46Z","modified":"2025-11-20T15:21:46Z","name":"Phishing domain: 1900892.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/1900892.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1900892.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-20T15:21:46Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1900892.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5ac1707-9bdb-5fd3-a38d-3e39264a8d24","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-08T12:16:35Z","modified":"2025-11-08T12:16:35Z","name":"Phishing domain: 1900897.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/1900897.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1900897.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-08T12:16:35Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1900897.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--50f16bd5-ac76-538b-af14-70ebf06911bb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-31T08:33:38Z","modified":"2025-10-31T08:33:38Z","name":"Phishing domain: 190243coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/190243coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '190243coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-31T08:33:38Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/190243coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c6095ea-1a73-5235-8771-42170759b27b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-27T10:59:16Z","modified":"2026-04-27T10:59:16Z","name":"Phishing domain: 190884coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/190884coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '190884coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-27T10:59:16Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/190884coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--590729d5-6a65-5a9f-9d46-a469d2500a6c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-13T20:51:44Z","modified":"2026-08-13T20:51:44Z","name":"Phishing domain: 190c90.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/190c90.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '190c90.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-13T20:51:44Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/190c90.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d519897-c35f-524d-a24e-c66da9d76e6a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-01T02:25:24Z","modified":"2026-07-01T02:25:24Z","name":"Phishing domain: 190tyesy.vercel.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/190tyesy.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '190tyesy.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-01T02:25:24Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/190tyesy.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--11c99ea2-ec8c-58c2-bbc8-3c0c49b54d04","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-30T10:22:49Z","modified":"2026-07-30T10:22:49Z","name":"Phishing domain: 19203910-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/19203910-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19203910-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-30T10:22:49Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/19203910-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7309e290-6fac-58b7-b566-947271a626df","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-18T19:36:48Z","modified":"2026-07-18T19:36:48Z","name":"Phishing domain: 19243coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/19243coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19243coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-18T19:36:48Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/19243coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--529a2c23-e894-5788-bd94-d98941a1f58c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:17Z","modified":"2026-07-27T06:02:17Z","name":"Phishing domain: 19268.vip","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/19268.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19268.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/19268.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eee61929-7d1c-5d50-a9aa-9c948d2bd13c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-10T10:53:39Z","modified":"2026-07-10T10:53:39Z","name":"Phishing domain: 192852-gemini.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Gemini. Report & evidence: https://phishdestroy.io/domain/192852-gemini.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '192852-gemini.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-10T10:53:39Z","labels":["malicious-activity","phishing","brand:gemini"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/192852-gemini.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6c01058-7a4d-5324-92a6-e74edd68e5d6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-23T15:37:49Z","modified":"2026-01-23T15:37:49Z","name":"Phishing domain: 192873-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating argent. Report & evidence: https://phishdestroy.io/domain/192873-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '192873-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-23T15:37:49Z","labels":["malicious-activity","phishing","brand:argent"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/192873-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5839876-8534-5740-a78d-9129e2d6ff35","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:42:20Z","modified":"2026-07-27T04:42:20Z","name":"Phishing domain: 192zz4.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/192zz4.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '192zz4.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:42:20Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/192zz4.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7db3bf63-1696-5914-9876-a2f5c3ebfd34","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:28Z","modified":"2026-02-26T23:20:28Z","name":"Phishing domain: 19348.locker","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/19348.locker","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19348.locker']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:28Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/19348.locker"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bdddb23-bda4-5ff1-a23c-cb9d4bc60dd5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-15T06:10:49Z","modified":"2025-10-15T06:10:49Z","name":"Phishing domain: 19349912-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/19349912-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19349912-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-15T06:10:49Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/19349912-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dc0c682-7952-5f8e-8ee7-565a1c4782a8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-09T10:24:32Z","modified":"2025-12-09T10:24:32Z","name":"Phishing domain: 194-164-59-27.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/194-164-59-27.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '194-164-59-27.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-09T10:24:32Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/194-164-59-27.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--83484459-dd27-5e09-8052-2ccc3919e9c5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:35Z","modified":"2026-02-26T23:23:35Z","name":"Phishing domain: 194879a-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/194879a-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '194879a-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:35Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/194879a-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cec0888-8cd4-5298-9644-5c9efa7fc266","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-31T12:16:16Z","modified":"2025-12-31T12:16:16Z","name":"Phishing domain: 195000000.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/195000000.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195000000.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-31T12:16:16Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195000000.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5dbc3979-896c-5d04-b955-18b9f6e45a29","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-31T12:17:20Z","modified":"2025-12-31T12:17:20Z","name":"Phishing domain: 195000222.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/195000222.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195000222.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-31T12:17:20Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195000222.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a590040c-9f5c-5370-8561-591dddb08fbf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-29T13:00:02Z","modified":"2025-12-29T13:00:02Z","name":"Phishing domain: 195000444.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/195000444.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195000444.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-29T13:00:02Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195000444.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb2cf2fb-3030-505d-b1a8-c59f86a8094b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-31T12:17:24Z","modified":"2025-12-31T12:17:24Z","name":"Phishing domain: 195000555.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/195000555.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195000555.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-31T12:17:24Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195000555.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--65ef40d9-64a6-5cfc-8927-bba263c752d8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T13:07:36Z","modified":"2026-01-02T13:07:36Z","name":"Phishing domain: 195000999.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/195000999.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195000999.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T13:07:36Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195000999.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0441e3b0-2a14-545f-a5a1-138cf989973c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-31T12:16:27Z","modified":"2025-12-31T12:16:27Z","name":"Phishing domain: 1950044.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/1950044.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1950044.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-31T12:16:27Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1950044.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--616a5c66-469b-5054-a238-28a8286cc904","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-31T12:17:16Z","modified":"2025-12-31T12:17:16Z","name":"Phishing domain: 1950055.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/1950055.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1950055.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-31T12:17:16Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1950055.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--73927e47-971d-5614-99a8-8f4ce54cf5c3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T13:06:34Z","modified":"2026-01-02T13:06:34Z","name":"Phishing domain: 195111111.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/195111111.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195111111.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T13:06:34Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195111111.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0256ce4e-ff4a-53de-9b53-a07e2766908a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-07T15:17:59Z","modified":"2026-01-07T15:17:59Z","name":"Phishing domain: 195111222.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/195111222.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195111222.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-07T15:17:59Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195111222.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--53c2ad1f-9a9f-5ce6-a0e3-6af2a93024ac","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T13:06:26Z","modified":"2026-01-02T13:06:26Z","name":"Phishing domain: 195111666.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/195111666.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195111666.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T13:06:26Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195111666.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc064239-7cd2-547b-bcbc-da4ae6878c9a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-31T12:17:13Z","modified":"2025-12-31T12:17:13Z","name":"Phishing domain: 195111777.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/195111777.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195111777.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-31T12:17:13Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195111777.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--743321da-f256-52db-9ad3-0b6112c7b380","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-17T20:54:38Z","modified":"2025-12-17T20:54:38Z","name":"Phishing domain: 1951155.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/1951155.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1951155.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-17T20:54:38Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1951155.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f5fad6c-e1fa-5d01-9143-5623ac86233e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-31T12:16:16Z","modified":"2025-12-31T12:16:16Z","name":"Phishing domain: 195120.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/195120.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195120.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-31T12:16:16Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195120.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--64e54810-703d-5767-89f0-928ef8a1a263","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-27T12:47:07Z","modified":"2025-12-27T12:47:07Z","name":"Phishing domain: 195143.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/195143.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195143.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-27T12:47:07Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195143.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4dd2e96e-968f-5488-a7e8-dae433bed047","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-17T20:56:57Z","modified":"2025-12-17T20:56:57Z","name":"Phishing domain: 195145.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/195145.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195145.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-17T20:56:57Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195145.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--afe72f04-0c51-54cd-9c96-9daf03945c45","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T14:04:41Z","modified":"2026-01-02T14:04:41Z","name":"Phishing domain: 195167.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/195167.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195167.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T14:04:41Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195167.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e805d894-c91b-5dd7-a84e-e9eefe4ad994","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-17T20:54:41Z","modified":"2025-12-17T20:54:41Z","name":"Phishing domain: 195171.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/195171.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195171.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-17T20:54:41Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195171.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--09bc1f9c-9437-5b8f-8060-64629439e990","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-08T00:31:24Z","modified":"2025-12-08T00:31:24Z","name":"Phishing domain: 195173.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/195173.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195173.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-08T00:31:24Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195173.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5274a018-a74d-515a-b4e1-fc990220c2e9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T14:05:26Z","modified":"2026-01-02T14:05:26Z","name":"Phishing domain: 195174.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/195174.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195174.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T14:05:26Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195174.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--72a833b5-4c14-5bbf-9982-4f796ca6c2fe","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-04T14:44:30Z","modified":"2026-01-04T14:44:30Z","name":"Phishing domain: 195176.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/195176.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195176.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-04T14:44:30Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195176.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7e119fb-990e-5794-98cc-409a7e3dd9c8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:52Z","modified":"2026-02-26T23:22:52Z","name":"Phishing domain: 195190.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/195190.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195190.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:52Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195190.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9fbe0d3-58ed-5679-9fdb-f83c0089715a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T14:06:26Z","modified":"2026-01-02T14:06:26Z","name":"Phishing domain: 19522.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/19522.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19522.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T14:06:26Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/19522.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ac28b0a-5f6f-51b8-a456-a572630e4db2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-17T20:56:14Z","modified":"2025-12-17T20:56:14Z","name":"Phishing domain: 195222333.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/195222333.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195222333.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-17T20:56:14Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195222333.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2df535d9-42a3-52e5-874b-9848d66b7037","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T14:06:21Z","modified":"2026-01-02T14:06:21Z","name":"Phishing domain: 195222444.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/195222444.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195222444.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T14:06:21Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195222444.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb90537b-aa63-5ac8-b1fe-d30fe7df8304","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-08T00:35:45Z","modified":"2025-12-08T00:35:45Z","name":"Phishing domain: 195222555.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/195222555.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195222555.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-08T00:35:45Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195222555.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--76420bcb-af70-536d-86ec-3e67e9ccbd08","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-17T20:49:42Z","modified":"2025-12-17T20:49:42Z","name":"Phishing domain: 195222666.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/195222666.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195222666.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-17T20:49:42Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195222666.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3629a19a-fcb1-57f5-a5bf-8b8355e07cbc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-17T20:50:35Z","modified":"2025-12-17T20:50:35Z","name":"Phishing domain: 195222777.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/195222777.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195222777.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-17T20:50:35Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195222777.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4259f9e6-cc2e-59b8-87cc-01955b739013","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-17T20:53:22Z","modified":"2025-12-17T20:53:22Z","name":"Phishing domain: 195222888.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/195222888.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195222888.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-17T20:53:22Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195222888.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--611e0d87-e441-5183-a736-697c469f02cf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-17T20:49:15Z","modified":"2025-12-17T20:49:15Z","name":"Phishing domain: 1952255.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/1952255.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1952255.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-17T20:49:15Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1952255.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--27c10e62-9645-5fef-ac5c-09ffe6124684","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-17T20:49:50Z","modified":"2025-12-17T20:49:50Z","name":"Phishing domain: 1952266.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/1952266.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1952266.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-17T20:49:50Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1952266.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--df64ebef-e347-5c44-a971-479956f73e55","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-17T20:56:00Z","modified":"2025-12-17T20:56:00Z","name":"Phishing domain: 195232.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/195232.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195232.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-17T20:56:00Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195232.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--43c5ec89-1412-5929-b740-7d94b76b5641","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T14:05:35Z","modified":"2026-01-02T14:05:35Z","name":"Phishing domain: 195233.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/195233.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195233.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T14:05:35Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195233.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--33767493-4b35-58ef-8f53-3f84bdc20cb8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:06Z","modified":"2026-02-26T23:21:06Z","name":"Phishing domain: 195239.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/195239.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195239.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:06Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195239.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cd527e6-d740-5566-9e7b-520400aaae0a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:52Z","modified":"2026-02-26T23:21:52Z","name":"Phishing domain: 195241.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/195241.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195241.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:52Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195241.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6dae12a-9952-5e60-984f-010e975a4dab","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-17T20:55:27Z","modified":"2025-12-17T20:55:27Z","name":"Phishing domain: 195243.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/195243.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195243.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-17T20:55:27Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195243.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4102506f-382f-5800-96b7-b23d96a3d698","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T14:04:35Z","modified":"2026-01-02T14:04:35Z","name":"Phishing domain: 195263.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/195263.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195263.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T14:04:35Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195263.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bcb886b-75bf-5e80-9b19-e5516f5806da","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:41Z","modified":"2026-02-26T23:24:41Z","name":"Phishing domain: 195267.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/195267.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195267.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:41Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195267.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--229a14f9-2e86-56ab-a116-ff423d144d4f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-04T14:43:38Z","modified":"2026-01-04T14:43:38Z","name":"Phishing domain: 195269.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/195269.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195269.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-04T14:43:38Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195269.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4313d262-9d53-5e1b-b8d5-a344f7f03684","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-04T14:46:08Z","modified":"2026-01-04T14:46:08Z","name":"Phishing domain: 195333222.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/195333222.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195333222.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-04T14:46:08Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195333222.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--48638766-011d-5ef7-ab06-5da62da3dd4d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-17T20:55:55Z","modified":"2025-12-17T20:55:55Z","name":"Phishing domain: 195333333.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/195333333.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195333333.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-17T20:55:55Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195333333.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b913dc63-46d3-5359-b0cf-36cc19ae8d9e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-17T20:49:58Z","modified":"2025-12-17T20:49:58Z","name":"Phishing domain: 195333444.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/195333444.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195333444.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-17T20:49:58Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195333444.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--71e3e5b6-98be-559a-83ad-d3ca15f012e4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T14:05:35Z","modified":"2026-01-02T14:05:35Z","name":"Phishing domain: 195333555.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/195333555.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195333555.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T14:05:35Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195333555.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3843cb2-d108-526a-b9be-5057320514cd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-17T20:53:35Z","modified":"2025-12-17T20:53:35Z","name":"Phishing domain: 195333666.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/195333666.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195333666.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-17T20:53:35Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195333666.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9339105f-985f-53a5-b820-e4ba1a64cb82","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-17T20:48:49Z","modified":"2025-12-17T20:48:49Z","name":"Phishing domain: 195333777.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/195333777.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195333777.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-17T20:48:49Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195333777.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7295cd70-2ba3-56b8-9f2f-ceea9d82e688","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-17T20:56:45Z","modified":"2025-12-17T20:56:45Z","name":"Phishing domain: 195444000.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/195444000.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195444000.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-17T20:56:45Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195444000.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef032c02-f421-5d61-9f87-7aa187b712e2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-04T14:42:06Z","modified":"2026-01-04T14:42:06Z","name":"Phishing domain: 195444111.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/195444111.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195444111.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-04T14:42:06Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195444111.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbc7931c-26d5-5117-a081-b53e4b8e07e7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-25T15:35:34Z","modified":"2026-01-25T15:35:34Z","name":"Phishing domain: 195444666.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/195444666.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195444666.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-25T15:35:34Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195444666.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--60be88d8-43a9-58b0-a8a3-3d283d6f2cfc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-17T20:49:00Z","modified":"2025-12-17T20:49:00Z","name":"Phishing domain: 195444777.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/195444777.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195444777.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-17T20:49:00Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195444777.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c04de45-dca6-5b0e-9159-5584b10dba09","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-17T20:49:29Z","modified":"2025-12-17T20:49:29Z","name":"Phishing domain: 195444888.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/195444888.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195444888.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-17T20:49:29Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195444888.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--afe3a31e-f5e9-5829-aaeb-abfca51e3d67","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-17T20:48:51Z","modified":"2025-12-17T20:48:51Z","name":"Phishing domain: 195444999.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/195444999.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195444999.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-17T20:48:51Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195444999.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9537220d-9eda-5261-ad08-1345f2c07070","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-03T14:25:49Z","modified":"2026-08-03T14:25:49Z","name":"Phishing domain: 19546.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/19546.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19546.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-03T14:25:49Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/19546.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e8792e4-152a-52f3-bad6-64a2f6030f69","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:46Z","modified":"2026-02-26T23:19:46Z","name":"Phishing domain: 195555444.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/195555444.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195555444.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:46Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195555444.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7253653-31dd-5805-971e-04239c466fbf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-04T14:45:43Z","modified":"2026-01-04T14:45:43Z","name":"Phishing domain: 195666444.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/195666444.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195666444.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-04T14:45:43Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195666444.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4a4e4be-3d35-55f2-b598-4e09a0f7283c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T13:17:17Z","modified":"2026-01-02T13:17:17Z","name":"Phishing domain: 195666999.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/195666999.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195666999.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T13:17:17Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195666999.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--04efc072-17a0-5a06-909e-e5a2536c00b1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:48Z","modified":"2026-02-26T23:19:48Z","name":"Phishing domain: 195669.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/195669.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195669.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:48Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195669.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5db0d13e-fdb2-5860-9665-a3092d4031b4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-17T20:53:02Z","modified":"2025-12-17T20:53:02Z","name":"Phishing domain: 1957711.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/1957711.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1957711.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-17T20:53:02Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1957711.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--057bc3a2-ff5f-51ef-951e-28a81fd8b590","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-17T20:54:14Z","modified":"2025-12-17T20:54:14Z","name":"Phishing domain: 1957766.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/1957766.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1957766.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-17T20:54:14Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1957766.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2adbb9e-e2d1-5a4e-be0b-0fd2d7be5f77","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-17T20:56:38Z","modified":"2025-12-17T20:56:38Z","name":"Phishing domain: 195777333.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/195777333.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195777333.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-17T20:56:38Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195777333.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c418d52-adf3-51f7-8bb0-c449aec3ac5b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T14:06:27Z","modified":"2026-01-02T14:06:27Z","name":"Phishing domain: 1957799.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/1957799.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1957799.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T14:06:27Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1957799.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad4c64b9-b0c3-5a83-938a-8f635d350401","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:23Z","modified":"2026-02-26T23:21:23Z","name":"Phishing domain: 195862.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/195862.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195862.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:23Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195862.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f73cce87-de80-5fe1-95e4-6a79e514c929","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-27T12:46:09Z","modified":"2025-12-27T12:46:09Z","name":"Phishing domain: 195867.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/195867.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195867.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-27T12:46:09Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195867.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--05a0f309-8b5f-5f82-84c0-4db41021ad2b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-08T00:33:27Z","modified":"2025-12-08T00:33:27Z","name":"Phishing domain: 1958800.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/1958800.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1958800.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-08T00:33:27Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1958800.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cf58be8-6dd4-5658-8d58-0af90fec5fda","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T14:04:29Z","modified":"2026-01-02T14:04:29Z","name":"Phishing domain: 195882.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/195882.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195882.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T14:04:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195882.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--759f372b-88c7-5602-a1d8-c7e2c6f6cda2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-04T14:44:48Z","modified":"2026-01-04T14:44:48Z","name":"Phishing domain: 1958822.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/1958822.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1958822.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-04T14:44:48Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1958822.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--734ba287-7698-5014-8d5b-9df7c220217d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-17T20:49:44Z","modified":"2025-12-17T20:49:44Z","name":"Phishing domain: 1958866.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/1958866.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1958866.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-17T20:49:44Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1958866.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c032e33c-e599-5e71-a173-edc754a47359","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-27T12:46:09Z","modified":"2025-12-27T12:46:09Z","name":"Phishing domain: 195909.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/195909.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195909.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-27T12:46:09Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195909.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a0f2453-06b7-541f-a99f-3e6d932286bb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T14:05:26Z","modified":"2026-01-02T14:05:26Z","name":"Phishing domain: 195917.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/195917.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195917.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T14:05:26Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195917.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e16cd11e-68b0-5a55-be10-e17e41f719ac","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-27T12:47:17Z","modified":"2025-12-27T12:47:17Z","name":"Phishing domain: 195926.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/195926.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195926.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-27T12:47:17Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195926.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7beeca67-d32d-54c8-bdde-fe5254a565f9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T13:12:04Z","modified":"2026-01-02T13:12:04Z","name":"Phishing domain: 195927.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/195927.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195927.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T13:12:04Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195927.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--543880ec-92f2-5a86-a7dc-95577a2dd8d2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T13:11:15Z","modified":"2026-01-02T13:11:15Z","name":"Phishing domain: 195937.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/195937.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195937.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T13:11:15Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195937.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbac2c7d-b2a0-5502-a18d-86ad964158b9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:06Z","modified":"2026-02-26T23:23:06Z","name":"Phishing domain: 195972.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/195972.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195972.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:06Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195972.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fbc756a-47a7-53ed-88c3-20ddf565a782","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-27T12:47:09Z","modified":"2025-12-27T12:47:09Z","name":"Phishing domain: 195973.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/195973.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195973.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-27T12:47:09Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195973.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdc62453-30a3-5974-8766-e6193ac2801d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:20Z","modified":"2026-02-26T23:19:20Z","name":"Phishing domain: 19599993333.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/19599993333.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19599993333.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:20Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/19599993333.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d0afb95-2c28-5b7a-8e7c-33d0ffa64744","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T13:18:16Z","modified":"2026-01-02T13:18:16Z","name":"Phishing domain: 195gggg.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/195gggg.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195gggg.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T13:18:16Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195gggg.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8220fcf-cd56-561a-84a4-910901a273d1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-04T14:44:33Z","modified":"2026-01-04T14:44:33Z","name":"Phishing domain: 195jjjj.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/195jjjj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195jjjj.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-04T14:44:33Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195jjjj.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c761cb7-01c8-5fd5-94f0-bb9f870ada22","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:09Z","modified":"2026-02-26T23:21:09Z","name":"Phishing domain: 195kkkk.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/195kkkk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195kkkk.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:09Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195kkkk.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b14b36c5-de04-5b2d-844d-3dca5729f081","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-03T00:12:58Z","modified":"2026-01-03T00:12:58Z","name":"Phishing domain: 195qq195.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/195qq195.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195qq195.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-03T00:12:58Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195qq195.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a4b6bc4-5340-5de1-83ae-1718b180f814","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:46Z","modified":"2026-02-26T23:23:46Z","name":"Phishing domain: 195xxxx195.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/195xxxx195.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195xxxx195.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:46Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195xxxx195.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--52402ad0-2333-5bf0-a95c-eaed580af135","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:42Z","modified":"2026-02-26T23:21:42Z","name":"Phishing domain: 195zzzz.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/195zzzz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '195zzzz.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:42Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/195zzzz.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e26db5c8-8049-5df0-945b-39016b8a457a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:48Z","modified":"2026-02-26T23:23:48Z","name":"Phishing domain: 196-251-81-125.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/196-251-81-125.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '196-251-81-125.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:48Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/196-251-81-125.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--58645eaf-8a77-5231-9e47-18cdc3a72017","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 19677v.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/19677v.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19677v.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/19677v.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d05ac2d-bbf9-5b6d-8b75-37a6f1d8c299","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:58Z","modified":"2026-02-26T23:22:58Z","name":"Phishing domain: 198-23-193-170.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericbanking. Report & evidence: https://phishdestroy.io/domain/198-23-193-170.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '198-23-193-170.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:58Z","labels":["malicious-activity","phishing","brand:genericbanking"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/198-23-193-170.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--21d862b5-a5e4-5680-b1dd-2b93e20c5afc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-18T16:20:28Z","modified":"2025-10-18T16:20:28Z","name":"Phishing domain: 19845cf7fa864a77.raydiumpro-web.shop","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Raydium. Report & evidence: https://phishdestroy.io/domain/19845cf7fa864a77.raydiumpro-web.shop","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19845cf7fa864a77.raydiumpro-web.shop']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-18T16:20:28Z","labels":["malicious-activity","phishing","brand:raydium"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/19845cf7fa864a77.raydiumpro-web.shop"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--49a270c9-feba-59d1-9260-0fb6f0f5e1a1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-21T18:18:55Z","modified":"2026-02-21T18:18:55Z","name":"Phishing domain: 198549coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/198549coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '198549coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-21T18:18:55Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/198549coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c058aeda-07f9-508d-93da-2ad724e0883b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-03T13:19:32Z","modified":"2025-09-03T13:19:32Z","name":"Phishing domain: 1987320-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/1987320-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1987320-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-03T13:19:32Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1987320-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d4a0078-d7fd-5bfa-afb9-364d8f5f2309","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T15:03:37Z","modified":"2026-02-13T15:03:37Z","name":"Phishing domain: 1991betbrazil.bet","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1991betbrazil.bet","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1991betbrazil.bet']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T15:03:37Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1991betbrazil.bet"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccfe50b6-3319-5831-965f-bda22eea9669","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:27Z","modified":"2026-02-26T23:22:27Z","name":"Phishing domain: 19980406.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating gemini. Report & evidence: https://phishdestroy.io/domain/19980406.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19980406.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:27Z","labels":["malicious-activity","phishing","brand:gemini"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/19980406.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--51018f66-a617-56d7-8313-c14a7c4cfaa7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-07T22:53:39Z","modified":"2026-07-07T22:53:39Z","name":"Phishing domain: 1999991-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/1999991-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1999991-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-07T22:53:39Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1999991-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d8e7c70-922f-5295-a43e-594eae6633ce","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-08T23:35:21Z","modified":"2025-10-08T23:35:21Z","name":"Phishing domain: 19yb.tap1288kuh.vip","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Apple. Report & evidence: https://phishdestroy.io/domain/19yb.tap1288kuh.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '19yb.tap1288kuh.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-08T23:35:21Z","labels":["malicious-activity","phishing","brand:apple"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/19yb.tap1288kuh.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fa3c597-6cec-5a9b-b1fa-d1a461adc244","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-12T03:19:02Z","modified":"2026-08-12T03:19:02Z","name":"Phishing domain: 1a030c.arcadejafet.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/1a030c.arcadejafet.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1a030c.arcadejafet.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-12T03:19:02Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1a030c.arcadejafet.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d4ff7b2-fde8-57be-a961-c41a12f9afe3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-11T13:16:52Z","modified":"2026-08-11T13:16:52Z","name":"Phishing domain: 1acc0c.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/1acc0c.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1acc0c.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-11T13:16:52Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1acc0c.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--610a1494-e073-5d1c-9256-b3093fe508d0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-06T21:27:25Z","modified":"2026-01-06T21:27:25Z","name":"Phishing domain: 1acey.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1acey.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1acey.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-06T21:27:25Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1acey.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3581aadb-f640-5763-ba8e-f54b6b47f94f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-09T23:07:55Z","modified":"2025-11-09T23:07:55Z","name":"Phishing domain: 1airdrop.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aave. Report & evidence: https://phishdestroy.io/domain/1airdrop.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1airdrop.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-09T23:07:55Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1airdrop.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd1a271d-f15b-5140-8942-a6647f9c5eb7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-17T15:21:53Z","modified":"2026-03-17T15:21:53Z","name":"Phishing domain: 1amlbot.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating foundation. Report & evidence: https://phishdestroy.io/domain/1amlbot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1amlbot.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-17T15:21:53Z","labels":["malicious-activity","phishing","brand:foundation"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1amlbot.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--38190839-d36e-50e3-ab87-1110ce26ce25","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-08T04:18:22Z","modified":"2025-12-08T04:18:22Z","name":"Phishing domain: 1anime.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1anime.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1anime.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-08T04:18:22Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1anime.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a21e93b1-5c23-578e-a06f-77419a7103d6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-12T12:25:21Z","modified":"2025-10-12T12:25:21Z","name":"Phishing domain: 1aynck-hyper.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/1aynck-hyper.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1aynck-hyper.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-12T12:25:21Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1aynck-hyper.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1da3bbb-3457-5470-9b1c-d844ffabfbbe","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-27T06:18:38Z","modified":"2026-02-27T06:18:38Z","name":"Phishing domain: 1ball.st","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1ball.st","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1ball.st']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-27T06:18:38Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1ball.st"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--434530fa-bfb5-5258-981b-d80b72260fe7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-25T06:00:37Z","modified":"2026-02-25T06:00:37Z","name":"Phishing domain: 1bc29b36f623ba82aaf6724fd3b16718.netlify.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating opensea. Report & evidence: https://phishdestroy.io/domain/1bc29b36f623ba82aaf6724fd3b16718.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1bc29b36f623ba82aaf6724fd3b16718.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-25T06:00:37Z","labels":["malicious-activity","phishing","brand:opensea"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1bc29b36f623ba82aaf6724fd3b16718.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc9859ea-3273-547b-9b27-ac5c06e84069","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-04T18:42:37Z","modified":"2026-02-04T18:42:37Z","name":"Phishing domain: 1bets.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/1bets.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1bets.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-04T18:42:37Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1bets.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f44e5544-f547-55a9-b077-98c0aa970dbf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-05T15:13:36Z","modified":"2026-01-05T15:13:36Z","name":"Phishing domain: 1betsline.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating cryptoscam. Report & evidence: https://phishdestroy.io/domain/1betsline.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1betsline.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-05T15:13:36Z","labels":["malicious-activity","phishing","brand:cryptoscam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1betsline.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5112873b-106d-593c-83d0-4e052c63bdfa","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-03T02:21:14Z","modified":"2026-07-03T02:21:14Z","name":"Phishing domain: 1bfe98b0-6714-be4c-3bf4-docviewer.rajesh-das1010.workers.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating microsoft. Report & evidence: https://phishdestroy.io/domain/1bfe98b0-6714-be4c-3bf4-docviewer.rajesh-das1010.workers.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1bfe98b0-6714-be4c-3bf4-docviewer.rajesh-das1010.workers.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-03T02:21:14Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1bfe98b0-6714-be4c-3bf4-docviewer.rajesh-das1010.workers.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8197c24f-7c86-56fa-a5c0-f4ddaf4b7f3c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-21T16:29:27Z","modified":"2025-12-21T16:29:27Z","name":"Phishing domain: 1bigwin.click","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/1bigwin.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1bigwin.click']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-21T16:29:27Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1bigwin.click"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8eeeb0b-9104-53ad-a532-461e6d8a9761","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-02T00:17:32Z","modified":"2025-12-02T00:17:32Z","name":"Phishing domain: 1bklass.150shelkovo011.booksvala.in","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1bklass.150shelkovo011.booksvala.in","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1bklass.150shelkovo011.booksvala.in']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-02T00:17:32Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1bklass.150shelkovo011.booksvala.in"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b07c0ae-c2a2-5dd4-8129-48226ebe82ae","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-23T04:21:26Z","modified":"2026-02-23T04:21:26Z","name":"Phishing domain: 1blacksprut.me","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1blacksprut.me","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1blacksprut.me']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-23T04:21:26Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1blacksprut.me"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2da2bc72-7aee-5b9a-90d2-02f5afb737ed","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-18T17:57:42Z","modified":"2025-09-18T17:57:42Z","name":"Phishing domain: 1bull.vandex.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/1bull.vandex.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1bull.vandex.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-18T17:57:42Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1bull.vandex.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--da6a311f-33ee-5cd1-b259-555bba066a02","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-23T00:41:36Z","modified":"2025-09-23T00:41:36Z","name":"Phishing domain: 1bull.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1bull.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1bull.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-23T00:41:36Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1bull.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2e4a0a5-c1be-56cf-b4c5-f5c1501e215e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T23:54:38Z","modified":"2026-08-09T23:54:38Z","name":"Phishing domain: 1c2c65.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/1c2c65.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1c2c65.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T23:54:38Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1c2c65.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c83140c4-88f2-5d8b-9fb8-5e40f90fa562","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-13T21:15:34Z","modified":"2026-08-13T21:15:34Z","name":"Phishing domain: 1c5197.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1c5197.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1c5197.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-13T21:15:34Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1c5197.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9503242f-2158-58f4-aac0-5438c5bda108","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-02-21T13:30:00Z","modified":"2025-02-21T13:30:00Z","name":"Phishing domain: 1cas.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1cas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1cas.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-02-21T13:30:00Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1cas.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3a1c238-7f9e-520b-9678-52ce01727cb5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-24T19:41:43Z","modified":"2025-08-24T19:41:43Z","name":"Phishing domain: 1casino.world","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1casino.world","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1casino.world']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-24T19:41:43Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1casino.world"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9ea6cbd-d0b6-540e-8cf7-5bc8eda5fb3c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-05T13:08:20Z","modified":"2026-01-05T13:08:20Z","name":"Phishing domain: 1casx.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating x.com. Report & evidence: https://phishdestroy.io/domain/1casx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1casx.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-05T13:08:20Z","labels":["malicious-activity","phishing","brand:x.com"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1casx.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c53cfce-5162-501b-8e4e-260dd7d745a6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-12T22:32:17Z","modified":"2026-02-12T22:32:17Z","name":"Phishing domain: 1co1n-sol.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/1co1n-sol.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1co1n-sol.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-12T22:32:17Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1co1n-sol.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--df9d0ff5-f3f0-5b03-89ab-965b09524319","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-12T23:26:28Z","modified":"2026-02-12T23:26:28Z","name":"Phishing domain: 1cobaltlab.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating steam. Report & evidence: https://phishdestroy.io/domain/1cobaltlab.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1cobaltlab.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-12T23:26:28Z","labels":["malicious-activity","phishing","brand:steam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1cobaltlab.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b4e17e8-d07f-5d45-8ee7-28f9d3ba61de","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T04:35:32Z","modified":"2026-02-13T04:35:32Z","name":"Phishing domain: 1cobaltlab.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating steam. Report & evidence: https://phishdestroy.io/domain/1cobaltlab.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1cobaltlab.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T04:35:32Z","labels":["malicious-activity","phishing","brand:steam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1cobaltlab.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--79d9e713-5f9b-5752-97f4-6189ceef8883","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T04:17:38Z","modified":"2026-02-13T04:17:38Z","name":"Phishing domain: 1cobaltlab.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating steam. Report & evidence: https://phishdestroy.io/domain/1cobaltlab.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1cobaltlab.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T04:17:38Z","labels":["malicious-activity","phishing","brand:steam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1cobaltlab.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--36c91e36-868d-5e13-8f08-4186ee38c9de","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-14T01:44:47Z","modified":"2025-11-14T01:44:47Z","name":"Phishing domain: 1coin-allocation.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating backpack. Report & evidence: https://phishdestroy.io/domain/1coin-allocation.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1coin-allocation.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-14T01:44:47Z","labels":["malicious-activity","phishing","brand:backpack"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1coin-allocation.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--710fdca9-4890-5cea-bf80-e41c190e113c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-24T17:50:19Z","modified":"2026-01-24T17:50:19Z","name":"Phishing domain: 1coin-sol.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/1coin-sol.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1coin-sol.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-24T17:50:19Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1coin-sol.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--395cba42-39e8-5e5d-b44a-bf9c0984a257","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-16T02:41:03Z","modified":"2025-11-16T02:41:03Z","name":"Phishing domain: 1coinofsolana.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/1coinofsolana.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1coinofsolana.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-16T02:41:03Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1coinofsolana.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--59de5fef-72f8-59fc-b5db-c7e61518a49c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-28T10:30:32Z","modified":"2026-01-28T10:30:32Z","name":"Phishing domain: 1coinsol.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1coinsol.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1coinsol.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-28T10:30:32Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1coinsol.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea615aa4-f842-566a-835d-146ac8dcb9ac","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-31T19:08:25Z","modified":"2026-03-31T19:08:25Z","name":"Phishing domain: 1coldwallet.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1coldwallet.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1coldwallet.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-31T19:08:25Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1coldwallet.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--afd5ba52-a0c7-5dc5-a5ca-73191d206cc2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-13T06:40:08Z","modified":"2026-08-13T06:40:08Z","name":"Phishing domain: 1crypline.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1crypline.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1crypline.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-13T06:40:08Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1crypline.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5a5665a-594d-56d7-8cf7-e700dc139da3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T07:31:51Z","modified":"2026-08-10T07:31:51Z","name":"Phishing domain: 1cs.fail","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating cs2. Report & evidence: https://phishdestroy.io/domain/1cs.fail","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1cs.fail']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T07:31:51Z","labels":["malicious-activity","phishing","brand:cs2"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1cs.fail"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d1915c1-8ddb-5ae5-9650-2e3b9621de38","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-15T03:04:29Z","modified":"2026-07-15T03:04:29Z","name":"Phishing domain: 1d1na6uidotcom.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1d1na6uidotcom.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1d1na6uidotcom.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-15T03:04:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1d1na6uidotcom.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4a95cce-3acd-5f17-af37-5fcf9599895f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-11T12:55:07Z","modified":"2026-08-11T12:55:07Z","name":"Phishing domain: 1d6c55.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/1d6c55.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1d6c55.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-11T12:55:07Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1d6c55.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f719b44c-d36f-58d7-a8f9-8d2c0a1f4acb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-04T17:09:05Z","modified":"2026-02-04T17:09:05Z","name":"Phishing domain: 1da685b5-8acc-4bc8-a9f7-f33a9f556ab8-00-21mof8w0xapwa.janeway.replit.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating santander. Report & evidence: https://phishdestroy.io/domain/1da685b5-8acc-4bc8-a9f7-f33a9f556ab8-00-21mof8w0xapwa.janeway.replit.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1da685b5-8acc-4bc8-a9f7-f33a9f556ab8-00-21mof8w0xapwa.janeway.replit.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-04T17:09:05Z","labels":["malicious-activity","phishing","brand:santander"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1da685b5-8acc-4bc8-a9f7-f33a9f556ab8-00-21mof8w0xapwa.janeway.replit.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--83199e7a-4a81-5572-860c-a24facf7338e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-11T18:24:24Z","modified":"2026-08-11T18:24:24Z","name":"Phishing domain: 1df173.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/1df173.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1df173.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-11T18:24:24Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1df173.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9dee6431-75a7-5a0a-af5b-df460ec1d8d9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-18T23:13:19Z","modified":"2026-05-18T23:13:19Z","name":"Phishing domain: 1doc-shop.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1doc-shop.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1doc-shop.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-18T23:13:19Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1doc-shop.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8610e18-a198-5eea-ad40-d8917de1deba","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:03Z","modified":"2026-02-26T23:22:03Z","name":"Phishing domain: 1dollarmigration.world","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1dollarmigration.world","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1dollarmigration.world']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:03Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1dollarmigration.world"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8bc900f-9225-54fd-aad7-511fb0d6751d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-28T09:13:35Z","modified":"2026-03-28T09:13:35Z","name":"Phishing domain: 1drop.bond","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ethereum. Report & evidence: https://phishdestroy.io/domain/1drop.bond","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1drop.bond']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-28T09:13:35Z","labels":["malicious-activity","phishing","brand:ethereum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1drop.bond"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--40858fc1-3485-5af3-b1b6-72342d3b6a22","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-24T05:55:09Z","modified":"2026-03-24T05:55:09Z","name":"Phishing domain: 1drop.click","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ethereum. Report & evidence: https://phishdestroy.io/domain/1drop.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1drop.click']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-24T05:55:09Z","labels":["malicious-activity","phishing","brand:ethereum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1drop.click"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f975423a-29e8-55df-914b-ec7dbd937217","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-24T05:51:49Z","modified":"2026-03-24T05:51:49Z","name":"Phishing domain: 1drop.cyou","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/1drop.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1drop.cyou']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-24T05:51:49Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1drop.cyou"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc0ec0dd-7315-562d-a5d3-928c7a74905b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-24T05:55:15Z","modified":"2026-03-24T05:55:15Z","name":"Phishing domain: 1drop.digital","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/1drop.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1drop.digital']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-24T05:55:15Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1drop.digital"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7dd10e29-3afe-5e02-ae8b-14d9c4fd9194","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-24T05:48:42Z","modified":"2026-03-24T05:48:42Z","name":"Phishing domain: 1drop.lat","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ethereum. Report & evidence: https://phishdestroy.io/domain/1drop.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1drop.lat']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-24T05:48:42Z","labels":["malicious-activity","phishing","brand:ethereum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1drop.lat"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--16ec8eed-0e8f-592c-bd7d-78be4548111f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-21T15:50:39Z","modified":"2026-03-21T15:50:39Z","name":"Phishing domain: 1drop.life","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/1drop.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1drop.life']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-21T15:50:39Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1drop.life"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--89883bce-5918-5241-9699-360b48db43bd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-24T05:51:33Z","modified":"2026-03-24T05:51:33Z","name":"Phishing domain: 1drop.sbs","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/1drop.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1drop.sbs']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-24T05:51:33Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1drop.sbs"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--85971576-80e4-5e08-86b4-3084bef0f3b6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-29T09:51:26Z","modified":"2025-11-29T09:51:26Z","name":"Phishing domain: 1e16831b-e8c0-4fcc-be7d-abde0a24c834-00-8wehzac0phfm.riker.replit.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating PayPal. Report & evidence: https://phishdestroy.io/domain/1e16831b-e8c0-4fcc-be7d-abde0a24c834-00-8wehzac0phfm.riker.replit.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1e16831b-e8c0-4fcc-be7d-abde0a24c834-00-8wehzac0phfm.riker.replit.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-29T09:51:26Z","labels":["malicious-activity","phishing","brand:paypal"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1e16831b-e8c0-4fcc-be7d-abde0a24c834-00-8wehzac0phfm.riker.replit.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c36c7e1-c050-5ae6-84e6-7efb58dee9f9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-21T23:51:13Z","modified":"2025-12-21T23:51:13Z","name":"Phishing domain: 1e1f212b.ripsyr.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/1e1f212b.ripsyr.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1e1f212b.ripsyr.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-21T23:51:13Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1e1f212b.ripsyr.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8857b799-1c39-5a94-959b-0dd999f530d1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-15T06:06:21Z","modified":"2025-10-15T06:06:21Z","name":"Phishing domain: 1e255938-f76e-4f80-b5c8-e8b9e02fe48e.wwwwdebank.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating debank. Report & evidence: https://phishdestroy.io/domain/1e255938-f76e-4f80-b5c8-e8b9e02fe48e.wwwwdebank.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1e255938-f76e-4f80-b5c8-e8b9e02fe48e.wwwwdebank.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-15T06:06:21Z","labels":["malicious-activity","phishing","brand:debank"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1e255938-f76e-4f80-b5c8-e8b9e02fe48e.wwwwdebank.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--799d48b2-55e6-5a13-ab21-4754881e678e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-17T09:25:32Z","modified":"2025-10-17T09:25:32Z","name":"Phishing domain: 1enchi.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/1enchi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1enchi.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-17T09:25:32Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1enchi.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--98bb5101-c27e-5370-ba63-e718b4a8ed2d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-01T14:10:33Z","modified":"2025-10-01T14:10:33Z","name":"Phishing domain: 1enching.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aave. Report & evidence: https://phishdestroy.io/domain/1enching.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1enching.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-01T14:10:33Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1enching.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c5f7fe5-8363-52f5-9b96-563c31876a3b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T02:16:51Z","modified":"2026-06-15T02:16:51Z","name":"Phishing domain: 1europaline.de","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1europaline.de","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1europaline.de']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T02:16:51Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1europaline.de"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a089a661-e0a0-5265-b5c2-71104a3771d5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-30T14:29:24Z","modified":"2026-07-30T14:29:24Z","name":"Phishing domain: 1f-icloud.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Apple. Report & evidence: https://phishdestroy.io/domain/1f-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1f-icloud.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-30T14:29:24Z","labels":["malicious-activity","phishing","brand:apple"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1f-icloud.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d0f35f4-c42c-54a5-ac01-986596741653","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T15:43:33Z","modified":"2026-08-09T15:43:33Z","name":"Phishing domain: 1fb9be.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1fb9be.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1fb9be.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T15:43:33Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1fb9be.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a98d470-8d01-5830-8341-4ad7483f1ca7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-11T18:32:49Z","modified":"2026-08-11T18:32:49Z","name":"Phishing domain: 1fba23.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/1fba23.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1fba23.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-11T18:32:49Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1fba23.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f46f2ba8-90b0-5021-b8e2-77c1080d1e12","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-30T20:07:44Z","modified":"2026-06-30T20:07:44Z","name":"Phishing domain: 1fellype.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Facebook. Report & evidence: https://phishdestroy.io/domain/1fellype.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1fellype.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-30T20:07:44Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1fellype.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--adc83453-e3c7-5ccf-8934-65faf7202885","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-23T00:26:46Z","modified":"2026-06-23T00:26:46Z","name":"Phishing domain: 1foqo.lat","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1foqo.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1foqo.lat']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-23T00:26:46Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1foqo.lat"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d0824c9-f21b-59e3-b168-0221f8ec84d4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-09T10:37:55Z","modified":"2025-08-09T10:37:55Z","name":"Phishing domain: 1fuel.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/1fuel.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1fuel.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-09T10:37:55Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1fuel.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8f61ade-29f6-5897-8ac8-7b605356b128","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:27Z","modified":"2026-02-26T23:21:27Z","name":"Phishing domain: 1fuel.to","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1fuel.to","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1fuel.to']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:27Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1fuel.to"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--19f93a66-57f8-52f8-be3b-2fec4194d73a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-28T10:43:18Z","modified":"2025-10-28T10:43:18Z","name":"Phishing domain: 1fueliotoken.life","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/1fueliotoken.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1fueliotoken.life']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-28T10:43:18Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1fueliotoken.life"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fba580e0-4f3c-5c21-afc1-b4ad0768138f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-17T15:35:00Z","modified":"2025-11-17T15:35:00Z","name":"Phishing domain: 1game.online","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating cryptoscam. Report & evidence: https://phishdestroy.io/domain/1game.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1game.online']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-17T15:35:00Z","labels":["malicious-activity","phishing","brand:cryptoscam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1game.online"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--30744ac7-eb22-5628-81bb-176d7d5c1c10","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-05T15:04:50Z","modified":"2026-01-05T15:04:50Z","name":"Phishing domain: 1games.digital","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating cryptoscam. Report & evidence: https://phishdestroy.io/domain/1games.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1games.digital']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-05T15:04:50Z","labels":["malicious-activity","phishing","brand:cryptoscam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1games.digital"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d9a09e8-4115-5230-b35b-85f9e434a4f3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-19T07:24:22Z","modified":"2025-10-19T07:24:22Z","name":"Phishing domain: 1games.world","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating cryptoscam. Report & evidence: https://phishdestroy.io/domain/1games.world","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1games.world']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-19T07:24:22Z","labels":["malicious-activity","phishing","brand:cryptoscam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1games.world"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c505ec6-c3c0-575f-a140-192e73969b38","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:29Z","modified":"2026-02-26T23:22:29Z","name":"Phishing domain: 1getgems.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1getgems.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1getgems.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1getgems.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--27db01d6-935a-5579-a0da-d82ff6f5da1b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-05T08:45:51Z","modified":"2026-03-05T08:45:51Z","name":"Phishing domain: 1googgglemeetss.click","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1googgglemeetss.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1googgglemeetss.click']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-05T08:45:51Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1googgglemeetss.click"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--44afa1ff-2d0f-5610-ac9b-a1981dd8581e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T04:30:22Z","modified":"2026-02-13T04:30:22Z","name":"Phishing domain: 1gowallet.site","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1gowallet.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1gowallet.site']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T04:30:22Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1gowallet.site"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--abf8530b-76d8-57bb-b88e-7ac0918be205","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-02T00:17:20Z","modified":"2025-12-02T00:17:20Z","name":"Phishing domain: 1greek.booksvala.in","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1greek.booksvala.in","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1greek.booksvala.in']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-02T00:17:20Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1greek.booksvala.in"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc3c58df-60cb-5f54-bf1a-962eb94e00e8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-23T01:57:12Z","modified":"2026-02-23T01:57:12Z","name":"Phishing domain: 1hero.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1hero.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1hero.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-23T01:57:12Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1hero.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb813ce6-2f42-59c3-a166-87a0c6eb90a8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-28T15:07:59Z","modified":"2026-06-28T15:07:59Z","name":"Phishing domain: 1hive.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Airdrop Scam. Report & evidence: https://phishdestroy.io/domain/1hive.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1hive.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-28T15:07:59Z","labels":["malicious-activity","phishing","brand:airdrop scam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1hive.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fe65482-7ffc-52aa-bd43-a60eb290aab1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-04T14:43:17Z","modified":"2026-01-04T14:43:17Z","name":"Phishing domain: 1https-www-roblox.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating roblox. Report & evidence: https://phishdestroy.io/domain/1https-www-roblox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1https-www-roblox.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-04T14:43:17Z","labels":["malicious-activity","phishing","brand:roblox"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1https-www-roblox.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5abba232-85ac-54b0-af26-0d829fafd425","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-27T09:44:21Z","modified":"2026-02-27T09:44:21Z","name":"Phishing domain: 1huj8.say-yt-host.workers.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1huj8.say-yt-host.workers.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1huj8.say-yt-host.workers.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-27T09:44:21Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1huj8.say-yt-host.workers.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef024fba-1970-5913-99cd-b740ff31d9d6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:49Z","modified":"2026-02-26T23:23:49Z","name":"Phishing domain: 1hyperliquid.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Hyperliquid. Report & evidence: https://phishdestroy.io/domain/1hyperliquid.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1hyperliquid.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:49Z","labels":["malicious-activity","phishing","brand:hyperliquid"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1hyperliquid.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1092f4be-2250-57dc-99ab-a41a18a93091","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:19Z","modified":"2026-02-26T23:19:19Z","name":"Phishing domain: 1icecoin.icu","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1icecoin.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1icecoin.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:19Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1icecoin.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5d3b1f3-3ba1-5fd1-bc5b-b6b19e3a2a50","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-25T16:37:53Z","modified":"2026-01-25T16:37:53Z","name":"Phishing domain: 1ido.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1ido.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1ido.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-25T16:37:53Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1ido.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b0bc974-66ed-539f-ad28-0ab7c2054300","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-25T11:05:45Z","modified":"2026-03-25T11:05:45Z","name":"Phishing domain: 1ido.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1ido.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1ido.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-25T11:05:45Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1ido.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3a38b30-c2be-54f2-b8a3-e3af5622b151","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T07:02:12Z","modified":"2026-07-27T07:02:12Z","name":"Phishing domain: 1iinch.gr.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1iinch.gr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1iinch.gr.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T07:02:12Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1iinch.gr.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--de5b3be8-559c-543b-90f5-e90c899eaed5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-24T23:15:03Z","modified":"2026-03-24T23:15:03Z","name":"Phishing domain: 1ike-shop.biz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1ike-shop.biz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1ike-shop.biz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-24T23:15:03Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1ike-shop.biz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab8a5123-6583-5fbd-afdb-83cc5bd74070","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-16T07:24:15Z","modified":"2025-12-16T07:24:15Z","name":"Phishing domain: 1incch.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1incch.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1incch.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-16T07:24:15Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1incch.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--60f2e7fe-4b4c-51a7-b797-5f666b3a68c4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:17Z","modified":"2026-02-26T23:24:17Z","name":"Phishing domain: 1inch-connect-wallet.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch-connect-wallet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch-connect-wallet.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:17Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch-connect-wallet.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8c5ea56-7548-545b-9f8e-c945f6f0679f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-10T11:08:33Z","modified":"2026-07-10T11:08:33Z","name":"Phishing domain: 1inch-dapp-router-v61.netlify.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch-dapp-router-v61.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch-dapp-router-v61.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-10T11:08:33Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch-dapp-router-v61.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ec7e5f7-937f-5705-a94e-e93d92cf9d1b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-10T10:48:51Z","modified":"2026-07-10T10:48:51Z","name":"Phishing domain: 1inch-dapp-router-v88.netlify.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch-dapp-router-v88.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch-dapp-router-v88.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-10T10:48:51Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch-dapp-router-v88.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ca64676-a0e9-55ae-b394-3fd8e92b43d4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-26T14:44:08Z","modified":"2026-07-26T14:44:08Z","name":"Phishing domain: 1inch-dex.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch-dex.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch-dex.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-26T14:44:08Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch-dex.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bef938c-75e4-5073-95f7-f9bbb367c190","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:46Z","modified":"2026-02-26T23:24:46Z","name":"Phishing domain: 1inch-docs.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch-docs.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch-docs.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:46Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch-docs.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--286b6429-ad00-52ef-b42f-f2d8d3ae740f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-24T17:22:46Z","modified":"2026-02-24T17:22:46Z","name":"Phishing domain: 1inch-network-dhs.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch-network-dhs.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch-network-dhs.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-24T17:22:46Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch-network-dhs.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--93865480-e8b4-537a-800b-d8d51247a2ea","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:26Z","modified":"2026-02-26T23:19:26Z","name":"Phishing domain: 1inch-partners.pro","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch-partners.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch-partners.pro']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:26Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch-partners.pro"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d26f0e77-ffbd-5a9e-94dd-f2182b3ddb55","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:41Z","modified":"2026-02-26T23:19:41Z","name":"Phishing domain: 1inch-pool-v3.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch-pool-v3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch-pool-v3.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:41Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch-pool-v3.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--398b00b5-254e-5d98-b190-114ec489a53b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:28Z","modified":"2026-02-26T23:22:28Z","name":"Phishing domain: 1inch-swap.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch-swap.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch-swap.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:28Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch-swap.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e1a3e99-1788-5aea-91e8-ec7f4ef5fccf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:44:08Z","modified":"2026-07-27T04:44:08Z","name":"Phishing domain: 1inch-viewer.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch-viewer.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch-viewer.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:44:08Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch-viewer.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--61d0b03c-aa0c-5394-9e8b-f13ea1cc7f4d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:52Z","modified":"2026-02-26T23:21:52Z","name":"Phishing domain: 1inch-web.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch-web.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch-web.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:52Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch-web.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b27e0c33-5265-5d7b-90e2-a2f2d41560d2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-03T11:13:12Z","modified":"2025-09-03T11:13:12Z","name":"Phishing domain: 1inch.4everland.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Binance. Report & evidence: https://phishdestroy.io/domain/1inch.4everland.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.4everland.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-03T11:13:12Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.4everland.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b193b05-3a98-58f0-85ec-b899ccfac5f1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-17T18:23:31Z","modified":"2025-10-17T18:23:31Z","name":"Phishing domain: 1inch.airdropalerts.icu","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.airdropalerts.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.airdropalerts.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-17T18:23:31Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.airdropalerts.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--42b1c1ac-a4d5-520b-afe8-76d53ef046fe","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-17T18:16:46Z","modified":"2025-10-17T18:16:46Z","name":"Phishing domain: 1inch.airdropalerts.life","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.airdropalerts.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.airdropalerts.life']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-17T18:16:46Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.airdropalerts.life"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f7cdb1b-26b3-5eb2-b88a-c5ef35bcabdd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-04T15:07:08Z","modified":"2025-12-04T15:07:08Z","name":"Phishing domain: 1inch.airdropsalert.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.airdropsalert.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.airdropsalert.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-04T15:07:08Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.airdropsalert.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8bdeb20-a7a7-509b-820d-bea9c05b8b15","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-22T14:55:58Z","modified":"2025-10-22T14:55:58Z","name":"Phishing domain: 1inch.airdropsalert.biz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.airdropsalert.biz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.airdropsalert.biz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-22T14:55:58Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.airdropsalert.biz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--73a8f1cc-43c3-52c2-9f90-aae823dec14b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-18T16:18:29Z","modified":"2025-10-18T16:18:29Z","name":"Phishing domain: 1inch.airdropsalert.icu","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.airdropsalert.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.airdropsalert.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-18T16:18:29Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.airdropsalert.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8992bf31-a1d2-5ea9-839a-b58afb8a1a15","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-24T10:38:17Z","modified":"2025-12-24T10:38:17Z","name":"Phishing domain: 1inch.airdropsalert.us","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.airdropsalert.us","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.airdropsalert.us']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-24T10:38:17Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.airdropsalert.us"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8972311c-967f-5af4-bd03-7c51a91e6f87","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-12T17:33:12Z","modified":"2025-11-12T17:33:12Z","name":"Phishing domain: 1inch.airdropsalert.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.airdropsalert.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.airdropsalert.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-12T17:33:12Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.airdropsalert.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b807f3a-bc71-5b95-85ae-634eaae87bd3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-25T04:35:52Z","modified":"2025-10-25T04:35:52Z","name":"Phishing domain: 1inch.airdropsalerts.sbs","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.airdropsalerts.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.airdropsalerts.sbs']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-25T04:35:52Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.airdropsalerts.sbs"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d426f81-052f-5af5-af56-c84cf7dc9e01","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-27T12:05:01Z","modified":"2025-10-27T12:05:01Z","name":"Phishing domain: 1inch.airdrpalerts.lol","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.airdrpalerts.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.airdrpalerts.lol']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-27T12:05:01Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.airdrpalerts.lol"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ca88ccd-3526-5913-9346-1de4f273d875","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-28T10:52:26Z","modified":"2025-10-28T10:52:26Z","name":"Phishing domain: 1inch.airdrpsalert.bond","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.airdrpsalert.bond","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.airdrpsalert.bond']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-28T10:52:26Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.airdrpsalert.bond"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcdceef9-603e-53fa-b568-afb550b7f489","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-06T02:33:39Z","modified":"2025-11-06T02:33:39Z","name":"Phishing domain: 1inch.airdrpsalerts.info","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.airdrpsalerts.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.airdrpsalerts.info']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-06T02:33:39Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.airdrpsalerts.info"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--efa97ad9-3c28-5cb7-989a-b190b7fc4a0e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-14T15:47:18Z","modified":"2025-11-14T15:47:18Z","name":"Phishing domain: 1inch.airdrpsalerts.lat","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.airdrpsalerts.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.airdrpsalerts.lat']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-14T15:47:18Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.airdrpsalerts.lat"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cc57d02-2aea-5020-afd0-378e165486fd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-11T21:56:49Z","modified":"2025-11-11T21:56:49Z","name":"Phishing domain: 1inch.airdrpsalerts.lol","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.airdrpsalerts.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.airdrpsalerts.lol']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-11T21:56:49Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.airdrpsalerts.lol"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--28d9663a-fb55-53d7-b6cb-2bfbda04db57","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-27T17:15:26Z","modified":"2025-11-27T17:15:26Z","name":"Phishing domain: 1inch.airdrpsalerts.sbs","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.airdrpsalerts.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.airdrpsalerts.sbs']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-27T17:15:26Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.airdrpsalerts.sbs"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3865fa89-7d80-5e02-a0b5-029e6d310d17","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-10T16:42:18Z","modified":"2025-11-10T16:42:18Z","name":"Phishing domain: 1inch.airdrpsalerts.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.airdrpsalerts.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.airdrpsalerts.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-10T16:42:18Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.airdrpsalerts.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f84a1c1-1470-5c6f-aa54-21a9c90eac7b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-13T16:35:24Z","modified":"2025-11-13T16:35:24Z","name":"Phishing domain: 1inch.airsdropsalert.cfd","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.airsdropsalert.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.airsdropsalert.cfd']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-13T16:35:24Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.airsdropsalert.cfd"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d58ad4a2-7e1c-5475-b24a-94ab21355628","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-07T16:31:27Z","modified":"2025-11-07T16:31:27Z","name":"Phishing domain: 1inch.airsdropsalert.lol","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.airsdropsalert.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.airsdropsalert.lol']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-07T16:31:27Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.airsdropsalert.lol"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--518016e3-ff7a-517e-8cb0-d1f53fa9ac06","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-09T18:55:15Z","modified":"2025-11-09T18:55:15Z","name":"Phishing domain: 1inch.airsdropsalerts.sbs","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.airsdropsalerts.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.airsdropsalerts.sbs']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-09T18:55:15Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.airsdropsalerts.sbs"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--52cf210e-4a51-57b2-b324-520c7b917c55","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-15T21:54:31Z","modified":"2025-11-15T21:54:31Z","name":"Phishing domain: 1inch.app-airdropalert.cfd","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.app-airdropalert.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.app-airdropalert.cfd']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-15T21:54:31Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.app-airdropalert.cfd"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a3d8b9d-7d50-5e58-9eb3-7ed87d55bfc2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-16T14:35:03Z","modified":"2025-11-16T14:35:03Z","name":"Phishing domain: 1inch.app-airdropalert.lat","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.app-airdropalert.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.app-airdropalert.lat']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-16T14:35:03Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.app-airdropalert.lat"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8226d430-e77b-5ff3-8b26-e49c044e43a9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-16T05:27:38Z","modified":"2025-11-16T05:27:38Z","name":"Phishing domain: 1inch.app-airdropalert.sbs","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.app-airdropalert.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.app-airdropalert.sbs']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-16T05:27:38Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.app-airdropalert.sbs"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--88bc9db1-7372-5bcb-90e7-d937971e282e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-23T02:46:36Z","modified":"2026-07-23T02:46:36Z","name":"Phishing domain: 1inch.appssmart-procedure.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.appssmart-procedure.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.appssmart-procedure.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-23T02:46:36Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.appssmart-procedure.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a68880ea-16e1-56d5-9118-deeebac0f9df","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-27T17:15:23Z","modified":"2025-11-27T17:15:23Z","name":"Phishing domain: 1inch.beefy-hub.lol","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.beefy-hub.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.beefy-hub.lol']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-27T17:15:23Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.beefy-hub.lol"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--46a1c8b3-7bac-5775-a0a5-cd2819c2337e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-27T17:01:43Z","modified":"2025-11-27T17:01:43Z","name":"Phishing domain: 1inch.beefy-hub.sbs","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.beefy-hub.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.beefy-hub.sbs']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-27T17:01:43Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.beefy-hub.sbs"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5abe973-7d0d-5379-a28c-eb690f4d165f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-18T17:52:46Z","modified":"2025-10-18T17:52:46Z","name":"Phishing domain: 1inch.beefy.bar","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.beefy.bar","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.beefy.bar']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-18T17:52:46Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.beefy.bar"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c09057db-32cd-5c13-a4a5-646a4ed518de","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-09T18:55:34Z","modified":"2025-11-09T18:55:34Z","name":"Phishing domain: 1inch.beefyapp.biz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.beefyapp.biz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.beefyapp.biz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-09T18:55:34Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.beefyapp.biz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--41d98b40-4fe3-5c7b-8adc-9309a24a4c63","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-15T06:11:36Z","modified":"2025-10-15T06:11:36Z","name":"Phishing domain: 1inch.beefyapp.lol","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.beefyapp.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.beefyapp.lol']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-15T06:11:36Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.beefyapp.lol"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7d1e59f-d308-5c30-8679-5b1431b32082","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-17T14:15:35Z","modified":"2025-11-17T14:15:35Z","name":"Phishing domain: 1inch.beefyapps.cfd","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.beefyapps.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.beefyapps.cfd']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-17T14:15:35Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.beefyapps.cfd"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb5176c1-cc98-5c46-aaf7-e85aa9753ec2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-17T14:15:33Z","modified":"2025-11-17T14:15:33Z","name":"Phishing domain: 1inch.beefyapps.lol","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.beefyapps.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.beefyapps.lol']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-17T14:15:33Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.beefyapps.lol"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--993dde10-ea64-5063-8f63-1c5e20e8c0e2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-12T18:34:02Z","modified":"2025-11-12T18:34:02Z","name":"Phishing domain: 1inch.beefyhub.cfd","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.beefyhub.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.beefyhub.cfd']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-12T18:34:02Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.beefyhub.cfd"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1de37359-3ad6-5203-b6cb-5291554aaaa6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-16T18:53:39Z","modified":"2025-11-16T18:53:39Z","name":"Phishing domain: 1inch.beefyhub.sbs","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.beefyhub.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.beefyhub.sbs']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-16T18:53:39Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.beefyhub.sbs"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5728e45d-e762-57df-a0f4-191d222a0144","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-01T14:55:15Z","modified":"2025-11-01T14:55:15Z","name":"Phishing domain: 1inch.beefyhubs.cfd","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.beefyhubs.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.beefyhubs.cfd']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-01T14:55:15Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.beefyhubs.cfd"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c99f81b-27b6-54e9-984d-0e6910aee10c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-31T15:47:21Z","modified":"2025-10-31T15:47:21Z","name":"Phishing domain: 1inch.beefyhubs.lol","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.beefyhubs.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.beefyhubs.lol']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-31T15:47:21Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.beefyhubs.lol"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa46975a-7e04-5e45-9625-8f947783f02b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-14T15:43:29Z","modified":"2025-11-14T15:43:29Z","name":"Phishing domain: 1inch.beefyhubs.monster","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.beefyhubs.monster","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.beefyhubs.monster']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-14T15:43:29Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.beefyhubs.monster"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--21353f9b-d5cf-5550-b32c-ad2dde9c9c32","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-01T14:55:15Z","modified":"2025-11-01T14:55:15Z","name":"Phishing domain: 1inch.beefyhubs.sbs","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.beefyhubs.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.beefyhubs.sbs']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-01T14:55:15Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.beefyhubs.sbs"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--008cbfef-f98a-53a2-8c7e-64e2c251c3f0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-18T21:54:58Z","modified":"2025-09-18T21:54:58Z","name":"Phishing domain: 1inch.buzz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.buzz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.buzz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-18T21:54:58Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.buzz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bec8458-6185-56e4-bd04-2e451c7c09a7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-03T14:28:24Z","modified":"2026-08-03T14:28:24Z","name":"Phishing domain: 1inch.com-svvap.co","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.com-svvap.co","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.com-svvap.co']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-03T14:28:24Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.com-svvap.co"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--68883a20-fec6-52c8-9add-f6ea0ecd3a5d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-30T21:29:57Z","modified":"2026-01-30T21:29:57Z","name":"Phishing domain: 1inch.com.co","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.com.co","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.com.co']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-30T21:29:57Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.com.co"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--852da885-0df8-5b9c-a2d6-8be7ab0381a3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-09T23:07:57Z","modified":"2025-11-09T23:07:57Z","name":"Phishing domain: 1inch.exchange.alqahwaalarabiah.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.exchange.alqahwaalarabiah.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.exchange.alqahwaalarabiah.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-09T23:07:57Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.exchange.alqahwaalarabiah.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc5bd63f-00b5-5474-ad61-6654d2d7212e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-09T23:08:30Z","modified":"2025-11-09T23:08:30Z","name":"Phishing domain: 1inch.exchange.aqanu.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.exchange.aqanu.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.exchange.aqanu.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-09T23:08:30Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.exchange.aqanu.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--74f27d7c-8d08-5eb9-94b3-334d7be0b8b3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-25T23:26:36Z","modified":"2025-11-25T23:26:36Z","name":"Phishing domain: 1inch.gextension.workers.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.gextension.workers.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.gextension.workers.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-25T23:26:36Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.gextension.workers.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6890b5f4-de29-5165-bd59-5bc3334d2e19","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-12T17:40:01Z","modified":"2025-11-12T17:40:01Z","name":"Phishing domain: 1inch.hub-airdropalert.click","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.hub-airdropalert.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.hub-airdropalert.click']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-12T17:40:01Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.hub-airdropalert.click"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--75efd016-719c-5c89-9e8c-538739a7a93a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:40Z","modified":"2026-02-26T23:19:40Z","name":"Phishing domain: 1inch.io-api-v2-connect.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.io-api-v2-connect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.io-api-v2-connect.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:40Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.io-api-v2-connect.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0aae2e0-6e3e-5ce1-9b2d-ac4fa8e5f697","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:54Z","modified":"2026-02-26T23:20:54Z","name":"Phishing domain: 1inch.io-app-chain-web3.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.io-app-chain-web3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.io-app-chain-web3.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:54Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.io-app-chain-web3.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8579c74a-f67a-5c1f-aa9f-b27864a5991e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:01Z","modified":"2026-02-26T23:20:01Z","name":"Phishing domain: 1inch.io-chain-defi-app.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.io-chain-defi-app.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.io-chain-defi-app.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:01Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.io-chain-defi-app.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb7caa5c-eb32-5afb-9745-6c07f28501b0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:59Z","modified":"2026-02-26T23:23:59Z","name":"Phishing domain: 1inch.io-chain-web-v3-app.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.io-chain-web-v3-app.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.io-chain-web-v3-app.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:59Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.io-chain-web-v3-app.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d11e0a5-1f3e-5a66-bea3-887d3f6aae1c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:51Z","modified":"2026-02-26T23:23:51Z","name":"Phishing domain: 1inch.io-connect-apiv3-wallet.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.io-connect-apiv3-wallet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.io-connect-apiv3-wallet.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:51Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.io-connect-apiv3-wallet.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e42c719-8e3c-5675-8fcb-755fc8d97bda","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:44Z","modified":"2026-02-26T23:21:44Z","name":"Phishing domain: 1inch.io-connect-v3-api-wallet.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.io-connect-v3-api-wallet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.io-connect-v3-api-wallet.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:44Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.io-connect-v3-api-wallet.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--80e09792-b252-5033-b4f2-f68f01728e98","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:33Z","modified":"2026-02-26T23:19:33Z","name":"Phishing domain: 1inch.io-connects-v2-wallets-api.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.io-connects-v2-wallets-api.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.io-connects-v2-wallets-api.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:33Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.io-connects-v2-wallets-api.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--556cd0f0-9421-5309-9b1f-07f143f23ddb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-13T01:40:45Z","modified":"2025-10-13T01:40:45Z","name":"Phishing domain: 1inch.io-secure-online-edge-app.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.io-secure-online-edge-app.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.io-secure-online-edge-app.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-13T01:40:45Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.io-secure-online-edge-app.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfcb749a-0b47-5952-a838-12bd2e2a61f8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:27Z","modified":"2026-02-26T23:19:27Z","name":"Phishing domain: 1inch.io-swap-v2-connect.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.io-swap-v2-connect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.io-swap-v2-connect.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:27Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.io-swap-v2-connect.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--626f19a0-42e4-5169-baac-76450600364f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:19Z","modified":"2026-02-26T23:19:19Z","name":"Phishing domain: 1inch.io-v2-api-connects-wallet.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.io-v2-api-connects-wallet.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.io-v2-api-connects-wallet.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:19Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.io-v2-api-connects-wallet.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3455bb6c-cd43-5f48-be03-3c06238ad7ee","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:26Z","modified":"2026-02-26T23:22:26Z","name":"Phishing domain: 1inch.io-v2-connect-api-wailet.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.io-v2-connect-api-wailet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.io-v2-connect-api-wailet.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:26Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.io-v2-connect-api-wailet.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbf6ba53-f416-5ad8-87fa-3ce4205e196e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:29Z","modified":"2026-02-26T23:20:29Z","name":"Phishing domain: 1inch.io-v3-api-connects-wallet.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.io-v3-api-connects-wallet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.io-v3-api-connects-wallet.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:29Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.io-v3-api-connects-wallet.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d29839c9-9df2-55c4-adc2-05794bf2306d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:58Z","modified":"2026-02-26T23:20:58Z","name":"Phishing domain: 1inch.io-v3-api-wallet-connect.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating WalletConnect. Report & evidence: https://phishdestroy.io/domain/1inch.io-v3-api-wallet-connect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.io-v3-api-wallet-connect.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:58Z","labels":["malicious-activity","phishing","brand:walletconnect"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.io-v3-api-wallet-connect.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--72f98cb4-0c60-587b-97fe-949a6638e71b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:49Z","modified":"2026-02-26T23:19:49Z","name":"Phishing domain: 1inch.io-v3-connect-api.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.io-v3-connect-api.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.io-v3-connect-api.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:49Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.io-v3-connect-api.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d9f9097-b08f-5f4b-9394-0b3d7e0d641b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:29Z","modified":"2026-02-26T23:20:29Z","name":"Phishing domain: 1inch.io-v3-swap-connect.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.io-v3-swap-connect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.io-v3-swap-connect.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:29Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.io-v3-swap-connect.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd563db6-9f01-53e7-8ca6-f88a2166d2a1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:06Z","modified":"2026-02-26T23:24:06Z","name":"Phishing domain: 1inch.io-v3-wailet-api-connect.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.io-v3-wailet-api-connect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.io-v3-wailet-api-connect.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:06Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.io-v3-wailet-api-connect.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--20e97838-7120-5c15-9bed-40d45dfa4991","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:19Z","modified":"2026-02-26T23:24:19Z","name":"Phishing domain: 1inch.io-v4-connect-swap.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.io-v4-connect-swap.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.io-v4-connect-swap.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:19Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.io-v4-connect-swap.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f0c7146-e57e-50a0-9320-ddc0095686e6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:01Z","modified":"2026-02-26T23:21:01Z","name":"Phishing domain: 1inch.io-wallet-apiv2-connect.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.io-wallet-apiv2-connect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.io-wallet-apiv2-connect.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:01Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.io-wallet-apiv2-connect.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0eee65b-8d92-5a36-9537-468e4319344d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:08Z","modified":"2026-02-26T23:21:08Z","name":"Phishing domain: 1inch.io-wallet-connect-apiv2.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating WalletConnect. Report & evidence: https://phishdestroy.io/domain/1inch.io-wallet-connect-apiv2.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.io-wallet-connect-apiv2.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:08Z","labels":["malicious-activity","phishing","brand:walletconnect"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.io-wallet-connect-apiv2.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--333e3717-9be3-58e5-a63a-300a6543c8e4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:43Z","modified":"2026-02-26T23:21:43Z","name":"Phishing domain: 1inch.io-webv3-chain-app.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.io-webv3-chain-app.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.io-webv3-chain-app.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:43Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.io-webv3-chain-app.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff56b14c-b7df-58b3-969e-ed1b0cdc6834","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-21T23:54:22Z","modified":"2025-12-21T23:54:22Z","name":"Phishing domain: 1inch.jaqzqjyt.workers.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.jaqzqjyt.workers.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.jaqzqjyt.workers.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-21T23:54:22Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.jaqzqjyt.workers.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccd7ada8-929d-547a-8093-c462ca1e1fb5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-04T19:10:18Z","modified":"2026-02-04T19:10:18Z","name":"Phishing domain: 1inch.mssg.me","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.mssg.me","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.mssg.me']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-04T19:10:18Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.mssg.me"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd32782c-88d9-58cd-8aea-7e6166313f9b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-21T08:13:58Z","modified":"2025-10-21T08:13:58Z","name":"Phishing domain: 1inch.portal-drops.icu","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.portal-drops.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.portal-drops.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-21T08:13:58Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.portal-drops.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--281d3b3c-2148-51b2-9783-fced1317a17d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-26T23:30:38Z","modified":"2025-10-26T23:30:38Z","name":"Phishing domain: 1inch.portal-hubs.cfd","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.portal-hubs.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.portal-hubs.cfd']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-26T23:30:38Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.portal-hubs.cfd"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--76f6314c-4dc3-56d0-9fcb-1fb160604874","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-04T20:23:01Z","modified":"2026-01-04T20:23:01Z","name":"Phishing domain: 1inch.stakingreward.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.stakingreward.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.stakingreward.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-04T20:23:01Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.stakingreward.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f06ad348-c044-5cc1-a08a-98783b94871f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-03T01:51:42Z","modified":"2026-01-03T01:51:42Z","name":"Phishing domain: 1inch.stakingsreward.life","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inch.stakingsreward.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inch.stakingsreward.life']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-03T01:51:42Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inch.stakingsreward.life"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--49cda9ca-cdb8-5472-8e1c-cfaaa71364cf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-11T23:03:32Z","modified":"2026-02-11T23:03:32Z","name":"Phishing domain: 1inchh.mssg.me","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inchh.mssg.me","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inchh.mssg.me']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-11T23:03:32Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inchh.mssg.me"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5c30eb2-cbcb-5579-bd79-441ab301ab89","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-20T06:39:58Z","modified":"2025-12-20T06:39:58Z","name":"Phishing domain: 1inchify.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inchify.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inchify.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-20T06:39:58Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inchify.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--657c554f-d3aa-5760-83f1-ee72fa9ba1d2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-24T16:44:52Z","modified":"2026-06-24T16:44:52Z","name":"Phishing domain: 1inchswap-tokens.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inchswap-tokens.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inchswap-tokens.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-24T16:44:52Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inchswap-tokens.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c965a8a-1308-53fa-b99d-132a8930cb73","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:30Z","modified":"2026-02-26T23:21:30Z","name":"Phishing domain: 1inchswap.us","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inchswap.us","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inchswap.us']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:30Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inchswap.us"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fc5bd56-2add-5ec1-8d32-add1df73be57","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-24T17:23:07Z","modified":"2026-02-24T17:23:07Z","name":"Phishing domain: 1inchtest-c7a.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inchtest-c7a.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inchtest-c7a.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-24T17:23:07Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inchtest-c7a.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--592694af-2bcf-537e-8a78-3127109c7660","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-26T10:36:40Z","modified":"2026-01-26T10:36:40Z","name":"Phishing domain: 1inchwallet.one","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1inchwallet.one","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1inchwallet.one']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-26T10:36:40Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1inchwallet.one"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f71a80d0-2857-54c1-95da-e9c6affdc254","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:00Z","modified":"2026-02-26T23:22:00Z","name":"Phishing domain: 1incn.co.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1incn.co.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1incn.co.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:00Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1incn.co.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--64ea4373-0c4a-53ad-a9d1-d2f002cf8112","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-29T10:57:17Z","modified":"2026-06-29T10:57:17Z","name":"Phishing domain: 1incn.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/1incn.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1incn.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-29T10:57:17Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1incn.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a4a68dc-98cd-5902-8eef-3a6c99dc6026","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:01Z","modified":"2026-02-26T23:24:01Z","name":"Phishing domain: 1incr.co.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1incr.co.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1incr.co.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:01Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1incr.co.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5454aa45-b910-5904-b6f3-b7402fe3230f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:31Z","modified":"2026-02-26T23:22:31Z","name":"Phishing domain: 1insh.co.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1insh.co.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1insh.co.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:31Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1insh.co.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--32c1b3a8-0077-59c6-aa08-77294cd8bb6c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-22T16:07:40Z","modified":"2026-07-22T16:07:40Z","name":"Phishing domain: 1intro-swap.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/1intro-swap.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1intro-swap.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-22T16:07:40Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1intro-swap.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed60b786-71f5-52dc-b352-5583a36b86d7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-17T15:17:02Z","modified":"2026-03-17T15:17:02Z","name":"Phishing domain: 1itservice.dk","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Microsoft. Report & evidence: https://phishdestroy.io/domain/1itservice.dk","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1itservice.dk']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-17T15:17:02Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1itservice.dk"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffc0f6ff-41ef-5ad3-9cce-cc60c2d614a5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-08T08:47:39Z","modified":"2025-08-08T08:47:39Z","name":"Phishing domain: 1ittlepepe.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/1ittlepepe.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1ittlepepe.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-08T08:47:39Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1ittlepepe.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--26aacd3e-c5c5-57e0-9303-b30c71efc0c5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-22T22:38:25Z","modified":"2026-07-22T22:38:25Z","name":"Phishing domain: 1keebordspace.blogspot.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1keebordspace.blogspot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1keebordspace.blogspot.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-22T22:38:25Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1keebordspace.blogspot.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--701f1b4d-64c7-51e2-b2cd-cd688648b9cb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-09T22:37:20Z","modified":"2026-04-09T22:37:20Z","name":"Phishing domain: 1king.website","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1king.website","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1king.website']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-09T22:37:20Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1king.website"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--31c710a5-de16-549f-aa56-1a5f7511df6c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-22T21:33:16Z","modified":"2026-03-22T21:33:16Z","name":"Phishing domain: 1km.one","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1km.one","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1km.one']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-22T21:33:16Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1km.one"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--45e5107a-23fb-5dea-b995-6273fdd2aec9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-31T18:54:59Z","modified":"2025-12-31T18:54:59Z","name":"Phishing domain: 1kra-26-cc.ru","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1kra-26-cc.ru","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1kra-26-cc.ru']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-31T18:54:59Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1kra-26-cc.ru"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9ff5171-e79c-5bc2-8372-f74b47d90c5f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: 1kra33.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1kra33.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1kra33.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1kra33.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--50aec25f-d518-5e28-915d-8a537a43e470","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: 1kra34.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1kra34.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1kra34.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1kra34.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f6967bc-602c-5d43-b9ce-432c2a0d85d9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:25Z","modified":"2026-02-26T23:23:25Z","name":"Phishing domain: 1kra46-cc.ru","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1kra46-cc.ru","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1kra46-cc.ru']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:25Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1kra46-cc.ru"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--52fd0090-fc38-54e3-9d54-bc231586b596","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-28T14:47:41Z","modified":"2026-01-28T14:47:41Z","name":"Phishing domain: 1krab-cc.ru","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating telegram. Report & evidence: https://phishdestroy.io/domain/1krab-cc.ru","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1krab-cc.ru']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-28T14:47:41Z","labels":["malicious-activity","phishing","brand:telegram"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1krab-cc.ru"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1120d514-3559-53f0-8375-c2c7f539de4c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-08T02:08:00Z","modified":"2025-08-08T02:08:00Z","name":"Phishing domain: 1lavds.biz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating kraken. Report & evidence: https://phishdestroy.io/domain/1lavds.biz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1lavds.biz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-08T02:08:00Z","labels":["malicious-activity","phishing","brand:kraken"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1lavds.biz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--00936f90-43d2-58b6-8428-f1dfbc7ac8eb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-14T14:48:09Z","modified":"2025-10-14T14:48:09Z","name":"Phishing domain: 1linch.cfd","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1linch.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1linch.cfd']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-14T14:48:09Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1linch.cfd"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6b69eee-1a65-513b-8cf2-87bfaf9e1d9d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-28T12:45:11Z","modified":"2026-01-28T12:45:11Z","name":"Phishing domain: 1linch.com.co","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1linch.com.co","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1linch.com.co']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-28T12:45:11Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1linch.com.co"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--acfd023c-b75e-507e-997b-5f8fb0515ad8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:25Z","modified":"2026-02-26T23:19:25Z","name":"Phishing domain: 1linchl-app.eu.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1linchl-app.eu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1linchl-app.eu.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:25Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1linchl-app.eu.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7101b584-1f95-506f-b76b-e37c8ffedcbb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-20T07:29:44Z","modified":"2025-11-20T07:29:44Z","name":"Phishing domain: 1line.bet","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Linea. Report & evidence: https://phishdestroy.io/domain/1line.bet","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1line.bet']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-20T07:29:44Z","labels":["malicious-activity","phishing","brand:linea"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1line.bet"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--34d21678-1efc-5719-98d3-81c7202505b4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-08T00:09:39Z","modified":"2025-08-08T00:09:39Z","name":"Phishing domain: 1line.casino","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Linea. Report & evidence: https://phishdestroy.io/domain/1line.casino","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1line.casino']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-08T00:09:39Z","labels":["malicious-activity","phishing","brand:linea"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1line.casino"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--15d52e96-d7f6-5d8c-b1c0-84c0e7204b11","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-01T05:47:39Z","modified":"2026-07-01T05:47:39Z","name":"Phishing domain: 1line.today","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Linea. Report & evidence: https://phishdestroy.io/domain/1line.today","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1line.today']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-01T05:47:39Z","labels":["malicious-activity","phishing","brand:linea"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1line.today"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f29f9ee4-0fdb-5a6b-9d04-102f50ff8b01","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-06-26T21:26:25Z","modified":"2025-06-26T21:26:25Z","name":"Phishing domain: 1linstars.click","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating amazon. Report & evidence: https://phishdestroy.io/domain/1linstars.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1linstars.click']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-06-26T21:26:25Z","labels":["malicious-activity","phishing","brand:amazon"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1linstars.click"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8281b78e-e3ab-55dc-82dc-e386fe85b682","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-05T17:38:33Z","modified":"2026-08-05T17:38:33Z","name":"Phishing domain: 1lli.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/1lli.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1lli.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-05T17:38:33Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1lli.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cad173b1-28ed-5d77-adfc-e58f4b102b94","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-28T11:48:59Z","modified":"2026-06-28T11:48:59Z","name":"Phishing domain: 1lnch-v4.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1lnch-v4.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1lnch-v4.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-28T11:48:59Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1lnch-v4.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3bd6301-9b90-522f-97ff-850f285c53f8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:00Z","modified":"2026-02-26T23:24:00Z","name":"Phishing domain: 1lnch.co.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1lnch.co.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1lnch.co.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:00Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1lnch.co.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--53d9b119-2752-5aa5-9d8f-0e8614b0bbbf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T07:02:12Z","modified":"2026-07-27T07:02:12Z","name":"Phishing domain: 1lnch.com-quantum.shop","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1lnch.com-quantum.shop","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1lnch.com-quantum.shop']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T07:02:12Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1lnch.com-quantum.shop"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4e0ebf8-0409-539d-9227-f1b93963140e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-12T22:29:26Z","modified":"2025-12-12T22:29:26Z","name":"Phishing domain: 1lnch.fi-v2.to","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/1lnch.fi-v2.to","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1lnch.fi-v2.to']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-12T22:29:26Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1lnch.fi-v2.to"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--389293f3-d398-57f1-aa33-40a06cf8ac7c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:39Z","modified":"2026-02-26T23:21:39Z","name":"Phishing domain: 1lnch.io-defi-vault.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1lnch.io-defi-vault.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1lnch.io-defi-vault.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:39Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1lnch.io-defi-vault.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f30d38d-063f-5a0f-8e4b-4da91247275e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:23Z","modified":"2026-02-26T23:21:23Z","name":"Phishing domain: 1luckyquest.online","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1luckyquest.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1luckyquest.online']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:23Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1luckyquest.online"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf66eac2-bbc5-5bf1-8c1d-b84ef5c4ea6e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T01:40:16Z","modified":"2026-02-13T01:40:16Z","name":"Phishing domain: 1lyhtyr.icu","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1lyhtyr.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1lyhtyr.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T01:40:16Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1lyhtyr.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3df55fb2-2d83-5d18-9595-ac91296fa4a8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-03T20:33:18Z","modified":"2026-02-03T20:33:18Z","name":"Phishing domain: 1m50ku-ledger.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/1m50ku-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1m50ku-ledger.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-03T20:33:18Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1m50ku-ledger.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--06f68035-3c77-5a3b-a8a5-59502b018bec","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-05T02:58:19Z","modified":"2026-01-05T02:58:19Z","name":"Phishing domain: 1memesol.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1memesol.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1memesol.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-05T02:58:19Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1memesol.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e160284-7d52-59e3-9a10-192c04ab73b9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T14:32:33Z","modified":"2026-02-13T14:32:33Z","name":"Phishing domain: 1mir.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1mir.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1mir.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T14:32:33Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1mir.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--de392aac-927e-5eff-a444-2c5e99ec163d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-14T11:13:22Z","modified":"2026-06-14T11:13:22Z","name":"Phishing domain: 1mrob.netlify.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1mrob.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1mrob.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-14T11:13:22Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1mrob.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--93362220-9b5b-5ff5-a997-16751e985b4a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:53Z","modified":"2026-02-26T23:22:53Z","name":"Phishing domain: 1musk.co","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1musk.co","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1musk.co']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:53Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1musk.co"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b9e2900-582d-554b-9181-7205fb31c4ab","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T09:46:08Z","modified":"2026-07-27T09:46:08Z","name":"Phishing domain: 1nch-svap.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1nch-svap.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1nch-svap.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T09:46:08Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1nch-svap.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d617262-8561-5364-9be6-9209fb7a0739","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-14T14:37:22Z","modified":"2025-12-14T14:37:22Z","name":"Phishing domain: 1nch.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1nch.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1nch.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-14T14:37:22Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1nch.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fb2d68f-0cbc-5969-a214-f146d469d954","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-31T11:01:04Z","modified":"2025-12-31T11:01:04Z","name":"Phishing domain: 1nchs.shop","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1nchs.shop","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1nchs.shop']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-31T11:01:04Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1nchs.shop"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac33c323-3e5f-5f52-b3fa-513ed87d3828","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-31T17:29:30Z","modified":"2026-01-31T17:29:30Z","name":"Phishing domain: 1ngres0pichinch.webcindario.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Linea. Report & evidence: https://phishdestroy.io/domain/1ngres0pichinch.webcindario.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1ngres0pichinch.webcindario.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-31T17:29:30Z","labels":["malicious-activity","phishing","brand:linea"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1ngres0pichinch.webcindario.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f1df49c-2c5e-51bd-9460-f155696482f9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-04T08:39:33Z","modified":"2025-11-04T08:39:33Z","name":"Phishing domain: 1nmlkjihgfedcb2.am.coinbase.cm","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/1nmlkjihgfedcb2.am.coinbase.cm","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1nmlkjihgfedcb2.am.coinbase.cm']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-04T08:39:33Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1nmlkjihgfedcb2.am.coinbase.cm"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--36c1f0ad-9847-5cd0-9d70-06e95b71e59e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-30T00:40:17Z","modified":"2025-12-30T00:40:17Z","name":"Phishing domain: 1nstagram.co.in","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1nstagram.co.in","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1nstagram.co.in']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-30T00:40:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1nstagram.co.in"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--69316e5b-a40f-5827-930b-d76d0f877fb1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T18:40:07Z","modified":"2026-08-09T18:40:07Z","name":"Phishing domain: 1nvesttradingmarket.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1nvesttradingmarket.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1nvesttradingmarket.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T18:40:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1nvesttradingmarket.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1231d91-3795-54be-808f-b3c082d5d7bd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-04T08:39:51Z","modified":"2025-11-04T08:39:51Z","name":"Phishing domain: 1ogin7.am.coinbase.com.ph","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/1ogin7.am.coinbase.com.ph","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1ogin7.am.coinbase.com.ph']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-04T08:39:51Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1ogin7.am.coinbase.com.ph"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2604a9e4-2458-586c-a4bf-68a315a56d86","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-04T15:05:43Z","modified":"2025-08-04T15:05:43Z","name":"Phishing domain: 1onewinbet.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating blast. Report & evidence: https://phishdestroy.io/domain/1onewinbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1onewinbet.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-04T15:05:43Z","labels":["malicious-activity","phishing","brand:blast"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1onewinbet.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e0356e4-9ec5-58e0-9e67-9c7c60f17fce","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-09T17:26:33Z","modified":"2026-06-09T17:26:33Z","name":"Phishing domain: 1pass.md","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1pass.md","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1pass.md']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-09T17:26:33Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1pass.md"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f22dfe73-66ce-529d-b7d6-c97a79fe00c5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-09T17:26:19Z","modified":"2026-06-09T17:26:19Z","name":"Phishing domain: 1pasword.md","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1pasword.md","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1pasword.md']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-09T17:26:19Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1pasword.md"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c5a681b-dacf-58d9-9d63-f0b601a869cc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-11T07:41:10Z","modified":"2026-02-11T07:41:10Z","name":"Phishing domain: 1play.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/1play.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1play.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-11T07:41:10Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1play.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--41761559-b7be-58fe-b002-e70ccdcf8e37","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: 1pointsurvey.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1pointsurvey.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1pointsurvey.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1pointsurvey.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab655226-6873-5a4e-a3a4-a109e0c0dbec","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-12T16:26:11Z","modified":"2025-08-12T16:26:11Z","name":"Phishing domain: 1polkadot-5x1e.js.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1polkadot-5x1e.js.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1polkadot-5x1e.js.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-12T16:26:11Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1polkadot-5x1e.js.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bfab3f6-d163-553e-82a5-ea22d64a1e00","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:37Z","modified":"2026-02-26T23:21:37Z","name":"Phishing domain: 1raabbe3wkd.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/1raabbe3wkd.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1raabbe3wkd.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:37Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1raabbe3wkd.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ddc63ed-7e1e-51c7-84dd-e4e33c6652dd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:42Z","modified":"2026-02-26T23:24:42Z","name":"Phishing domain: 1rch.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1rch.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1rch.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:42Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1rch.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--792b28b8-d7ea-5eb7-811a-b57b3dbe1df6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-22T21:42:38Z","modified":"2026-07-22T21:42:38Z","name":"Phishing domain: 1red.sk","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1red.sk","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1red.sk']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-22T21:42:38Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1red.sk"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc79e000-233c-51ca-8216-d37366676f63","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-15T12:54:22Z","modified":"2025-11-15T12:54:22Z","name":"Phishing domain: 1risepump.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/1risepump.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1risepump.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-15T12:54:22Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1risepump.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ea2e533-7de4-501b-a167-3a8baadd36a8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-28T16:40:14Z","modified":"2026-05-28T16:40:14Z","name":"Phishing domain: 1roll.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating cryptoscam. Report & evidence: https://phishdestroy.io/domain/1roll.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1roll.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-28T16:40:14Z","labels":["malicious-activity","phishing","brand:cryptoscam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1roll.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a09f9b1-f40d-5715-9f37-fe1827823eb4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-22T20:44:59Z","modified":"2025-08-22T20:44:59Z","name":"Phishing domain: 1rolls.bet","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1rolls.bet","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1rolls.bet']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-22T20:44:59Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1rolls.bet"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--57e037cf-b2ed-5578-a0fe-a9eda39c7157","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-18T20:41:29Z","modified":"2026-02-18T20:41:29Z","name":"Phishing domain: 1rolls.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/1rolls.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1rolls.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-18T20:41:29Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1rolls.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cf2f2ac-17a6-5239-a287-aca4bca41e25","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-07T23:57:47Z","modified":"2025-08-07T23:57:47Z","name":"Phishing domain: 1rolls.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating foundation. Report & evidence: https://phishdestroy.io/domain/1rolls.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1rolls.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-07T23:57:47Z","labels":["malicious-activity","phishing","brand:foundation"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1rolls.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--589465bf-d460-5135-a5d0-252779000d46","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-19T07:13:09Z","modified":"2025-10-19T07:13:09Z","name":"Phishing domain: 1rolls.pro","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1rolls.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1rolls.pro']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-19T07:13:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1rolls.pro"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d6b1220-76d7-574b-9b51-a1d907cb9f14","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-28T07:59:08Z","modified":"2026-03-28T07:59:08Z","name":"Phishing domain: 1slon3to.ru","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1slon3to.ru","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1slon3to.ru']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-28T07:59:08Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1slon3to.ru"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--916182ae-ba2d-55b1-966c-62acf1329afa","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-22T22:04:37Z","modified":"2026-04-22T22:04:37Z","name":"Phishing domain: 1slots.space","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/1slots.space","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1slots.space']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-22T22:04:37Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1slots.space"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bc0e0cf-a59b-5b5e-8f8f-84b9fe394de0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-19T07:25:01Z","modified":"2025-10-19T07:25:01Z","name":"Phishing domain: 1slots.world","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1slots.world","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1slots.world']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-19T07:25:01Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1slots.world"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d941db3-6ff3-5faf-a985-eb898496ab73","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-18T20:21:10Z","modified":"2026-02-18T20:21:10Z","name":"Phishing domain: 1soles.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/1soles.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1soles.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-18T20:21:10Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1soles.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb4ad76b-14a6-54ec-a37f-93cbc4f46008","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-31T16:22:31Z","modified":"2025-12-31T16:22:31Z","name":"Phishing domain: 1spade.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/1spade.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1spade.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-31T16:22:31Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1spade.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--27ea307d-3e12-5cf4-bc58-dc6ffa93360d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-22T13:18:44Z","modified":"2026-07-22T13:18:44Z","name":"Phishing domain: 1speedescapecandychocolatepage0nline.blogspot.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1speedescapecandychocolatepage0nline.blogspot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1speedescapecandychocolatepage0nline.blogspot.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-22T13:18:44Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1speedescapecandychocolatepage0nline.blogspot.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--577fced9-d2be-5fd0-9f1d-12a64bcb63d6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-15T14:01:34Z","modified":"2025-11-15T14:01:34Z","name":"Phishing domain: 1spin.bet","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/1spin.bet","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1spin.bet']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-15T14:01:34Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1spin.bet"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e132d24-8c56-5485-8f29-e848dda1ceec","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-31T16:20:19Z","modified":"2025-12-31T16:20:19Z","name":"Phishing domain: 1spin.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/1spin.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1spin.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-31T16:20:19Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1spin.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc8af391-efc4-5297-9f0c-d1bde47598ab","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-16T18:41:31Z","modified":"2025-12-16T18:41:31Z","name":"Phishing domain: 1spin.club","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/1spin.club","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1spin.club']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-16T18:41:31Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1spin.club"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--049a1e68-7b8c-5698-96ec-b3fa2c115805","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-01T17:40:43Z","modified":"2026-06-01T17:40:43Z","name":"Phishing domain: 1spins.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1spins.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1spins.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-01T17:40:43Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1spins.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ca9ef1e-dbb0-5fb7-b4fb-1fb46be8cff7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-25T15:00:44Z","modified":"2025-12-25T15:00:44Z","name":"Phishing domain: 1spins.pro","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/1spins.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1spins.pro']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-25T15:00:44Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1spins.pro"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfa92f15-f655-5905-974f-de4666e31ff5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-06T09:41:43Z","modified":"2025-12-06T09:41:43Z","name":"Phishing domain: 1spiny.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/1spiny.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1spiny.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-06T09:41:43Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1spiny.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ecaefa8-2e20-5d4a-8a95-04dfd6c16729","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-24T13:29:40Z","modified":"2026-01-24T13:29:40Z","name":"Phishing domain: 1spiny.pro","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/1spiny.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1spiny.pro']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-24T13:29:40Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1spiny.pro"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--887dc0cd-f4ea-5a23-9e75-b537e22479ac","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-19T00:58:14Z","modified":"2025-09-19T00:58:14Z","name":"Phishing domain: 1stplacenx.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1stplacenx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1stplacenx.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-19T00:58:14Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1stplacenx.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc8629bc-3a23-5529-9926-bd0178b233ff","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-03T16:46:09Z","modified":"2026-07-03T16:46:09Z","name":"Phishing domain: 1strk.pro","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating cryptoscam. Report & evidence: https://phishdestroy.io/domain/1strk.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1strk.pro']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-03T16:46:09Z","labels":["malicious-activity","phishing","brand:cryptoscam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1strk.pro"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--be77f548-3ee6-5256-b5b6-3f1a66a5e175","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-27T10:00:09Z","modified":"2026-04-27T10:00:09Z","name":"Phishing domain: 1swapiumflash.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1swapiumflash.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1swapiumflash.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-27T10:00:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1swapiumflash.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--74219c5a-7fc9-5833-be9c-4012dc537e40","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-27T02:12:27Z","modified":"2026-03-27T02:12:27Z","name":"Phishing domain: 1tamilblasters.business","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Blast. Report & evidence: https://phishdestroy.io/domain/1tamilblasters.business","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1tamilblasters.business']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-27T02:12:27Z","labels":["malicious-activity","phishing","brand:blast"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1tamilblasters.business"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd7a5a46-27de-5291-8e66-0a6e62da6de6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:26Z","modified":"2026-02-26T23:22:26Z","name":"Phishing domain: 1thdexapp.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/1thdexapp.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1thdexapp.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:26Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1thdexapp.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--84b21c26-6cf0-5ed2-861a-6830bc753638","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:58Z","modified":"2026-02-26T23:21:58Z","name":"Phishing domain: 1tnch.co.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1tnch.co.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1tnch.co.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:58Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1tnch.co.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2acc9fb5-386b-57e8-ba16-ce7dce26415b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T07:01:54Z","modified":"2026-02-13T07:01:54Z","name":"Phishing domain: 1torzon.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1torzon.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1torzon.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T07:01:54Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1torzon.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bc99b12-a8b2-5e73-b1cc-9c4f42c33d39","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-13T04:45:16Z","modified":"2025-10-13T04:45:16Z","name":"Phishing domain: 1trump-coin.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1trump-coin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1trump-coin.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-13T04:45:16Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1trump-coin.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--06c87182-0c7b-5e87-9b42-c4a152d41eec","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-09T18:33:41Z","modified":"2026-04-09T18:33:41Z","name":"Phishing domain: 1trx.me","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1trx.me","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1trx.me']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-09T18:33:41Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1trx.me"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1646169f-bee8-5602-9b07-07a41acdaace","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:06Z","modified":"2026-02-26T23:23:06Z","name":"Phishing domain: 1uich.co.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/1uich.co.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1uich.co.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:06Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1uich.co.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c245cf3-425e-55b8-a620-5b4db3350ea2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-18T15:22:37Z","modified":"2025-10-18T15:22:37Z","name":"Phishing domain: 1unijoin.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating ethereum. Report & evidence: https://phishdestroy.io/domain/1unijoin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1unijoin.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-18T15:22:37Z","labels":["malicious-activity","phishing","brand:ethereum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1unijoin.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--566bb267-d37f-566f-b361-eb00326223e5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-26T16:34:39Z","modified":"2026-04-26T16:34:39Z","name":"Phishing domain: 1upgrader.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1upgrader.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1upgrader.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-26T16:34:39Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1upgrader.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--61bb2c42-e828-59a3-aa2b-b69a8c8a08f7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:44:51Z","modified":"2026-07-27T04:44:51Z","name":"Phishing domain: 1usd-reward.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1usd-reward.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1usd-reward.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:44:51Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1usd-reward.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cbfb833-fd00-5831-be57-7f4743027727","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-30T13:02:04Z","modified":"2025-12-30T13:02:04Z","name":"Phishing domain: 1usdtmixer.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating ethereum. Report & evidence: https://phishdestroy.io/domain/1usdtmixer.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1usdtmixer.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-30T13:02:04Z","labels":["malicious-activity","phishing","brand:ethereum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1usdtmixer.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7dde59f-02ee-5452-b789-4a6d3a7c8d60","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-05T11:57:47Z","modified":"2025-11-05T11:57:47Z","name":"Phishing domain: 1vsfo5jbq6.cyou","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Rakuten. Report & evidence: https://phishdestroy.io/domain/1vsfo5jbq6.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1vsfo5jbq6.cyou']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-05T11:57:47Z","labels":["malicious-activity","phishing","brand:rakuten"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1vsfo5jbq6.cyou"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--13e6f262-4dd2-5ac5-b1e8-1373ab2449a9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-04T08:39:14Z","modified":"2025-11-04T08:39:14Z","name":"Phishing domain: 1w21.am.coinbase.cm","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/1w21.am.coinbase.cm","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1w21.am.coinbase.cm']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-04T08:39:14Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1w21.am.coinbase.cm"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2ee1d0b-b535-5c4d-b896-302b44967c1e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:42Z","modified":"2026-02-26T23:20:42Z","name":"Phishing domain: 1w2m.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1w2m.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1w2m.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:42Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1w2m.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2a9a096-ab0f-539e-bf95-c47259ee95fa","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:42Z","modified":"2026-02-26T23:22:42Z","name":"Phishing domain: 1waica.life","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1waica.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1waica.life']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:42Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1waica.life"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--40aeb3af-2c23-5819-8973-b0ba286928de","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-31T13:18:47Z","modified":"2026-07-31T13:18:47Z","name":"Phishing domain: 1wait-wait-wait.vercel.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1wait-wait-wait.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1wait-wait-wait.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-31T13:18:47Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1wait-wait-wait.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bafdbc8-3401-55ff-9a69-0fcf762bf6bc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-20T16:00:47Z","modified":"2025-11-20T16:00:47Z","name":"Phishing domain: 1waufy.life","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating ethereum. Report & evidence: https://phishdestroy.io/domain/1waufy.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1waufy.life']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-20T16:00:47Z","labels":["malicious-activity","phishing","brand:ethereum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1waufy.life"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3b8bca5-b512-5017-b5e5-f5a317d42d03","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-18T02:52:05Z","modified":"2026-03-18T02:52:05Z","name":"Phishing domain: 1wdjbd.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Apple. Report & evidence: https://phishdestroy.io/domain/1wdjbd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1wdjbd.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-18T02:52:05Z","labels":["malicious-activity","phishing","brand:apple"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1wdjbd.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--083d7329-652f-571a-8ef0-ae361e3208a7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-27T16:56:45Z","modified":"2026-02-27T16:56:45Z","name":"Phishing domain: 1web.bmt-whatsapp.com.cn","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating whatsapp. Report & evidence: https://phishdestroy.io/domain/1web.bmt-whatsapp.com.cn","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1web.bmt-whatsapp.com.cn']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-27T16:56:45Z","labels":["malicious-activity","phishing","brand:whatsapp"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1web.bmt-whatsapp.com.cn"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b57cb742-54bd-5c04-9e82-8bddb3f021ef","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-13T06:50:48Z","modified":"2026-03-13T06:50:48Z","name":"Phishing domain: 1wfypv.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1wfypv.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1wfypv.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-13T06:50:48Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1wfypv.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--93ba0d67-7288-588c-b260-f4d44f0129ce","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-24T20:46:52Z","modified":"2026-04-24T20:46:52Z","name":"Phishing domain: 1win-app-venezuela.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1win-app-venezuela.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-app-venezuela.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-24T20:46:52Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1win-app-venezuela.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--087d7532-25f6-59fa-a24b-2ec9844b4d9d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-28T12:57:13Z","modified":"2026-06-28T12:57:13Z","name":"Phishing domain: 1win-ar.gratis","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1win-ar.gratis","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-ar.gratis']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-28T12:57:13Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1win-ar.gratis"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd0f8aa0-e77c-5cb8-8951-2b2ee5598bae","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-01T01:50:32Z","modified":"2026-06-01T01:50:32Z","name":"Phishing domain: 1win-betting-india.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1win-betting-india.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-betting-india.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-01T01:50:32Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1win-betting-india.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e518311f-ff4b-5dff-82b0-d2236ff20f48","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-22T17:47:46Z","modified":"2026-04-22T17:47:46Z","name":"Phishing domain: 1win-bonus.club","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/1win-bonus.club","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-bonus.club']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-22T17:47:46Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1win-bonus.club"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dea191be-fade-5dfd-afef-a23e6fda3860","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-24T20:47:06Z","modified":"2026-04-24T20:47:06Z","name":"Phishing domain: 1win-official-argentina.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1win-official-argentina.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-official-argentina.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-24T20:47:06Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1win-official-argentina.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b5a4e4e-29a9-54dd-8b2d-37774b88eb09","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-28T15:48:04Z","modified":"2026-06-28T15:48:04Z","name":"Phishing domain: 1win-portal.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1win-portal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win-portal.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-28T15:48:04Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1win-portal.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6c995ed-6a5e-5213-b80f-42c205f9e905","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:59Z","modified":"2026-02-26T23:19:59Z","name":"Phishing domain: 1win.fyi","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1win.fyi","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win.fyi']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:59Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1win.fyi"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f4bd36d-1111-5f68-b4eb-777d4dc88f13","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:02Z","modified":"2026-02-26T23:21:02Z","name":"Phishing domain: 1win.ng","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1win.ng","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win.ng']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:02Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1win.ng"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6c2081b-bf8d-5c03-a59e-181a92ca124c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-15T12:55:15Z","modified":"2025-11-15T12:55:15Z","name":"Phishing domain: 1win.nyc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/1win.nyc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win.nyc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-15T12:55:15Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1win.nyc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--efb142e7-0866-5eb2-a086-e046d260fc36","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-06T13:28:58Z","modified":"2026-03-06T13:28:58Z","name":"Phishing domain: 1win.pro","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1win.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win.pro']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-06T13:28:58Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1win.pro"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e9a509b-b09c-5f24-ac36-62d5e52e1edc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-08T21:16:30Z","modified":"2026-02-08T21:16:30Z","name":"Phishing domain: 1win.uk","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1win.uk","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1win.uk']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-08T21:16:30Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1win.uk"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6ef956c-afb1-57cd-84c9-1e5c22dcf806","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:50Z","modified":"2026-02-26T23:21:50Z","name":"Phishing domain: 1winbday.today","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1winbday.today","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1winbday.today']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:50Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1winbday.today"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--af543a37-daf1-550d-af91-214caea46980","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-29T23:39:33Z","modified":"2025-12-29T23:39:33Z","name":"Phishing domain: 1winbonus.icu","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating apple. Report & evidence: https://phishdestroy.io/domain/1winbonus.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1winbonus.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-29T23:39:33Z","labels":["malicious-activity","phishing","brand:apple"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1winbonus.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f25be0c0-c44b-5c6a-9f45-c4e0cadc0f9c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-08T13:50:59Z","modified":"2026-07-08T13:50:59Z","name":"Phishing domain: 1wincolombia-co.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1wincolombia-co.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1wincolombia-co.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-08T13:50:59Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1wincolombia-co.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7332d932-d0d0-507b-9b04-a6176c5c16f9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-17T18:28:34Z","modified":"2026-06-17T18:28:34Z","name":"Phishing domain: 1wineu.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/1wineu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1wineu.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-17T18:28:34Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1wineu.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--21bcb7da-e9dc-5b43-8ee0-fed3c6af1b16","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-05T12:48:43Z","modified":"2026-01-05T12:48:43Z","name":"Phishing domain: 1winex.cfd","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating foundation. Report & evidence: https://phishdestroy.io/domain/1winex.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1winex.cfd']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-05T12:48:43Z","labels":["malicious-activity","phishing","brand:foundation"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1winex.cfd"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--808e5fc7-3adb-5721-8142-8a851087fc98","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-02T02:27:37Z","modified":"2025-11-02T02:27:37Z","name":"Phishing domain: 1wingas.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating cryptoscam. Report & evidence: https://phishdestroy.io/domain/1wingas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1wingas.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-02T02:27:37Z","labels":["malicious-activity","phishing","brand:cryptoscam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1wingas.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a469b177-ffbd-5a69-8826-915a8d59291d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-11T20:30:02Z","modified":"2026-03-11T20:30:02Z","name":"Phishing domain: 1winmx.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1winmx.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1winmx.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-11T20:30:02Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1winmx.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--163d09bf-8e69-5e2d-9fa0-b5537c2e4560","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-20T15:59:29Z","modified":"2025-11-20T15:59:29Z","name":"Phishing domain: 1winner.icu","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/1winner.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1winner.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-20T15:59:29Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1winner.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--de9aa325-d75f-5808-a826-4a1587cfd736","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-05T15:49:59Z","modified":"2026-03-05T15:49:59Z","name":"Phishing domain: 1winner.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating celer. Report & evidence: https://phishdestroy.io/domain/1winner.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1winner.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-05T15:49:59Z","labels":["malicious-activity","phishing","brand:celer"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1winner.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f142ce4e-5842-5115-9f17-00faf68431f8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:17Z","modified":"2026-02-26T23:21:17Z","name":"Phishing domain: 1winnn2.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/1winnn2.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1winnn2.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:17Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1winnn2.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1e5f6dc-07bc-551f-8c48-6177d3848253","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-24T13:35:31Z","modified":"2026-01-24T13:35:31Z","name":"Phishing domain: 1wins.cfd","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/1wins.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1wins.cfd']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-24T13:35:31Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1wins.cfd"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d687a27e-48a1-580f-b1a9-40913ed05b29","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-01T12:07:54Z","modified":"2026-08-01T12:07:54Z","name":"Phishing domain: 1wins.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1wins.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1wins.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-01T12:07:54Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1wins.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e8fc52d-df4f-5c4f-b765-ba23446f06cd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-28T19:49:39Z","modified":"2026-07-28T19:49:39Z","name":"Phishing domain: 1winspirit-canada.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1winspirit-canada.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1winspirit-canada.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-28T19:49:39Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1winspirit-canada.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--85defaee-6a14-57e7-8a41-e50b3a5c072c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-13T09:29:16Z","modified":"2025-10-13T09:29:16Z","name":"Phishing domain: 1winxmellstroy.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/1winxmellstroy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1winxmellstroy.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-13T09:29:16Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1winxmellstroy.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1011e7ec-c6ed-5cd2-b492-d09332231b8f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-09T13:13:49Z","modified":"2025-08-09T13:13:49Z","name":"Phishing domain: 1wjpvy.life","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1wjpvy.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1wjpvy.life']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-09T13:13:49Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1wjpvy.life"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1ea6b2e-6ac6-5a12-a9bd-0bb98659edcc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T03:24:05Z","modified":"2026-08-10T03:24:05Z","name":"Phishing domain: 1world-cryp2.us","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating revolut. Report & evidence: https://phishdestroy.io/domain/1world-cryp2.us","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1world-cryp2.us']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T03:24:05Z","labels":["malicious-activity","phishing","brand:revolut"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1world-cryp2.us"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8240390d-433a-5d2c-97e9-4f0c4810451e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-01T03:45:09Z","modified":"2026-02-01T03:45:09Z","name":"Phishing domain: 1wtvfo.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/1wtvfo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1wtvfo.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-01T03:45:09Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1wtvfo.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ae6e42f-8fe4-5ba5-8762-9ad27e5882b2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2024-08-20T21:04:51Z","modified":"2024-08-20T21:04:51Z","name":"Phishing domain: 1wzmvh.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1wzmvh.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1wzmvh.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2024-08-20T21:04:51Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1wzmvh.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a93d99e-a139-5cb6-a58c-c2e85c8ad102","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T12:49:31Z","modified":"2026-02-13T12:49:31Z","name":"Phishing domain: 1x-crm.cfd","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1x-crm.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1x-crm.cfd']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T12:49:31Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1x-crm.cfd"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2094d128-24b2-5949-a3e3-34c07ad9297e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-17T17:17:29Z","modified":"2026-06-17T17:17:29Z","name":"Phishing domain: 1xbeast.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating cryptoscam. Report & evidence: https://phishdestroy.io/domain/1xbeast.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xbeast.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-17T17:17:29Z","labels":["malicious-activity","phishing","brand:cryptoscam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1xbeast.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b09d5000-a3aa-50d4-b78c-9e5cabdc9ba5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-27T18:59:38Z","modified":"2026-03-27T18:59:38Z","name":"Phishing domain: 1xbet-app-so.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating apple. Report & evidence: https://phishdestroy.io/domain/1xbet-app-so.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xbet-app-so.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-27T18:59:38Z","labels":["malicious-activity","phishing","brand:apple"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1xbet-app-so.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed95e1e5-69c0-5995-b571-901cde4ac0cc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-26T10:42:02Z","modified":"2026-01-26T10:42:02Z","name":"Phishing domain: 1xbet-aviator.in","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1xbet-aviator.in","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xbet-aviator.in']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-26T10:42:02Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1xbet-aviator.in"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--57f69a18-1892-5973-944c-d4628402e4e2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-26T10:41:26Z","modified":"2026-01-26T10:41:26Z","name":"Phishing domain: 1xbet-bk.kz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1xbet-bk.kz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xbet-bk.kz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-26T10:41:26Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1xbet-bk.kz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--63895328-b61b-5f41-9dfa-13a5ff461172","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-05T04:24:37Z","modified":"2026-03-05T04:24:37Z","name":"Phishing domain: 1xbet.club","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1xbet.club","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xbet.club']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-05T04:24:37Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1xbet.club"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e884c56-c6a3-5559-9227-5a1c30cb0264","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:50Z","modified":"2026-02-26T23:19:50Z","name":"Phishing domain: 1xbet.one","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1xbet.one","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xbet.one']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:50Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1xbet.one"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a46960d8-40d9-5af3-bc17-bbc6aafc5f21","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-07T18:07:33Z","modified":"2026-02-07T18:07:33Z","name":"Phishing domain: 1xbet8914.icu","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/1xbet8914.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xbet8914.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-07T18:07:33Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1xbet8914.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--16be2436-a070-5f65-8e64-5755eec007bf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-13T09:32:49Z","modified":"2025-10-13T09:32:49Z","name":"Phishing domain: 1xbetcas.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/1xbetcas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xbetcas.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-13T09:32:49Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1xbetcas.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a1a3c84-d89b-5199-81e0-842a488db9e0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-28T15:47:56Z","modified":"2026-06-28T15:47:56Z","name":"Phishing domain: 1xbetindonesia.bet","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1xbetindonesia.bet","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xbetindonesia.bet']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-28T15:47:56Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1xbetindonesia.bet"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0d6ea02-ae84-56b5-9050-f87b0d1f2458","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-06T14:24:48Z","modified":"2026-07-06T14:24:48Z","name":"Phishing domain: 1xbetus-play.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1xbetus-play.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xbetus-play.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-06T14:24:48Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1xbetus-play.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--15998c8d-7fcc-51a8-8e61-26cd7eabd6f8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-19T01:15:39Z","modified":"2026-06-19T01:15:39Z","name":"Phishing domain: 1xbetxf.pro","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/1xbetxf.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xbetxf.pro']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-19T01:15:39Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1xbetxf.pro"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7454f5ed-77f3-5dc1-856b-5aff9d99919f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-20T15:59:43Z","modified":"2025-11-20T15:59:43Z","name":"Phishing domain: 1xcas.bet","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/1xcas.bet","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xcas.bet']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-20T15:59:43Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1xcas.bet"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--35d97c37-4f10-5a98-a7b9-750ed45ad3d7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-13T16:26:50Z","modified":"2026-04-13T16:26:50Z","name":"Phishing domain: 1xcasino.life","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Apple. Report & evidence: https://phishdestroy.io/domain/1xcasino.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xcasino.life']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-13T16:26:50Z","labels":["malicious-activity","phishing","brand:apple"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1xcasino.life"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--695a2f5d-0dfd-5871-a15d-c4858aacd375","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-05T13:40:15Z","modified":"2026-01-05T13:40:15Z","name":"Phishing domain: 1xjett.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/1xjett.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xjett.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-05T13:40:15Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1xjett.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f9c79b6-8e14-538a-a482-8dab4fc8cb73","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-15T15:46:45Z","modified":"2026-03-15T15:46:45Z","name":"Phishing domain: 1xlite-0032263.bar","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating apple. Report & evidence: https://phishdestroy.io/domain/1xlite-0032263.bar","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xlite-0032263.bar']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-15T15:46:45Z","labels":["malicious-activity","phishing","brand:apple"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1xlite-0032263.bar"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--42098f5c-f08d-50d0-9d2b-a538237f754d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-12T11:08:42Z","modified":"2026-06-12T11:08:42Z","name":"Phishing domain: 1xlite-01617.pro","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1xlite-01617.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xlite-01617.pro']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-12T11:08:42Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1xlite-01617.pro"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca15a47e-6dc4-5593-9995-53b36cf301cb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-20T16:19:36Z","modified":"2026-02-20T16:19:36Z","name":"Phishing domain: 1xlite-11340.world","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1xlite-11340.world","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xlite-11340.world']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-20T16:19:36Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1xlite-11340.world"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0754b09-54db-5943-8d01-56ba327ad893","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-24T18:34:35Z","modified":"2026-04-24T18:34:35Z","name":"Phishing domain: 1xlite-14788.pro","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1xlite-14788.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xlite-14788.pro']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-24T18:34:35Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1xlite-14788.pro"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--58997548-cb37-5d2b-bd37-ea9b41a28572","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-08T14:30:07Z","modified":"2026-07-08T14:30:07Z","name":"Phishing domain: 1xlite-41141.bar","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1xlite-41141.bar","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xlite-41141.bar']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-08T14:30:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1xlite-41141.bar"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f67201e-e88f-5980-8137-7b6ad5dc3d6a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-28T15:34:38Z","modified":"2026-06-28T15:34:38Z","name":"Phishing domain: 1xlite-49830.pro","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1xlite-49830.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xlite-49830.pro']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-28T15:34:38Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1xlite-49830.pro"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e91d4003-7c59-5a86-871d-32474a8363dd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-26T16:27:00Z","modified":"2026-04-26T16:27:00Z","name":"Phishing domain: 1xlite-71242.pro","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1xlite-71242.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xlite-71242.pro']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-26T16:27:00Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1xlite-71242.pro"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2919faa4-8365-58c6-ad5d-d6f5dbe5cda9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-04T17:11:06Z","modified":"2026-02-04T17:11:06Z","name":"Phishing domain: 1xlite-76201.today","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1xlite-76201.today","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xlite-76201.today']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-04T17:11:06Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1xlite-76201.today"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d6734c9-7979-5024-8f21-12f126e9ff3f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:42Z","modified":"2026-02-26T23:22:42Z","name":"Phishing domain: 1xlite-79928.bar","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1xlite-79928.bar","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xlite-79928.bar']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:42Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1xlite-79928.bar"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--16c56ce9-1900-5ef2-b350-b79fb6fe9292","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-12T15:17:50Z","modified":"2026-08-12T15:17:50Z","name":"Phishing domain: 1xmell.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1xmell.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xmell.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-12T15:17:50Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1xmell.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c90f89b7-a525-58df-ae36-ba0e9294f3b5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-05T13:01:49Z","modified":"2026-01-05T13:01:49Z","name":"Phishing domain: 1xplayc.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating foundation. Report & evidence: https://phishdestroy.io/domain/1xplayc.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xplayc.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-05T13:01:49Z","labels":["malicious-activity","phishing","brand:foundation"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1xplayc.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcebe1e4-fb16-57e7-8250-c67481e2e65b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-06T11:48:16Z","modified":"2026-07-06T11:48:16Z","name":"Phishing domain: 1xplayers.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1xplayers.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xplayers.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-06T11:48:16Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1xplayers.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6352853f-1f0c-56e6-ad4a-99a9c1b9b43d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-23T14:43:25Z","modified":"2026-07-23T14:43:25Z","name":"Phishing domain: 1xsex.blogspot.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1xsex.blogspot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xsex.blogspot.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-23T14:43:25Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1xsex.blogspot.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e2b4cd9-b962-566a-915c-562561b4f11a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-20T15:59:57Z","modified":"2025-11-20T15:59:57Z","name":"Phishing domain: 1xslotc.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ethereum. Report & evidence: https://phishdestroy.io/domain/1xslotc.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xslotc.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-20T15:59:57Z","labels":["malicious-activity","phishing","brand:ethereum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1xslotc.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2fe4f78-6a34-55a7-8610-2e417490dea8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-01T16:45:27Z","modified":"2026-06-01T16:45:27Z","name":"Phishing domain: 1xv.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Rabby. Report & evidence: https://phishdestroy.io/domain/1xv.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xv.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-01T16:45:27Z","labels":["malicious-activity","phishing","brand:rabby"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1xv.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--55d7a700-dac4-5dc5-8221-a5d849db68ad","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-28T18:18:49Z","modified":"2026-02-28T18:18:49Z","name":"Phishing domain: 1xvictoria.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/1xvictoria.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xvictoria.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-28T18:18:49Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1xvictoria.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--09970b94-a602-51b5-8a55-9ac12a3231fc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-13T15:56:01Z","modified":"2026-04-13T15:56:01Z","name":"Phishing domain: 1xvictoria.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/1xvictoria.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xvictoria.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-13T15:56:01Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1xvictoria.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--380734f8-b013-582b-9a52-36e8b3ddd5af","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-05T14:00:45Z","modified":"2026-01-05T14:00:45Z","name":"Phishing domain: 1xwin.sbs","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/1xwin.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1xwin.sbs']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-05T14:00:45Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1xwin.sbs"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9b2714e-47b0-544b-8666-1c0b383aa3d8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-03T13:17:37Z","modified":"2025-09-03T13:17:37Z","name":"Phishing domain: 1ylm.com.cn","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1ylm.com.cn","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1ylm.com.cn']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-03T13:17:37Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1ylm.com.cn"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--996220d1-329b-5ef6-9789-82e5501801ed","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-18T16:35:00Z","modified":"2026-06-18T16:35:00Z","name":"Phishing domain: 1z0.us","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/1z0.us","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1z0.us']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-18T16:35:00Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1z0.us"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f5f67b6-aaa9-5a4c-86a8-7f44f678e159","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-31T11:01:18Z","modified":"2025-12-31T11:01:18Z","name":"Phishing domain: 1zoomspaceonwbr.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/1zoomspaceonwbr.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1zoomspaceonwbr.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-31T11:01:18Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1zoomspaceonwbr.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b31cee98-45e8-5913-9268-4cac73acbd41","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-25T12:33:06Z","modified":"2025-11-25T12:33:06Z","name":"Phishing domain: 1zxzxwve7fhz.ckobiology.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating instagram. Report & evidence: https://phishdestroy.io/domain/1zxzxwve7fhz.ckobiology.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '1zxzxwve7fhz.ckobiology.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-25T12:33:06Z","labels":["malicious-activity","phishing","brand:instagram"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/1zxzxwve7fhz.ckobiology.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e3fc550-ee83-5932-b5e0-626e703a319a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-22T14:13:10Z","modified":"2026-06-22T14:13:10Z","name":"Phishing domain: 2-binance.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Binance. Report & evidence: https://phishdestroy.io/domain/2-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2-binance.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-22T14:13:10Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2-binance.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--afb0e8ac-6053-5e73-9e17-16f2d75684cb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-08T15:21:59Z","modified":"2026-08-08T15:21:59Z","name":"Phishing domain: 2-euroline.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2-euroline.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2-euroline.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-08T15:21:59Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2-euroline.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7754cdc-fba1-59e7-b924-8ea5a872a76c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-13T14:15:50Z","modified":"2026-06-13T14:15:50Z","name":"Phishing domain: 2-krab2cc.ru","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2-krab2cc.ru","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2-krab2cc.ru']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-13T14:15:50Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2-krab2cc.ru"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b36573ba-fd3c-5427-9e3c-f4bbc30adc5b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-10T23:52:50Z","modified":"2026-02-10T23:52:50Z","name":"Phishing domain: 2.cbotvyi.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2.cbotvyi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2.cbotvyi.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-10T23:52:50Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2.cbotvyi.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4bb41c9-5419-5d13-a742-a248fb7ad27f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-07T03:32:56Z","modified":"2026-02-07T03:32:56Z","name":"Phishing domain: 20-208-139-209.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/20-208-139-209.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '20-208-139-209.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-07T03:32:56Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/20-208-139-209.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--504c0bb4-001c-5781-89fc-1e48543f2b18","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-23T15:29:58Z","modified":"2026-02-23T15:29:58Z","name":"Phishing domain: 20-215-200-29.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/20-215-200-29.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '20-215-200-29.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-23T15:29:58Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/20-215-200-29.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--83d9f83d-4071-501d-95d4-b0af08071526","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:02Z","modified":"2026-02-26T23:23:02Z","name":"Phishing domain: 20-215-203-55.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/20-215-203-55.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '20-215-203-55.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:02Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/20-215-203-55.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6b922ce-786f-55e4-9d5d-1aa1736866fa","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-16T14:28:28Z","modified":"2026-07-16T14:28:28Z","name":"Phishing domain: 20-215-252-112.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating dpd. Report & evidence: https://phishdestroy.io/domain/20-215-252-112.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '20-215-252-112.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-16T14:28:28Z","labels":["malicious-activity","phishing","brand:dpd"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/20-215-252-112.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c18864c-ea40-5f0f-afc7-fb5d25593db5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T14:14:01Z","modified":"2026-06-15T14:14:01Z","name":"Phishing domain: 20-215-49-139.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating dpd. Report & evidence: https://phishdestroy.io/domain/20-215-49-139.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '20-215-49-139.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T14:14:01Z","labels":["malicious-activity","phishing","brand:dpd"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/20-215-49-139.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--05362160-0d63-51cc-a08c-7c4c2eb20ace","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-02T14:53:29Z","modified":"2026-08-02T14:53:29Z","name":"Phishing domain: 20-215-64-251.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating dpd. Report & evidence: https://phishdestroy.io/domain/20-215-64-251.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '20-215-64-251.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-02T14:53:29Z","labels":["malicious-activity","phishing","brand:dpd"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/20-215-64-251.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ae5803d-7ba3-53e2-961b-66fa23a64830","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-04T08:44:28Z","modified":"2025-11-04T08:44:28Z","name":"Phishing domain: 2007pptjiabeijingyinle.deribit.kr","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/2007pptjiabeijingyinle.deribit.kr","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2007pptjiabeijingyinle.deribit.kr']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-04T08:44:28Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2007pptjiabeijingyinle.deribit.kr"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cfdfabe-b370-5f49-acc6-092e43ed752c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T12:02:03Z","modified":"2026-07-27T12:02:03Z","name":"Phishing domain: 2009.bloggi.es","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2009.bloggi.es","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2009.bloggi.es']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T12:02:03Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2009.bloggi.es"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1e1eb2e-e448-53a9-8716-ea7c2785829c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-04T21:09:56Z","modified":"2026-03-04T21:09:56Z","name":"Phishing domain: 2012login.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2012login.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2012login.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-04T21:09:56Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2012login.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--96509635-6411-5106-8902-bf1d35f6e2a5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-24T11:17:22Z","modified":"2026-07-24T11:17:22Z","name":"Phishing domain: 2017-facebook.blogspot.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Facebook. Report & evidence: https://phishdestroy.io/domain/2017-facebook.blogspot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2017-facebook.blogspot.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-24T11:17:22Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2017-facebook.blogspot.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--269b9a22-fc95-5eb7-8893-10e9b92e025f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-03T14:33:48Z","modified":"2026-07-03T14:33:48Z","name":"Phishing domain: 2017.peterboonen.be","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericemail. Report & evidence: https://phishdestroy.io/domain/2017.peterboonen.be","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2017.peterboonen.be']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-03T14:33:48Z","labels":["malicious-activity","phishing","brand:genericemail"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2017.peterboonen.be"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--708e1e0c-90da-505d-9fe0-4c069661d059","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-12T21:14:02Z","modified":"2026-06-12T21:14:02Z","name":"Phishing domain: 2020000542.world","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating booking. Report & evidence: https://phishdestroy.io/domain/2020000542.world","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2020000542.world']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-12T21:14:02Z","labels":["malicious-activity","phishing","brand:booking"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2020000542.world"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c17f74bc-5ebe-58d3-88dd-075244e01dd6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:58Z","modified":"2026-02-26T23:19:58Z","name":"Phishing domain: 2024defivip.vip","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2024defivip.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2024defivip.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:58Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2024defivip.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4591e273-d9d5-5023-b4a6-b96b1fd00cf1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-15T15:14:47Z","modified":"2026-02-15T15:14:47Z","name":"Phishing domain: 2025-att-confirm-email.weeblysite.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating AT&T. Report & evidence: https://phishdestroy.io/domain/2025-att-confirm-email.weeblysite.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025-att-confirm-email.weeblysite.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-15T15:14:47Z","labels":["malicious-activity","phishing","brand:at&t"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2025-att-confirm-email.weeblysite.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--df6a1815-d6dd-5845-9855-e9e400d01972","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-12T21:31:36Z","modified":"2026-02-12T21:31:36Z","name":"Phishing domain: 2025-breakpoint-solana.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/2025-breakpoint-solana.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025-breakpoint-solana.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-12T21:31:36Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2025-breakpoint-solana.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--66eb2cee-a01e-518a-a4fa-c55e02f4211f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-17T21:03:11Z","modified":"2025-12-17T21:03:11Z","name":"Phishing domain: 2025-event.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/2025-event.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025-event.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-17T21:03:11Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2025-event.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--270601e3-acbc-5d54-927e-2566f6af8182","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:56Z","modified":"2026-02-26T23:19:56Z","name":"Phishing domain: 20250119211337719.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/20250119211337719.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '20250119211337719.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:56Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/20250119211337719.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d3b469b-f4b4-5dde-840e-8ac2875ee62c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-16T13:39:59Z","modified":"2025-12-16T13:39:59Z","name":"Phishing domain: 2025event.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/2025event.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025event.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-16T13:39:59Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2025event.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e33b822-22ac-58a4-b207-4f35347137a8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-23T02:31:23Z","modified":"2026-02-23T02:31:23Z","name":"Phishing domain: 2025irswebsiteislive.live","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating IRS. Report & evidence: https://phishdestroy.io/domain/2025irswebsiteislive.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025irswebsiteislive.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-23T02:31:23Z","labels":["malicious-activity","phishing","brand:irs"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2025irswebsiteislive.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e08cd5e-1a88-52a3-b4e8-426279625b41","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-27T12:41:42Z","modified":"2025-12-27T12:41:42Z","name":"Phishing domain: 2025rkt-sa.vip","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Rakuten. Report & evidence: https://phishdestroy.io/domain/2025rkt-sa.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025rkt-sa.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-27T12:41:42Z","labels":["malicious-activity","phishing","brand:rakuten"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2025rkt-sa.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf1dbf44-8b0d-54a8-85dc-dd5132d87793","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:03Z","modified":"2026-02-26T23:24:03Z","name":"Phishing domain: 2025rkt.vip","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating rakuten. Report & evidence: https://phishdestroy.io/domain/2025rkt.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025rkt.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:03Z","labels":["malicious-activity","phishing","brand:rakuten"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2025rkt.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f654047-6ad4-5feb-843f-a5aac07d12b5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-03T14:27:42Z","modified":"2025-11-03T14:27:42Z","name":"Phishing domain: 2025supports2025.hstn.me","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Microsoft. Report & evidence: https://phishdestroy.io/domain/2025supports2025.hstn.me","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025supports2025.hstn.me']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-03T14:27:42Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2025supports2025.hstn.me"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e70bf40-f847-5e59-8b6a-f2281b162252","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-28T12:17:45Z","modified":"2025-10-28T12:17:45Z","name":"Phishing domain: 2025tkqt.eqeni.sbs","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating tiktok. Report & evidence: https://phishdestroy.io/domain/2025tkqt.eqeni.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025tkqt.eqeni.sbs']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-28T12:17:45Z","labels":["malicious-activity","phishing","brand:tiktok"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2025tkqt.eqeni.sbs"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b041cebf-eddd-53b1-8892-c48146cfb2f3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-28T12:17:40Z","modified":"2025-10-28T12:17:40Z","name":"Phishing domain: 2025tkqt.xn--r8s8qq73m.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating tiktok. Report & evidence: https://phishdestroy.io/domain/2025tkqt.xn--r8s8qq73m.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2025tkqt.xn--r8s8qq73m.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-28T12:17:40Z","labels":["malicious-activity","phishing","brand:tiktok"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2025tkqt.xn--r8s8qq73m.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--86b6f047-c1b8-5cf2-96eb-39a1a5963c73","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-13T22:56:56Z","modified":"2026-07-13T22:56:56Z","name":"Phishing domain: 2026-casibom.icu","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2026-casibom.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026-casibom.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-13T22:56:56Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2026-casibom.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d3732b3-6ff6-5e7b-8f7d-37a8c1e6bfd1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-04T15:03:57Z","modified":"2026-01-04T15:03:57Z","name":"Phishing domain: 2026-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/2026-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-04T15:03:57Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2026-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e54e5fd-d389-558a-aa03-dfb2db45f773","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-03T16:59:53Z","modified":"2026-07-03T16:59:53Z","name":"Phishing domain: 2026-guncel-tek-adres.vip","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2026-guncel-tek-adres.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026-guncel-tek-adres.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-03T16:59:53Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2026-guncel-tek-adres.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--112e3c3f-8c82-534d-8aeb-c872068aacd3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-12T17:38:48Z","modified":"2026-07-12T17:38:48Z","name":"Phishing domain: 2026-kralbet-guncelgirisi.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2026-kralbet-guncelgirisi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026-kralbet-guncelgirisi.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-12T17:38:48Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2026-kralbet-guncelgirisi.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--60ba0c14-0ac2-5d6f-a1c4-ef68c28fd4c1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-12T17:34:34Z","modified":"2026-07-12T17:34:34Z","name":"Phishing domain: 2026-kralbetyenigirisi.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2026-kralbetyenigirisi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026-kralbetyenigirisi.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-12T17:34:34Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2026-kralbetyenigirisi.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--02137bc1-aa10-5cad-afe9-809f964e9907","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:04Z","modified":"2026-02-26T23:20:04Z","name":"Phishing domain: 2026-uni.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Uniswap. Report & evidence: https://phishdestroy.io/domain/2026-uni.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026-uni.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:04Z","labels":["malicious-activity","phishing","brand:uniswap"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2026-uni.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7eb6f84f-bb64-5ddf-ad9d-72f518ced65c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T19:23:49Z","modified":"2026-01-02T19:23:49Z","name":"Phishing domain: 2026-uni.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Uniswap. Report & evidence: https://phishdestroy.io/domain/2026-uni.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026-uni.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T19:23:49Z","labels":["malicious-activity","phishing","brand:uniswap"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2026-uni.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4f28f44-7923-54e3-a955-c7ed8918d377","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-04T01:56:49Z","modified":"2026-08-04T01:56:49Z","name":"Phishing domain: 2026-world-cup-free-airtime-data.earnonline.pro","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2026-world-cup-free-airtime-data.earnonline.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026-world-cup-free-airtime-data.earnonline.pro']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-04T01:56:49Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2026-world-cup-free-airtime-data.earnonline.pro"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ad8d283-6c96-56d1-8628-26e724a9f05b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-22T23:35:50Z","modified":"2026-06-22T23:35:50Z","name":"Phishing domain: 2026-world-cup.com.cn","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2026-world-cup.com.cn","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026-world-cup.com.cn']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-22T23:35:50Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2026-world-cup.com.cn"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--14695726-d67a-57d4-9486-d38d73c7444f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-22T23:24:26Z","modified":"2026-06-22T23:24:26Z","name":"Phishing domain: 2026-worldcup-app.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2026-worldcup-app.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026-worldcup-app.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-22T23:24:26Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2026-worldcup-app.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c263c07b-76de-50f5-a3e2-bc2f03e3196e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-22T23:24:37Z","modified":"2026-06-22T23:24:37Z","name":"Phishing domain: 2026-worldcup-score.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2026-worldcup-score.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026-worldcup-score.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-22T23:24:37Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2026-worldcup-score.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc08d892-4eae-5522-b735-074ec283e3eb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-07T01:44:47Z","modified":"2026-06-07T01:44:47Z","name":"Phishing domain: 20268-tg.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bt. Report & evidence: https://phishdestroy.io/domain/20268-tg.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '20268-tg.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-07T01:44:47Z","labels":["malicious-activity","phishing","brand:bt"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/20268-tg.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dafac798-ef32-5bdc-be1b-fd544a37415d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-03T14:28:15Z","modified":"2026-07-03T14:28:15Z","name":"Phishing domain: 2026atendiment.shop","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2026atendiment.shop","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026atendiment.shop']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-03T14:28:15Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2026atendiment.shop"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b306bb89-c2bc-53eb-ab6b-9e5d65dd7d4b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-03T14:32:14Z","modified":"2026-07-03T14:32:14Z","name":"Phishing domain: 2026atendimento.digital","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2026atendimento.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026atendimento.digital']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-03T14:32:14Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2026atendimento.digital"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fdfa947-bf00-5bb8-922a-736c422bcd0b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T00:18:34Z","modified":"2026-02-13T00:18:34Z","name":"Phishing domain: 2026bettilt.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2026bettilt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026bettilt.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T00:18:34Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2026bettilt.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d61627c-cf21-5a64-8061-e9cc0d0d530c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-07T19:48:30Z","modified":"2026-07-07T19:48:30Z","name":"Phishing domain: 2026binanceapp.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Binance. Report & evidence: https://phishdestroy.io/domain/2026binanceapp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026binanceapp.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-07T19:48:30Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2026binanceapp.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--be513f7f-2f80-5de0-89d2-e927b37f547b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-22T23:32:27Z","modified":"2026-06-22T23:32:27Z","name":"Phishing domain: 2026fifa-worldcup.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2026fifa-worldcup.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026fifa-worldcup.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-22T23:32:27Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2026fifa-worldcup.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--01f67c99-0170-5d20-a516-2c775fde4a65","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-22T23:24:41Z","modified":"2026-06-22T23:24:41Z","name":"Phishing domain: 2026fifashijiebei.com.cn","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2026fifashijiebei.com.cn","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026fifashijiebei.com.cn']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-22T23:24:41Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2026fifashijiebei.com.cn"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--307b3e2e-1398-5ec3-81ba-e220be8418a7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-22T23:36:31Z","modified":"2026-06-22T23:36:31Z","name":"Phishing domain: 2026fifaworldcup.com.cn","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2026fifaworldcup.com.cn","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026fifaworldcup.com.cn']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-22T23:36:31Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2026fifaworldcup.com.cn"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab6d780f-9dae-5db9-a8ef-4433e016a8fe","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-12T04:11:03Z","modified":"2026-06-12T04:11:03Z","name":"Phishing domain: 2026fifaworldcuptickets.online","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating fifa. Report & evidence: https://phishdestroy.io/domain/2026fifaworldcuptickets.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026fifaworldcuptickets.online']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-12T04:11:03Z","labels":["malicious-activity","phishing","brand:fifa"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2026fifaworldcuptickets.online"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf43d4f5-7d7c-5265-82fd-735b3a2c681a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-12T17:35:56Z","modified":"2026-07-12T17:35:56Z","name":"Phishing domain: 2026giris-kralbet.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2026giris-kralbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026giris-kralbet.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-12T17:35:56Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2026giris-kralbet.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d617f5ec-84b6-5011-b40a-140f96a8a199","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-11T04:45:34Z","modified":"2026-03-11T04:45:34Z","name":"Phishing domain: 2026vaycasino-giris.vip","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2026vaycasino-giris.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026vaycasino-giris.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-11T04:45:34Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2026vaycasino-giris.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d0d7f76-e231-5f18-8457-40170d28e9d9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-22T23:24:41Z","modified":"2026-06-22T23:24:41Z","name":"Phishing domain: 2026worldcup-ticai.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2026worldcup-ticai.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026worldcup-ticai.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-22T23:24:41Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2026worldcup-ticai.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f754482-ff1f-5556-a600-f2dac2595b81","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-22T23:25:08Z","modified":"2026-06-22T23:25:08Z","name":"Phishing domain: 2026worldcup-zucai.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2026worldcup-zucai.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026worldcup-zucai.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-22T23:25:08Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2026worldcup-zucai.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--59e5cfdb-b528-5558-b492-02c0ee65d1e9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-04T01:56:08Z","modified":"2026-08-04T01:56:08Z","name":"Phishing domain: 2026worldcup.fr","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2026worldcup.fr","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2026worldcup.fr']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-04T01:56:08Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2026worldcup.fr"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6046efe-6486-5d09-9c21-7910c03d34fd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-29T02:29:22Z","modified":"2026-07-29T02:29:22Z","name":"Phishing domain: 20287.de-infokonto.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating paypal. Report & evidence: https://phishdestroy.io/domain/20287.de-infokonto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '20287.de-infokonto.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-29T02:29:22Z","labels":["malicious-activity","phishing","brand:paypal"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/20287.de-infokonto.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ac1a7f2-eb54-5956-a2d5-093c2d851b5d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-10T11:21:26Z","modified":"2026-07-10T11:21:26Z","name":"Phishing domain: 202925-binance.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Binance. Report & evidence: https://phishdestroy.io/domain/202925-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '202925-binance.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-10T11:21:26Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/202925-binance.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0d948f9-dd83-5d9c-802f-f7c00b8846c5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-21T23:50:41Z","modified":"2025-12-21T23:50:41Z","name":"Phishing domain: 202ac74c.tiggger.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/202ac74c.tiggger.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '202ac74c.tiggger.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-21T23:50:41Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/202ac74c.tiggger.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--28e276d9-2ffa-5725-847e-3e718ca4c36c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-01T12:24:31Z","modified":"2025-12-01T12:24:31Z","name":"Phishing domain: 203948-94383bro.glitch.me","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericemail. Report & evidence: https://phishdestroy.io/domain/203948-94383bro.glitch.me","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '203948-94383bro.glitch.me']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-01T12:24:31Z","labels":["malicious-activity","phishing","brand:genericemail"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/203948-94383bro.glitch.me"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--26e4a5d0-b308-5f5b-843a-86d7e5c97076","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:59Z","modified":"2026-02-26T23:20:59Z","name":"Phishing domain: 20401.academy","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/20401.academy","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '20401.academy']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:59Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/20401.academy"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cb57753-ee4b-5dce-aa05-e83960051679","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-11T09:18:37Z","modified":"2026-03-11T09:18:37Z","name":"Phishing domain: 206-81-16-85.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating dpd. Report & evidence: https://phishdestroy.io/domain/206-81-16-85.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '206-81-16-85.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-11T09:18:37Z","labels":["malicious-activity","phishing","brand:dpd"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/206-81-16-85.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce85386a-163b-52ec-a493-4d04064826d9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-18T12:55:32Z","modified":"2026-06-18T12:55:32Z","name":"Phishing domain: 2073-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/2073-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2073-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-18T12:55:32Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2073-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--447f39e3-0faf-58c7-98e2-393ce0194fd7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-06T14:21:24Z","modified":"2026-07-06T14:21:24Z","name":"Phishing domain: 2088p.vip","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2088p.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2088p.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-06T14:21:24Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2088p.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0116b7ed-f6b3-5069-be7d-ba0c97e8f4f8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-05T00:25:22Z","modified":"2026-01-05T00:25:22Z","name":"Phishing domain: 209494.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating argent. Report & evidence: https://phishdestroy.io/domain/209494.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '209494.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-05T00:25:22Z","labels":["malicious-activity","phishing","brand:argent"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/209494.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--04ce142d-8e67-5fe2-88fa-d9935e28555a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-24T21:07:46Z","modified":"2026-04-24T21:07:46Z","name":"Phishing domain: 20betcasino-cz.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/20betcasino-cz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '20betcasino-cz.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-24T21:07:46Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/20betcasino-cz.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--00619e3e-dd48-5ebf-bd2b-6f202c67e96a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:25Z","modified":"2026-02-26T23:21:25Z","name":"Phishing domain: 20e6.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ethereum. Report & evidence: https://phishdestroy.io/domain/20e6.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '20e6.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:25Z","labels":["malicious-activity","phishing","brand:ethereum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/20e6.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--559e5d65-6d04-5cb8-81a4-166444f1f67f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-24T20:04:52Z","modified":"2026-01-24T20:04:52Z","name":"Phishing domain: 20pump.fun","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating curve. Report & evidence: https://phishdestroy.io/domain/20pump.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '20pump.fun']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-24T20:04:52Z","labels":["malicious-activity","phishing","brand:curve"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/20pump.fun"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--40ec96e2-3ad6-52b5-a813-295321151e74","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-19T16:56:13Z","modified":"2026-02-19T16:56:13Z","name":"Phishing domain: 2112056192.dojiner.at","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Steam. Report & evidence: https://phishdestroy.io/domain/2112056192.dojiner.at","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2112056192.dojiner.at']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-19T16:56:13Z","labels":["malicious-activity","phishing","brand:steam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2112056192.dojiner.at"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c5bdf4a-6aa7-5ff5-9c06-6ce085498226","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T13:10:27Z","modified":"2026-01-02T13:10:27Z","name":"Phishing domain: 212-227-48-175.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/212-227-48-175.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '212-227-48-175.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T13:10:27Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/212-227-48-175.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dd56c47-081e-56ef-8445-4b73dd51747c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-27T17:04:17Z","modified":"2025-11-27T17:04:17Z","name":"Phishing domain: 212311.netlify.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating roblox. Report & evidence: https://phishdestroy.io/domain/212311.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '212311.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-27T17:04:17Z","labels":["malicious-activity","phishing","brand:roblox"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/212311.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ccf0efa-dcbf-55f9-b837-5715e11cfcac","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 2126amjs.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2126amjs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2126amjs.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2126amjs.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--08da294f-0093-5e5a-9996-64a2da103da1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-30T06:06:18Z","modified":"2026-01-30T06:06:18Z","name":"Phishing domain: 2131.live","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/2131.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2131.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-30T06:06:18Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2131.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d1ac0ca-91b8-5da2-8518-e5d75bd61da6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-22T03:05:46Z","modified":"2026-01-22T03:05:46Z","name":"Phishing domain: 2131kobushide.allocated.live","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating solana. Report & evidence: https://phishdestroy.io/domain/2131kobushide.allocated.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2131kobushide.allocated.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-22T03:05:46Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2131kobushide.allocated.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb521b2a-8738-50d8-835a-daf8c2f2e674","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T03:41:23Z","modified":"2026-02-13T03:41:23Z","name":"Phishing domain: 2131monster.live","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2131monster.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2131monster.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T03:41:23Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2131monster.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a29115b1-d03f-55ac-9dd4-faf40cb2d727","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:17Z","modified":"2026-07-27T06:02:17Z","name":"Phishing domain: 2132.ee","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2132.ee","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2132.ee']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2132.ee"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c01c6fac-d5fa-5567-a88a-76166e7b306f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:17Z","modified":"2026-07-27T06:02:17Z","name":"Phishing domain: 2132.im","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2132.im","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2132.im']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2132.im"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--60ac072f-05ba-53a2-86ec-9b62b33e797d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:17Z","modified":"2026-07-27T06:02:17Z","name":"Phishing domain: 2132.lt","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2132.lt","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2132.lt']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2132.lt"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c65e64e-1b38-5f9f-9b65-4633da4034cd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:17Z","modified":"2026-07-27T06:02:17Z","name":"Phishing domain: 2132.ma","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2132.ma","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2132.ma']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2132.ma"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4c5328d-1702-5d72-9351-67e7866d35cc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:17Z","modified":"2026-07-27T06:02:17Z","name":"Phishing domain: 2132.mg","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2132.mg","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2132.mg']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2132.mg"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9473b6a7-a8d5-5f60-a316-7e09f31c8fa6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:17Z","modified":"2026-07-27T06:02:17Z","name":"Phishing domain: 2132.mk","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2132.mk","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2132.mk']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2132.mk"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f501183-ad34-510b-81ca-7e57f357e5ee","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:17Z","modified":"2026-07-27T06:02:17Z","name":"Phishing domain: 2132.sn","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2132.sn","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2132.sn']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2132.sn"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6668ab92-ab1b-5c0d-b789-1e73baa81675","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:17Z","modified":"2026-07-27T06:02:17Z","name":"Phishing domain: 2132.st","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2132.st","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2132.st']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2132.st"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a2c2c7e-e4ad-5d9d-8b0a-0000aaaee38b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:17Z","modified":"2026-07-27T06:02:17Z","name":"Phishing domain: 2132.uy","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2132.uy","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2132.uy']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2132.uy"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6045e29b-ad99-5d6f-953f-9a42b34664ef","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:17Z","modified":"2026-07-27T06:02:17Z","name":"Phishing domain: 2138.ar","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2138.ar","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2138.ar']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2138.ar"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbe0ea0b-20a8-59ce-8043-b47fe57647ea","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 2138.as","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2138.as","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2138.as']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2138.as"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--11b5b4cb-ee90-5352-8182-10d9a57afeae","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:17Z","modified":"2026-07-27T06:02:17Z","name":"Phishing domain: 2138.ooo","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2138.ooo","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2138.ooo']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2138.ooo"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c4685b6-7e1d-5eb8-a37e-e2b95118f472","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 2138.sk","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2138.sk","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2138.sk']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2138.sk"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f10d8f7-d6a8-516d-b653-1895661cec2e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:42:47Z","modified":"2026-07-27T04:42:47Z","name":"Phishing domain: 2138.sn","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2138.sn","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2138.sn']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:42:47Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2138.sn"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc9afbc2-06a8-502b-8cc4-349af9ab0f34","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:17Z","modified":"2026-07-27T06:02:17Z","name":"Phishing domain: 2138.st","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2138.st","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2138.st']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2138.st"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--87bad374-ba89-5af6-bb4c-62dd0abe28b7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:17Z","modified":"2026-07-27T06:02:17Z","name":"Phishing domain: 2138.ws","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2138.ws","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2138.ws']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2138.ws"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--79d9be15-fc84-58bd-ad25-a0d0f9123d7e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-22T12:58:06Z","modified":"2025-12-22T12:58:06Z","name":"Phishing domain: 21552mppp.hyperphp.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/21552mppp.hyperphp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '21552mppp.hyperphp.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-22T12:58:06Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/21552mppp.hyperphp.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--06d69d9c-c23e-5c8d-8a42-7c37993a5961","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:56Z","modified":"2026-02-26T23:22:56Z","name":"Phishing domain: 215e7799.lejd09e-fjdnj.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/215e7799.lejd09e-fjdnj.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '215e7799.lejd09e-fjdnj.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:56Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/215e7799.lejd09e-fjdnj.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a5ee0d4-9377-5abe-a265-1b814227b09b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-30T11:02:57Z","modified":"2025-10-30T11:02:57Z","name":"Phishing domain: 216-126-236-157.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/216-126-236-157.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '216-126-236-157.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-30T11:02:57Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/216-126-236-157.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--04577e37-a366-585c-8e59-64482c3b0bdc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:28Z","modified":"2026-02-26T23:21:28Z","name":"Phishing domain: 217-154-167-160.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/217-154-167-160.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '217-154-167-160.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:28Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/217-154-167-160.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--54d84ce2-b6aa-545c-b60d-54045ee7ec8d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-22T15:19:15Z","modified":"2026-01-22T15:19:15Z","name":"Phishing domain: 217-154-235-190.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/217-154-235-190.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '217-154-235-190.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-22T15:19:15Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/217-154-235-190.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--88be3bbd-2ec3-5a0b-9788-b76827125394","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-24T03:11:57Z","modified":"2026-01-24T03:11:57Z","name":"Phishing domain: 217-154-250-70.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/217-154-250-70.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '217-154-250-70.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-24T03:11:57Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/217-154-250-70.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--562a44f5-39b3-568a-978b-be697a374809","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-31T12:16:16Z","modified":"2025-12-31T12:16:16Z","name":"Phishing domain: 217-160-164-192.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/217-160-164-192.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '217-160-164-192.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-31T12:16:16Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/217-160-164-192.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--656b424f-e904-52aa-a0df-c131d4432572","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 217706165hd.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/217706165hd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '217706165hd.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/217706165hd.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d217dec4-e7cb-5b78-b4fa-22d1e7a11f5f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-03T15:39:43Z","modified":"2026-05-03T15:39:43Z","name":"Phishing domain: 218746d2-765e-419b-9ee1-4b9735631969.fundyalbert.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/218746d2-765e-419b-9ee1-4b9735631969.fundyalbert.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '218746d2-765e-419b-9ee1-4b9735631969.fundyalbert.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-03T15:39:43Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/218746d2-765e-419b-9ee1-4b9735631969.fundyalbert.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e83558bb-ad46-5dfd-bb67-a8dde22697cb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:59Z","modified":"2026-02-26T23:22:59Z","name":"Phishing domain: 219476-cb.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/219476-cb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '219476-cb.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:59Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/219476-cb.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a70871ea-eaae-52f8-85f2-f1da0e84becc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:17Z","modified":"2026-07-27T06:02:17Z","name":"Phishing domain: 21973.win","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/21973.win","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '21973.win']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/21973.win"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f990720-598a-5e7b-a272-ecde9859e9cc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-20T03:48:43Z","modified":"2026-07-20T03:48:43Z","name":"Phishing domain: 21baseballacademy.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/21baseballacademy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '21baseballacademy.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-20T03:48:43Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/21baseballacademy.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--83c5afac-95f4-59f5-8141-06eb998bfaef","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T15:03:46Z","modified":"2026-02-13T15:03:46Z","name":"Phishing domain: 21betbrazil.bet","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/21betbrazil.bet","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '21betbrazil.bet']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T15:03:46Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/21betbrazil.bet"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5dc556d-e02c-5eab-815d-762014f5b083","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-13T13:35:21Z","modified":"2026-06-13T13:35:21Z","name":"Phishing domain: 21bitcasino.icu","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/21bitcasino.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '21bitcasino.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-13T13:35:21Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/21bitcasino.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fab76c7-12a6-580c-8f0d-86e16229b73f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-11T18:24:49Z","modified":"2026-08-11T18:24:49Z","name":"Phishing domain: 21c52f.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/21c52f.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '21c52f.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-11T18:24:49Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/21c52f.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d49ef48-df7e-5a0e-9b6d-637850a91dc4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-04T04:07:15Z","modified":"2026-08-04T04:07:15Z","name":"Phishing domain: 21crypto.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating apple. Report & evidence: https://phishdestroy.io/domain/21crypto.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '21crypto.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-04T04:07:15Z","labels":["malicious-activity","phishing","brand:apple"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/21crypto.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ceec3c5-9376-5865-8080-a4c1e86812cb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-26T15:20:23Z","modified":"2026-07-26T15:20:23Z","name":"Phishing domain: 21tmmuz-meritking-giris.vip","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/21tmmuz-meritking-giris.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '21tmmuz-meritking-giris.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-26T15:20:23Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/21tmmuz-meritking-giris.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f004ef4-e878-5841-b704-c863f882e57c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-26T15:19:37Z","modified":"2026-07-26T15:19:37Z","name":"Phishing domain: 21tmmz-mrttking-giris.vip","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/21tmmz-mrttking-giris.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '21tmmz-mrttking-giris.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-26T15:19:37Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/21tmmz-mrttking-giris.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--76b3c418-189d-5112-9843-e6dc187531f1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T08:10:55Z","modified":"2026-02-13T08:10:55Z","name":"Phishing domain: 22-412-test.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aave. Report & evidence: https://phishdestroy.io/domain/22-412-test.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '22-412-test.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T08:10:55Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/22-412-test.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6be4e100-a818-5d5c-a282-5288946f1dfa","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-14T11:56:33Z","modified":"2026-07-14T11:56:33Z","name":"Phishing domain: 22-abhi.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating netflix. Report & evidence: https://phishdestroy.io/domain/22-abhi.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '22-abhi.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-14T11:56:33Z","labels":["malicious-activity","phishing","brand:netflix"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/22-abhi.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d25db99e-f967-5cda-a4a5-1223b9a5130a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-21T14:13:54Z","modified":"2026-06-21T14:13:54Z","name":"Phishing domain: 22-icloud.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Apple. Report & evidence: https://phishdestroy.io/domain/22-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '22-icloud.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-21T14:13:54Z","labels":["malicious-activity","phishing","brand:apple"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/22-icloud.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c35fbacc-165f-5d14-842f-4723aaa11ac0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-02T16:03:56Z","modified":"2026-08-02T16:03:56Z","name":"Phishing domain: 22.laoshunfa.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating govin. Report & evidence: https://phishdestroy.io/domain/22.laoshunfa.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '22.laoshunfa.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-02T16:03:56Z","labels":["malicious-activity","phishing","brand:govin"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/22.laoshunfa.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b71043f7-5e66-569f-9066-cb34f178edc2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-31T17:46:15Z","modified":"2026-01-31T17:46:15Z","name":"Phishing domain: 2211843-ledger.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/2211843-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2211843-ledger.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-31T17:46:15Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2211843-ledger.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed4c3839-2022-5adf-8e2a-b94450a16e6d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 221vns.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/221vns.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '221vns.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/221vns.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f20fa2aa-af6b-553b-b2a9-9e7f58ec234f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:43:06Z","modified":"2026-07-27T04:43:06Z","name":"Phishing domain: 2222.ooo","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2222.ooo","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2222.ooo']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:43:06Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2222.ooo"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f029abbd-abe2-524b-8c3f-09573c170372","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-31T16:25:16Z","modified":"2026-01-31T16:25:16Z","name":"Phishing domain: 2225web.whatsapwcox.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating whatsapp. Report & evidence: https://phishdestroy.io/domain/2225web.whatsapwcox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2225web.whatsapwcox.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-31T16:25:16Z","labels":["malicious-activity","phishing","brand:whatsapp"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2225web.whatsapwcox.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--926fb319-7ca0-52cb-90fc-e1dc9b8a44eb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T02:10:22Z","modified":"2026-07-27T02:10:22Z","name":"Phishing domain: 22266.de-infokonto.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating PayPal. Report & evidence: https://phishdestroy.io/domain/22266.de-infokonto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '22266.de-infokonto.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T02:10:22Z","labels":["malicious-activity","phishing","brand:paypal"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/22266.de-infokonto.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bfad7cc-94b8-599f-94b7-932fa64d6160","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-12T23:47:39Z","modified":"2026-02-12T23:47:39Z","name":"Phishing domain: 222double.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/222double.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '222double.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-12T23:47:39Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/222double.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--787ba52d-a40b-58d2-bd1f-c77a21f6467c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-20T16:13:32Z","modified":"2026-02-20T16:13:32Z","name":"Phishing domain: 222srrr.weebly.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/222srrr.weebly.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '222srrr.weebly.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-20T16:13:32Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/222srrr.weebly.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f944b74-2b5f-5b33-bd6f-646a7fba6cf1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-13T20:48:10Z","modified":"2026-08-13T20:48:10Z","name":"Phishing domain: 22311-ledger.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/22311-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '22311-ledger.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-13T20:48:10Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/22311-ledger.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4225b747-c9e8-5fdc-9a68-b2c5fd17756c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:42:23Z","modified":"2026-07-27T04:42:23Z","name":"Phishing domain: 2232061652.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2232061652.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2232061652.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:42:23Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2232061652.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f3bf25d-bcf9-5ce5-9baa-d1636d6b415f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-22T13:01:17Z","modified":"2025-11-22T13:01:17Z","name":"Phishing domain: 22334211.weebly.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/22334211.weebly.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '22334211.weebly.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-22T13:01:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/22334211.weebly.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3fa3517-27e7-52ce-ac96-62b85a17d470","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-13T02:22:23Z","modified":"2026-07-13T02:22:23Z","name":"Phishing domain: 22444258.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/22444258.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '22444258.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-13T02:22:23Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/22444258.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a139a918-ac42-5c6a-b7c7-cd0848d28d5f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-08T13:46:11Z","modified":"2026-07-08T13:46:11Z","name":"Phishing domain: 22555258.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/22555258.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '22555258.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-08T13:46:11Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/22555258.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fc62bd1-b486-5d1e-b02e-1d6511c18b1b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-31T16:22:39Z","modified":"2026-01-31T16:22:39Z","name":"Phishing domain: 225web.whatsapwacz.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating whatsapp. Report & evidence: https://phishdestroy.io/domain/225web.whatsapwacz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '225web.whatsapwacz.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-31T16:22:39Z","labels":["malicious-activity","phishing","brand:whatsapp"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/225web.whatsapwacz.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--431217b7-fe48-5fb5-89cb-133c822def28","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 2267758.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2267758.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2267758.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2267758.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ff57184-97b0-5766-aaf3-d20a7f76b1a9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-09T14:31:09Z","modified":"2026-07-09T14:31:09Z","name":"Phishing domain: 2276987365.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/2276987365.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2276987365.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-09T14:31:09Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2276987365.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--26738320-2c5a-56fa-a891-647a6e1380af","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-12T13:37:24Z","modified":"2026-07-12T13:37:24Z","name":"Phishing domain: 227gp.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/227gp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '227gp.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-12T13:37:24Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/227gp.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee9800f6-e24a-519d-b7f5-4d2544748d52","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-10T03:10:44Z","modified":"2025-11-10T03:10:44Z","name":"Phishing domain: 22908ledger.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/22908ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '22908ledger.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-10T03:10:44Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/22908ledger.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--84ca76d7-e258-5680-a476-c87c40d0972b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 22970.me","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/22970.me","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '22970.me']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/22970.me"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--733ea457-cd04-53e4-a340-c72e6366953a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T06:37:04Z","modified":"2026-06-15T06:37:04Z","name":"Phishing domain: 22bet-casino-cz.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/22bet-casino-cz.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '22bet-casino-cz.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T06:37:04Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/22bet-casino-cz.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--71ecf2c1-4e87-55f8-acff-1b7ffe0fbca0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T18:28:52Z","modified":"2026-02-26T18:28:52Z","name":"Phishing domain: 22bet.casino","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/22bet.casino","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '22bet.casino']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T18:28:52Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/22bet.casino"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--db185823-30a1-5170-a94a-4b5a289dbb51","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-16T07:28:49Z","modified":"2025-12-16T07:28:49Z","name":"Phishing domain: 22casino.co.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating mastercard. Report & evidence: https://phishdestroy.io/domain/22casino.co.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '22casino.co.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-16T07:28:49Z","labels":["malicious-activity","phishing","brand:mastercard"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/22casino.co.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cebd8d6e-81a7-5fc9-8cd5-87941a41da27","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-13T03:19:22Z","modified":"2026-03-13T03:19:22Z","name":"Phishing domain: 23-106-50-71.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/23-106-50-71.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '23-106-50-71.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-13T03:19:22Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/23-106-50-71.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--105904d5-e32b-5b76-a5b5-514cff7f0284","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-01T15:15:33Z","modified":"2026-03-01T15:15:33Z","name":"Phishing domain: 23-94-53-16.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/23-94-53-16.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '23-94-53-16.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-01T15:15:33Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/23-94-53-16.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c674b64d-3218-529a-a4f1-cd42d73e2827","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-07T21:39:06Z","modified":"2026-07-07T21:39:06Z","name":"Phishing domain: 23.rewardinglocker.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/23.rewardinglocker.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '23.rewardinglocker.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-07T21:39:06Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/23.rewardinglocker.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ffc60ff-7d69-52d4-a5a9-bd5fddb45a04","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 23001912---61652.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/23001912---61652.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '23001912---61652.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/23001912---61652.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--084d4c29-f5ef-5eb2-97cc-c6ba8fbbc7ca","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 23061652.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/23061652.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '23061652.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/23061652.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ea3dcd1-9dfd-5b75-ac3f-933025dfc843","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-10T05:05:54Z","modified":"2025-12-10T05:05:54Z","name":"Phishing domain: 230951-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/230951-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '230951-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-10T05:05:54Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/230951-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d41b128-659a-5b71-86cb-9651f06b75dd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-19T09:33:55Z","modified":"2025-11-19T09:33:55Z","name":"Phishing domain: 231106.3640123259.workers.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating China Central Television. Report & evidence: https://phishdestroy.io/domain/231106.3640123259.workers.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '231106.3640123259.workers.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-19T09:33:55Z","labels":["malicious-activity","phishing","brand:china central television"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/231106.3640123259.workers.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a077ddd-55b6-5273-9e35-eeaeddcd3c77","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-22T19:05:54Z","modified":"2026-03-22T19:05:54Z","name":"Phishing domain: 23131.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Raydium. Report & evidence: https://phishdestroy.io/domain/23131.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '23131.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-22T19:05:54Z","labels":["malicious-activity","phishing","brand:raydium"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/23131.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d10eee9c-b0b6-5ab3-9714-892f69f1139a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-12T11:14:57Z","modified":"2026-06-12T11:14:57Z","name":"Phishing domain: 23276936365.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/23276936365.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '23276936365.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-12T11:14:57Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/23276936365.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--40363ae5-35e4-56b1-b3ff-5285e699d043","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 2333vn.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2333vn.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2333vn.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2333vn.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--989b44a0-d85c-55cc-94a8-aebe7557918c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-31T17:48:27Z","modified":"2026-01-31T17:48:27Z","name":"Phishing domain: 2342391-ledger.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/2342391-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2342391-ledger.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-31T17:48:27Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2342391-ledger.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4022e8d0-69fb-5ba9-92a0-d48a166a5f53","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-19T14:53:43Z","modified":"2026-02-19T14:53:43Z","name":"Phishing domain: 2352360-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/2352360-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2352360-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-19T14:53:43Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2352360-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--52853d7b-0ac2-50a2-9ffb-1d65a001a3fb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:58Z","modified":"2026-02-26T23:19:58Z","name":"Phishing domain: 2354573435254.vercel.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2354573435254.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2354573435254.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:58Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2354573435254.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--927b322f-8fbd-5714-aff9-c0c77cefbb75","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-25T14:08:27Z","modified":"2026-06-25T14:08:27Z","name":"Phishing domain: 2355bet.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/2355bet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2355bet.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-25T14:08:27Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2355bet.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8988e14-a6d0-5702-b442-d1265dd94b43","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-08T14:30:11Z","modified":"2026-07-08T14:30:11Z","name":"Phishing domain: 235694.blogspot.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/235694.blogspot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '235694.blogspot.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-08T14:30:11Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/235694.blogspot.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2380ab6f-df9f-576b-aa7d-271a9a8a757c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-02T20:41:49Z","modified":"2026-07-02T20:41:49Z","name":"Phishing domain: 235rvi5akc5hvo4u5or5rsr3f3mgnczs5nkm2ud4bhdpse3atd5a.turbo-gateway.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/235rvi5akc5hvo4u5or5rsr3f3mgnczs5nkm2ud4bhdpse3atd5a.turbo-gateway.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '235rvi5akc5hvo4u5or5rsr3f3mgnczs5nkm2ud4bhdpse3atd5a.turbo-gateway.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-02T20:41:49Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/235rvi5akc5hvo4u5or5rsr3f3mgnczs5nkm2ud4bhdpse3atd5a.turbo-gateway.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--74baf81c-a983-5ce1-925f-74dc20403408","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T14:06:24Z","modified":"2026-01-02T14:06:24Z","name":"Phishing domain: 2365222444.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2365222444.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2365222444.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T14:06:24Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2365222444.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3f9cb94-a583-51c5-ae29-e3435c72e88a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-29T13:01:21Z","modified":"2025-12-29T13:01:21Z","name":"Phishing domain: 2365l.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/2365l.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2365l.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-29T13:01:21Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2365l.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5a8d000-92a5-5604-a9f2-ac8142a17be9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-14T11:51:58Z","modified":"2026-07-14T11:51:58Z","name":"Phishing domain: 236824-ledger.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/236824-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '236824-ledger.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-14T11:51:58Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/236824-ledger.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c10500d-c428-5ee1-8b4f-e27ef473f0a5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-09T02:13:53Z","modified":"2026-07-09T02:13:53Z","name":"Phishing domain: 238700.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/238700.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '238700.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-09T02:13:53Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/238700.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae50146d-5dea-5c9c-9230-deb2c4f32270","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-12T16:30:02Z","modified":"2026-03-12T16:30:02Z","name":"Phishing domain: 238747-recovery.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/238747-recovery.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '238747-recovery.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-12T16:30:02Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/238747-recovery.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bd4d880-2172-57b0-9001-819d29146c18","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-11T18:21:50Z","modified":"2026-08-11T18:21:50Z","name":"Phishing domain: 23aa9d.arcadejafet.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/23aa9d.arcadejafet.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '23aa9d.arcadejafet.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-11T18:21:50Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/23aa9d.arcadejafet.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bc529da-2ef1-5bea-8e84-30555bd8b712","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-01T20:47:11Z","modified":"2026-08-01T20:47:11Z","name":"Phishing domain: 23bmohelpmanagement.icu","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/23bmohelpmanagement.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '23bmohelpmanagement.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-01T20:47:11Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/23bmohelpmanagement.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a69e2db-b16a-5f6e-b083-2a25d22f0484","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-21T02:14:24Z","modified":"2026-07-21T02:14:24Z","name":"Phishing domain: 23d0-4442-afd6-d5ab1147ce38.non-steam.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Steam. Report & evidence: https://phishdestroy.io/domain/23d0-4442-afd6-d5ab1147ce38.non-steam.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '23d0-4442-afd6-d5ab1147ce38.non-steam.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-21T02:14:24Z","labels":["malicious-activity","phishing","brand:steam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/23d0-4442-afd6-d5ab1147ce38.non-steam.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8da2249b-a444-5b12-ad7d-fe753ded964a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2024-05-25T23:03:32Z","modified":"2024-05-25T23:03:32Z","name":"Phishing domain: 23jgrhbashapi.ru","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/23jgrhbashapi.ru","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '23jgrhbashapi.ru']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2024-05-25T23:03:32Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/23jgrhbashapi.ru"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--df582178-9c5d-58d5-b34e-cc97157290c6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T14:40:12Z","modified":"2026-07-27T14:40:12Z","name":"Phishing domain: 23se02ml074-star.github.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/23se02ml074-star.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '23se02ml074-star.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T14:40:12Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/23se02ml074-star.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--46d34662-f6ec-52fd-990b-dc0d441458b6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-01T13:32:00Z","modified":"2026-06-01T13:32:00Z","name":"Phishing domain: 23starmaxglobal.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/23starmaxglobal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '23starmaxglobal.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-01T13:32:00Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/23starmaxglobal.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--053d359f-3590-50bb-9be1-64a60a702094","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-12T03:07:44Z","modified":"2026-08-12T03:07:44Z","name":"Phishing domain: 23x2x32x-tz1.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/23x2x32x-tz1.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '23x2x32x-tz1.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-12T03:07:44Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/23x2x32x-tz1.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--baa22a3f-67e1-55ed-ac63-5015aef6eadb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-08T02:52:50Z","modified":"2026-08-08T02:52:50Z","name":"Phishing domain: 23x2x32x.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/23x2x32x.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '23x2x32x.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-08T02:52:50Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/23x2x32x.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6edce84-f728-5478-9d2b-50496071afe7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-22T20:13:06Z","modified":"2025-08-22T20:13:06Z","name":"Phishing domain: 24-escort.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/24-escort.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24-escort.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-22T20:13:06Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/24-escort.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9941453-ef0b-5cf5-992d-dbe48cf497c4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-28T12:03:48Z","modified":"2026-06-28T12:03:48Z","name":"Phishing domain: 243267.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/243267.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '243267.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-28T12:03:48Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/243267.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2d995b5-414f-59ff-8baf-144501316259","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:21Z","modified":"2026-02-26T23:21:21Z","name":"Phishing domain: 245579pontos.dynv6.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/245579pontos.dynv6.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '245579pontos.dynv6.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:21Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/245579pontos.dynv6.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e9c3fa0-958e-5b62-a5c3-08cbfa807124","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:55Z","modified":"2026-02-26T23:23:55Z","name":"Phishing domain: 246.uc4wwk4cow48gok0s4ks0cww.65.109.18.60.sslip.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ethereum. Report & evidence: https://phishdestroy.io/domain/246.uc4wwk4cow48gok0s4ks0cww.65.109.18.60.sslip.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '246.uc4wwk4cow48gok0s4ks0cww.65.109.18.60.sslip.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:55Z","labels":["malicious-activity","phishing","brand:ethereum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/246.uc4wwk4cow48gok0s4ks0cww.65.109.18.60.sslip.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ae90b98-69fb-59a3-9274-1dab86a330d6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T02:17:00Z","modified":"2026-06-15T02:17:00Z","name":"Phishing domain: 246236365756.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/246236365756.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '246236365756.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T02:17:00Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/246236365756.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--47ff2004-69ab-5ad0-9f4e-8e671ee9dcea","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-23T18:31:19Z","modified":"2026-02-23T18:31:19Z","name":"Phishing domain: 2473-x.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2473-x.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2473-x.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-23T18:31:19Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2473-x.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb0f2c6b-0279-5751-99a1-98513f1da44d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-30T18:43:12Z","modified":"2025-10-30T18:43:12Z","name":"Phishing domain: 24750744.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/24750744.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24750744.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-30T18:43:12Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/24750744.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--957e19aa-4544-51f3-b287-adffbf13ef9a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T18:40:07Z","modified":"2026-08-09T18:40:07Z","name":"Phishing domain: 247bitsconnect.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/247bitsconnect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '247bitsconnect.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T18:40:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/247bitsconnect.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--841f7145-938d-5426-a8a9-a188a54d2168","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T07:02:12Z","modified":"2026-07-27T07:02:12Z","name":"Phishing domain: 247blissforex.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/247blissforex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '247blissforex.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T07:02:12Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/247blissforex.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5d0e9e1-fcaf-5315-9ce9-6b4004bb9cdb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T18:40:07Z","modified":"2026-08-09T18:40:07Z","name":"Phishing domain: 247cryptoprotades.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/247cryptoprotades.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '247cryptoprotades.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T18:40:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/247cryptoprotades.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--01734b90-90f0-5a3f-8c66-a2c491b6d901","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-07T17:33:06Z","modified":"2025-08-07T17:33:06Z","name":"Phishing domain: 247de.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Yearn. Report & evidence: https://phishdestroy.io/domain/247de.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '247de.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-07T17:33:06Z","labels":["malicious-activity","phishing","brand:yearn"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/247de.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3f94391-c5d7-5772-9e8a-a7853d8905a8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-29T01:05:27Z","modified":"2025-08-29T01:05:27Z","name":"Phishing domain: 247fxmarket.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating foundation. Report & evidence: https://phishdestroy.io/domain/247fxmarket.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '247fxmarket.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-29T01:05:27Z","labels":["malicious-activity","phishing","brand:foundation"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/247fxmarket.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c9721fe-6db0-5420-868a-88a5852dea6f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T12:18:08Z","modified":"2026-08-09T12:18:08Z","name":"Phishing domain: 247invsolution.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating amazon. Report & evidence: https://phishdestroy.io/domain/247invsolution.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '247invsolution.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T12:18:08Z","labels":["malicious-activity","phishing","brand:amazon"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/247invsolution.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0effff3-0396-5b23-b92e-bfd89a2141d3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T05:14:23Z","modified":"2026-02-13T05:14:23Z","name":"Phishing domain: 247m.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating [\"x.com\"]. Report & evidence: https://phishdestroy.io/domain/247m.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '247m.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T05:14:23Z","labels":["malicious-activity","phishing","brand:[\"x.com\"]"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/247m.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e429de1a-ad34-5686-87b5-cc3ed58e638c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:42:21Z","modified":"2026-07-27T04:42:21Z","name":"Phishing domain: 247optiontradefx.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/247optiontradefx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '247optiontradefx.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:42:21Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/247optiontradefx.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--08120499-c480-58af-a1df-2d2d34798e84","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-20T17:01:07Z","modified":"2025-09-20T17:01:07Z","name":"Phishing domain: 247optmarket.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/247optmarket.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '247optmarket.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-20T17:01:07Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/247optmarket.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--50cb2208-38b7-5fd9-92aa-874876b98398","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:28Z","modified":"2026-02-26T23:21:28Z","name":"Phishing domain: 247primetrade.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating sui. Report & evidence: https://phishdestroy.io/domain/247primetrade.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '247primetrade.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:28Z","labels":["malicious-activity","phishing","brand:sui"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/247primetrade.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac289df9-a182-5d88-af9c-f8680a1e75fc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:14Z","modified":"2026-02-26T23:23:14Z","name":"Phishing domain: 247signal.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/247signal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '247signal.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:14Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/247signal.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0809a57-cb26-5958-8873-97f06579cb58","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-03T13:19:42Z","modified":"2025-09-03T13:19:42Z","name":"Phishing domain: 247signalfxtrade.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating sui. Report & evidence: https://phishdestroy.io/domain/247signalfxtrade.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '247signalfxtrade.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-03T13:19:42Z","labels":["malicious-activity","phishing","brand:sui"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/247signalfxtrade.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9d0eac3-7606-50b4-b661-e9cee5754413","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-19T02:14:32Z","modified":"2026-06-19T02:14:32Z","name":"Phishing domain: 247traderopinion.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bitcoin. Report & evidence: https://phishdestroy.io/domain/247traderopinion.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '247traderopinion.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-19T02:14:32Z","labels":["malicious-activity","phishing","brand:bitcoin"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/247traderopinion.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7f4839b-c7d6-50a1-9e58-396920616fba","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-04T16:59:46Z","modified":"2026-03-04T16:59:46Z","name":"Phishing domain: 247traders-pattern.icu","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericscam. Report & evidence: https://phishdestroy.io/domain/247traders-pattern.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '247traders-pattern.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-04T16:59:46Z","labels":["malicious-activity","phishing","brand:genericscam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/247traders-pattern.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--23e55e9d-e53f-5d82-9f6e-42fb29baf9d9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-20T09:43:54Z","modified":"2026-06-20T09:43:54Z","name":"Phishing domain: 247ucore.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/247ucore.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '247ucore.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-20T09:43:54Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/247ucore.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--37e6fda5-deae-59af-8590-a314dd9780db","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-26T10:21:35Z","modified":"2026-06-26T10:21:35Z","name":"Phishing domain: 247udolar.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/247udolar.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '247udolar.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-26T10:21:35Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/247udolar.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f2f9b62-2a08-5350-90d8-01046fe3908d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 24961652.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/24961652.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24961652.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/24961652.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcdcac04-3bc2-5ad0-8a3b-81de8b253666","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-23T15:32:44Z","modified":"2026-07-23T15:32:44Z","name":"Phishing domain: 24aitradercity.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Investment Scam. Report & evidence: https://phishdestroy.io/domain/24aitradercity.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24aitradercity.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-23T15:32:44Z","labels":["malicious-activity","phishing","brand:investment scam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/24aitradercity.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--31d8da6d-9a06-536f-bdfb-d29d7edc6945","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-30T10:31:19Z","modified":"2026-01-30T10:31:19Z","name":"Phishing domain: 24bets.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/24bets.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24bets.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-30T10:31:19Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/24bets.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d764259d-fcf6-59e4-bb66-0b0fc5a24480","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-20T19:30:54Z","modified":"2026-02-20T19:30:54Z","name":"Phishing domain: 24bh.vip","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/24bh.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24bh.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-20T19:30:54Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/24bh.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0807cb76-ef43-50e5-94c0-a58bc1b93b1b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-07T17:44:56Z","modified":"2026-02-07T17:44:56Z","name":"Phishing domain: 24casinoreview.ru","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/24casinoreview.ru","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24casinoreview.ru']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-07T17:44:56Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/24casinoreview.ru"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b5df376-fa00-5fcc-ac19-04371cb31ffd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-22T10:55:42Z","modified":"2025-10-22T10:55:42Z","name":"Phishing domain: 24chasa.24rc.lol","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/24chasa.24rc.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24chasa.24rc.lol']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-22T10:55:42Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/24chasa.24rc.lol"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3a5fef8-e630-5327-8623-2363f52a9caf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T09:12:59Z","modified":"2026-07-27T09:12:59Z","name":"Phishing domain: 24dailyminingweb.live","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/24dailyminingweb.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24dailyminingweb.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T09:12:59Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/24dailyminingweb.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9726f3ee-5242-5ff1-894c-b283db110ca5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-04T16:57:03Z","modified":"2026-03-04T16:57:03Z","name":"Phishing domain: 24digitalsharedmarket.info","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/24digitalsharedmarket.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24digitalsharedmarket.info']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-04T16:57:03Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/24digitalsharedmarket.info"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--93c47cb1-0414-5442-bf94-6bb6fb2fb864","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-12T16:19:34Z","modified":"2025-08-12T16:19:34Z","name":"Phishing domain: 24dmaxtrd.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bitcoin. Report & evidence: https://phishdestroy.io/domain/24dmaxtrd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24dmaxtrd.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-12T16:19:34Z","labels":["malicious-activity","phishing","brand:bitcoin"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/24dmaxtrd.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--36e7cfc0-00c1-5497-987e-6c298b6ebe72","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-03T02:21:39Z","modified":"2026-07-03T02:21:39Z","name":"Phishing domain: 24eg105p46-dotcom.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Netflix. Report & evidence: https://phishdestroy.io/domain/24eg105p46-dotcom.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24eg105p46-dotcom.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-03T02:21:39Z","labels":["malicious-activity","phishing","brand:netflix"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/24eg105p46-dotcom.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--67c71d1e-963b-5e5f-97f3-257e528d3944","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-04T11:46:48Z","modified":"2025-09-04T11:46:48Z","name":"Phishing domain: 24fastves.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/24fastves.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24fastves.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-04T11:46:48Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/24fastves.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--25c645db-664a-599f-82aa-56209b19adb5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-27T02:13:24Z","modified":"2026-06-27T02:13:24Z","name":"Phishing domain: 24h-adega-do-ze.shop","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/24h-adega-do-ze.shop","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24h-adega-do-ze.shop']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-27T02:13:24Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/24h-adega-do-ze.shop"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0524f519-1038-5687-a00a-5092e2647fc5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-26T10:17:20Z","modified":"2026-06-26T10:17:20Z","name":"Phishing domain: 24h-adegadoze.shop","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/24h-adegadoze.shop","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24h-adegadoze.shop']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-26T10:17:20Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/24h-adegadoze.shop"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ee9131c-adbd-561f-9f45-07d7d281d927","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: 24hourpharmacyhub.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/24hourpharmacyhub.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24hourpharmacyhub.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/24hourpharmacyhub.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2acd2d3-0c3e-5476-8144-89bbd7a126cf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-23T13:01:22Z","modified":"2025-09-23T13:01:22Z","name":"Phishing domain: 24hoursgcvisaservices.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating foundation. Report & evidence: https://phishdestroy.io/domain/24hoursgcvisaservices.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24hoursgcvisaservices.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-23T13:01:22Z","labels":["malicious-activity","phishing","brand:foundation"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/24hoursgcvisaservices.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--de16e8d6-d952-5fae-824d-466e097bb0e3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-12T04:09:35Z","modified":"2025-08-12T04:09:35Z","name":"Phishing domain: 24hrstrustedtd.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/24hrstrustedtd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24hrstrustedtd.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-12T04:09:35Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/24hrstrustedtd.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e80f9652-02cc-5add-8965-5d52351c71c3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: 24krk.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/24krk.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24krk.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/24krk.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f87e76a-0e1a-5a83-872d-6a0824a6d71e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-16T08:13:32Z","modified":"2025-12-16T08:13:32Z","name":"Phishing domain: 24legion.biz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/24legion.biz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24legion.biz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-16T08:13:32Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/24legion.biz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d905157-fe0e-562b-b644-bd62327569d9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-09T14:24:38Z","modified":"2026-06-09T14:24:38Z","name":"Phishing domain: 24ml.de","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/24ml.de","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24ml.de']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-09T14:24:38Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/24ml.de"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--921dc2ec-c805-52ec-bc59-ee1098c86690","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-19T08:07:56Z","modified":"2025-10-19T08:07:56Z","name":"Phishing domain: 24onlinetradingcity.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Apple. Report & evidence: https://phishdestroy.io/domain/24onlinetradingcity.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24onlinetradingcity.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-19T08:07:56Z","labels":["malicious-activity","phishing","brand:apple"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/24onlinetradingcity.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9e9be76-be4f-53dd-8c59-c0f23bf47b7f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-04T16:54:51Z","modified":"2026-03-04T16:54:51Z","name":"Phishing domain: 24optionsmarket.info","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/24optionsmarket.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24optionsmarket.info']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-04T16:54:51Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/24optionsmarket.info"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--05c595e4-f480-598b-b3a1-453408b154f4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-04T18:06:19Z","modified":"2026-07-04T18:06:19Z","name":"Phishing domain: 24pocket-option.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Investment Scam. Report & evidence: https://phishdestroy.io/domain/24pocket-option.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24pocket-option.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-04T18:06:19Z","labels":["malicious-activity","phishing","brand:investment scam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/24pocket-option.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a30ad6a-e3b6-5c05-9b65-0ea96fe5947b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-16T13:54:35Z","modified":"2025-12-16T13:54:35Z","name":"Phishing domain: 24rc.biz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/24rc.biz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24rc.biz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-16T13:54:35Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/24rc.biz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a782819e-5770-59dc-b79b-8ff1f5067036","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-14T19:15:08Z","modified":"2025-12-14T19:15:08Z","name":"Phishing domain: 24rc.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/24rc.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24rc.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-14T19:15:08Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/24rc.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e49662bf-bb54-51ec-aed4-4bfa726be46c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-17T09:09:03Z","modified":"2025-09-17T09:09:03Z","name":"Phishing domain: 24robinhoodtradingoption.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Robinhood. Report & evidence: https://phishdestroy.io/domain/24robinhoodtradingoption.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24robinhoodtradingoption.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-17T09:09:03Z","labels":["malicious-activity","phishing","brand:robinhood"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/24robinhoodtradingoption.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c72cc065-4459-53cb-92eb-e6c0b4862d6e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-25T00:31:01Z","modified":"2026-02-25T00:31:01Z","name":"Phishing domain: 24toys.vip","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/24toys.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24toys.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-25T00:31:01Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/24toys.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--52469ba0-f509-5b05-8748-55c82ae7621d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-02T19:08:51Z","modified":"2026-05-02T19:08:51Z","name":"Phishing domain: 24x7-on-chain.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/24x7-on-chain.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24x7-on-chain.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-02T19:08:51Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/24x7-on-chain.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3de01b41-c947-53c1-bd28-d423abb797cf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: 24x7rxtabworld.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/24x7rxtabworld.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '24x7rxtabworld.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/24x7rxtabworld.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bd4fb9f-6e02-58b5-8ca3-03d1353355b2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T17:37:47Z","modified":"2026-02-26T17:37:47Z","name":"Phishing domain: 250club.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/250club.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '250club.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T17:37:47Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/250club.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4709de9c-ba82-5c6b-bd81-aa300d69158c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-01T22:40:29Z","modified":"2026-03-01T22:40:29Z","name":"Phishing domain: 251384coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/251384coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '251384coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-01T22:40:29Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/251384coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--84b0b4a3-5a8f-5828-85d5-913b5769273d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:23Z","modified":"2026-02-26T23:23:23Z","name":"Phishing domain: 251849-crypto.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/251849-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '251849-crypto.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:23Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/251849-crypto.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2185de1-af3a-5b5b-ae4d-87aa01ca58b5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-18T16:24:51Z","modified":"2025-10-18T16:24:51Z","name":"Phishing domain: 252501.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/252501.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '252501.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-18T16:24:51Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/252501.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe94bc31-e887-5a7e-a261-a80d06f2ceb9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-17T15:26:59Z","modified":"2025-11-17T15:26:59Z","name":"Phishing domain: 2525555maaa.hyperphp.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2525555maaa.hyperphp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2525555maaa.hyperphp.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-17T15:26:59Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2525555maaa.hyperphp.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--76e61bf1-7c07-568b-b7fe-4ef58465e7d1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-14T19:38:02Z","modified":"2026-02-14T19:38:02Z","name":"Phishing domain: 2531-coinabase.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2531-coinabase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2531-coinabase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-14T19:38:02Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2531-coinabase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--95ee7804-8551-5716-b71f-8efed20e470e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-12T11:09:19Z","modified":"2026-06-12T11:09:19Z","name":"Phishing domain: 25365x.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/25365x.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '25365x.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-12T11:09:19Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/25365x.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7205037-c4aa-5de8-a4ef-964eb98a32fd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-03T00:10:33Z","modified":"2026-01-03T00:10:33Z","name":"Phishing domain: 25369.pet","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/25369.pet","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '25369.pet']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-03T00:10:33Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/25369.pet"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--17f318be-7ec7-54bf-b5fd-05d8c03dc69f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T14:04:37Z","modified":"2026-01-02T14:04:37Z","name":"Phishing domain: 25575.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/25575.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '25575.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T14:04:37Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/25575.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0d173a6-1119-5a69-8c5e-0b7bab6a118d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:44:54Z","modified":"2026-07-27T04:44:54Z","name":"Phishing domain: 256138.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/256138.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '256138.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:44:54Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/256138.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bced8ca-444b-59ce-affe-e4484e4e07e7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 25739.me","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/25739.me","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '25739.me']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/25739.me"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d549ee1-b2b0-5c54-bb60-dd5fe30c2e56","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:17Z","modified":"2026-02-26T23:24:17Z","name":"Phishing domain: 257labs.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/257labs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '257labs.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/257labs.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a858f2f-fbb4-53e5-8ba8-2de3acfd65cc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 257vns.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/257vns.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '257vns.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/257vns.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b822b03e-99ae-5f4a-8d1e-516f5bbf89ba","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 25861652.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/25861652.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '25861652.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/25861652.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--79336679-35f7-5e64-8944-fc24d3d7b5ce","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-12T03:22:11Z","modified":"2026-08-12T03:22:11Z","name":"Phishing domain: 259a86.arcadejafet.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/259a86.arcadejafet.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '259a86.arcadejafet.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-12T03:22:11Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/259a86.arcadejafet.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e61ab2ad-21c1-50fe-b2ef-1b83e9bd093f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-12T03:36:34Z","modified":"2026-08-12T03:36:34Z","name":"Phishing domain: 25a290.arcadejafet.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/25a290.arcadejafet.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '25a290.arcadejafet.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-12T03:36:34Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/25a290.arcadejafet.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8695eec1-100c-5219-8762-7c6ddf938060","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:44:26Z","modified":"2026-07-27T04:44:26Z","name":"Phishing domain: 25point5.ru","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/25point5.ru","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '25point5.ru']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:44:26Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/25point5.ru"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--23a97b7a-972b-5db9-a26a-58587339c880","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-31T16:24:44Z","modified":"2026-01-31T16:24:44Z","name":"Phishing domain: 25web.whatsapwcso.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating whatsapp. Report & evidence: https://phishdestroy.io/domain/25web.whatsapwcso.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '25web.whatsapwcso.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-31T16:24:44Z","labels":["malicious-activity","phishing","brand:whatsapp"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/25web.whatsapwcso.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--14d92afa-ec13-5dd3-bebf-07c910d519d8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-04T01:56:24Z","modified":"2026-08-04T01:56:24Z","name":"Phishing domain: 26-fifa.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/26-fifa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '26-fifa.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-04T01:56:24Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/26-fifa.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1467b52f-0379-5054-9aab-775b9155b644","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 2614116---6165.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2614116---6165.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2614116---6165.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2614116---6165.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--102d09ca-abb9-5f65-9e65-15b72e922fd9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-03T14:06:32Z","modified":"2025-12-03T14:06:32Z","name":"Phishing domain: 261433-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/261433-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '261433-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-03T14:06:32Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/261433-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d520d09-5b52-5641-9615-51687cb08f83","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-04T02:38:15Z","modified":"2025-11-04T02:38:15Z","name":"Phishing domain: 265432103.am.coinbase.cm","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/265432103.am.coinbase.cm","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '265432103.am.coinbase.cm']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-04T02:38:15Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/265432103.am.coinbase.cm"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1646ca4-393d-5f04-88af-f401c70d24a3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-10T14:34:23Z","modified":"2026-06-10T14:34:23Z","name":"Phishing domain: 265927coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/265927coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '265927coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-10T14:34:23Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/265927coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--85c8b36e-9873-5125-b0d5-e5e2ddc38b93","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-24T00:57:52Z","modified":"2025-11-24T00:57:52Z","name":"Phishing domain: 2664157451525.netlify.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2664157451525.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2664157451525.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-24T00:57:52Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2664157451525.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--40dee4c9-a9b7-5652-8fdc-24d043a28161","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 26761652.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/26761652.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '26761652.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/26761652.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c243c60f-2885-56a9-9490-2bba5fca9d55","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-19T02:44:41Z","modified":"2026-06-19T02:44:41Z","name":"Phishing domain: 268365i.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/268365i.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '268365i.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-19T02:44:41Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/268365i.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--99784ba1-aad1-5bbd-be9a-627f622d871a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-07T14:14:45Z","modified":"2026-07-07T14:14:45Z","name":"Phishing domain: 268365n.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/268365n.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '268365n.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-07T14:14:45Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/268365n.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--45f197dd-6f16-5d5b-9fd5-5a5d3d53d840","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:16Z","modified":"2026-07-27T06:02:16Z","name":"Phishing domain: 26908.pet","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/26908.pet","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '26908.pet']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:16Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/26908.pet"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9febeb51-c28d-5beb-be6e-1bd60a54d874","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-08T23:35:31Z","modified":"2025-10-08T23:35:31Z","name":"Phishing domain: 269577.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/269577.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '269577.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-08T23:35:31Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/269577.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--97eccfbe-6532-5fa8-8553-388121ec4235","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-08T12:16:54Z","modified":"2025-11-08T12:16:54Z","name":"Phishing domain: 269599.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/269599.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '269599.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-08T12:16:54Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/269599.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--294dc1e7-d4a7-5622-93d0-46bed1beb7d3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-28T12:18:08Z","modified":"2026-06-28T12:18:08Z","name":"Phishing domain: 26junverifieaqui.fwh.is","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/26junverifieaqui.fwh.is","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '26junverifieaqui.fwh.is']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-28T12:18:08Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/26junverifieaqui.fwh.is"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--509f48d9-3241-5cbe-994f-011b8f380adf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-14T08:30:24Z","modified":"2026-06-14T08:30:24Z","name":"Phishing domain: 271437943103258069784186.gpt8437378.workers.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating MetaMask. Report & evidence: https://phishdestroy.io/domain/271437943103258069784186.gpt8437378.workers.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '271437943103258069784186.gpt8437378.workers.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-14T08:30:24Z","labels":["malicious-activity","phishing","brand:metamask"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/271437943103258069784186.gpt8437378.workers.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ee11963-9651-5527-bf1a-aa9a448d546b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:11Z","modified":"2026-02-26T23:22:11Z","name":"Phishing domain: 273981-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/273981-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '273981-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:11Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/273981-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--489a3853-3aba-5e7a-883f-46fa3e6b186a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-07T13:38:15Z","modified":"2026-07-07T13:38:15Z","name":"Phishing domain: 273det.rici.pw","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/273det.rici.pw","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '273det.rici.pw']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-07T13:38:15Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/273det.rici.pw"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9869c250-a991-526e-9e50-2c40b3f5d9e8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 2741028159tyj.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2741028159tyj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2741028159tyj.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2741028159tyj.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c11e24e-f621-5e07-8038-12d9acd529b0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-27T12:44:42Z","modified":"2025-12-27T12:44:42Z","name":"Phishing domain: 274432coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/274432coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '274432coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-27T12:44:42Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/274432coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4dbfc07c-b224-5bd0-b498-230dcbd7d379","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 27778126.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/27778126.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '27778126.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/27778126.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--789280e0-31e8-5507-ac8f-f947738198a1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-13T21:01:45Z","modified":"2026-08-13T21:01:45Z","name":"Phishing domain: 27d4c0.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/27d4c0.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '27d4c0.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-13T21:01:45Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/27d4c0.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--97d59b15-adc0-5025-9f7f-1932e3600ebe","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-02T18:10:02Z","modified":"2026-03-02T18:10:02Z","name":"Phishing domain: 27xpips.site","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/27xpips.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '27xpips.site']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-02T18:10:02Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/27xpips.site"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--536ac14b-7a25-5f28-964f-725b0983892b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:41:38Z","modified":"2026-07-27T04:41:38Z","name":"Phishing domain: 2823aa.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2823aa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2823aa.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:41:38Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2823aa.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddcab2b0-6710-590f-b146-b3a7ac675d38","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:42:31Z","modified":"2026-07-27T04:42:31Z","name":"Phishing domain: 2823ee.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2823ee.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2823ee.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:42:31Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2823ee.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--21e08e81-191a-53fd-99de-40e9a1148b0b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:41:56Z","modified":"2026-07-27T04:41:56Z","name":"Phishing domain: 2823k.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2823k.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2823k.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:41:56Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2823k.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b4c056b-ca7f-57ee-8c9b-4c948f3a8c2e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 28244132---61652.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/28244132---61652.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '28244132---61652.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/28244132---61652.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--51937f4c-f7d1-5787-8ea2-cc123c4e5fb4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:41:54Z","modified":"2026-07-27T04:41:54Z","name":"Phishing domain: 28246.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/28246.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '28246.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:41:54Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/28246.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ad6dcc9-0ebb-5435-8470-b150635e0105","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 282477100.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/282477100.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '282477100.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/282477100.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--545f8bee-4c11-57b8-93aa-0aae12ae53b0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:48:38Z","modified":"2026-07-27T04:48:38Z","name":"Phishing domain: 2824i.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2824i.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2824i.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:48:38Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2824i.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4db9eb07-0bb5-5bc3-aa10-b7bbca810af3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:42:26Z","modified":"2026-07-27T04:42:26Z","name":"Phishing domain: 2824s.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2824s.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2824s.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:42:26Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2824s.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1f86dda-8a1f-5cee-be34-796eb3dc7822","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-31T17:43:24Z","modified":"2026-01-31T17:43:24Z","name":"Phishing domain: 2828825-ledger.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating x.com. Report & evidence: https://phishdestroy.io/domain/2828825-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2828825-ledger.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-31T17:43:24Z","labels":["malicious-activity","phishing","brand:x.com"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2828825-ledger.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc5240cc-67f2-59e3-9f99-f3b153d4c3e1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-31T17:45:57Z","modified":"2026-01-31T17:45:57Z","name":"Phishing domain: 284248-ledger.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/284248-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '284248-ledger.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-31T17:45:57Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/284248-ledger.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--17b898eb-d7e9-522d-824a-f468f78c58ad","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-23T09:58:40Z","modified":"2026-02-23T09:58:40Z","name":"Phishing domain: 284793coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/284793coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '284793coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-23T09:58:40Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/284793coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--37e63ce1-b759-5c11-bbc6-e8dc3d09989d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-31T17:46:54Z","modified":"2026-01-31T17:46:54Z","name":"Phishing domain: 2848244-ledger.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/2848244-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2848244-ledger.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-31T17:46:54Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2848244-ledger.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--de30b4a7-2428-5760-8811-9ae172a56206","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-09T14:29:20Z","modified":"2026-06-09T14:29:20Z","name":"Phishing domain: 28735-google.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/28735-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '28735-google.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-09T14:29:20Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/28735-google.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--54f7408c-60f3-5d14-86f2-c33f9271363c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-29T18:28:27Z","modified":"2026-03-29T18:28:27Z","name":"Phishing domain: 2879ledger.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/2879ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2879ledger.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-29T18:28:27Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2879ledger.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--069d5406-1de5-55c1-b1fb-942db3411ad1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-22T22:03:52Z","modified":"2026-04-22T22:03:52Z","name":"Phishing domain: 288.mikijosmixup.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/288.mikijosmixup.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '288.mikijosmixup.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-22T22:03:52Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/288.mikijosmixup.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--209b423b-04b8-56dd-b6e2-edaa34b07c00","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 288257.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/288257.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '288257.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/288257.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb6d05bb-e9fe-5665-be5d-514e5be44773","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:51Z","modified":"2026-02-26T23:20:51Z","name":"Phishing domain: 288940.dy25b29.cyou","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/288940.dy25b29.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '288940.dy25b29.cyou']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:51Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/288940.dy25b29.cyou"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--06a289d8-7d15-5837-a852-27e313612e46","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:41:40Z","modified":"2026-07-27T04:41:40Z","name":"Phishing domain: 289495906165.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/289495906165.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '289495906165.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:41:40Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/289495906165.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b0ad456-d08c-5914-9830-82dacdd6ee76","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-11T18:27:53Z","modified":"2026-08-11T18:27:53Z","name":"Phishing domain: 2897d4.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/2897d4.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2897d4.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-11T18:27:53Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2897d4.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--76defe62-a469-5c01-9681-bafa6a72c43a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T15:47:47Z","modified":"2026-08-09T15:47:47Z","name":"Phishing domain: 28b829.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/28b829.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '28b829.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T15:47:47Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/28b829.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6eb2d6e-e126-589f-a9dc-cb5052828350","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-13T20:13:49Z","modified":"2026-08-13T20:13:49Z","name":"Phishing domain: 28c9c5.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/28c9c5.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '28c9c5.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-13T20:13:49Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/28c9c5.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d128ac1e-339e-5b07-9541-cd3bf8467a89","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T15:15:42Z","modified":"2026-02-13T15:15:42Z","name":"Phishing domain: 28mars-casinoz-australia.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/28mars-casinoz-australia.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '28mars-casinoz-australia.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T15:15:42Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/28mars-casinoz-australia.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdf5845c-a053-54f1-808d-dcde48186438","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-05T20:51:26Z","modified":"2026-07-05T20:51:26Z","name":"Phishing domain: 291325kraken.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Kraken. Report & evidence: https://phishdestroy.io/domain/291325kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '291325kraken.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-05T20:51:26Z","labels":["malicious-activity","phishing","brand:kraken"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/291325kraken.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd320ba3-7976-5187-9fef-044c19303fd1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-18T13:42:13Z","modified":"2026-03-18T13:42:13Z","name":"Phishing domain: 2915833-kraken.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Kraken. Report & evidence: https://phishdestroy.io/domain/2915833-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2915833-kraken.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-18T13:42:13Z","labels":["malicious-activity","phishing","brand:kraken"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2915833-kraken.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--57f78fc6-ac43-50f1-9fe9-5a0720e06d0f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 29283526---61652.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/29283526---61652.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '29283526---61652.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/29283526---61652.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3075eae8-5992-5a3a-ae82-2bea3f0f1250","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-31T17:43:30Z","modified":"2026-01-31T17:43:30Z","name":"Phishing domain: 2935923-ledger.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/2935923-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2935923-ledger.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-31T17:43:30Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2935923-ledger.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e928682-4fe5-5197-bbc1-f8d9aa977bcb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-18T23:14:40Z","modified":"2026-02-18T23:14:40Z","name":"Phishing domain: 294117-crypto.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating crypto.com. Report & evidence: https://phishdestroy.io/domain/294117-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '294117-crypto.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-18T23:14:40Z","labels":["malicious-activity","phishing","brand:crypto.com"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/294117-crypto.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5659383e-7f9c-5cd8-8f4f-5e71b5daded1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T13:48:59Z","modified":"2026-02-13T13:48:59Z","name":"Phishing domain: 294192coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/294192coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '294192coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T13:48:59Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/294192coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d08924a3-df32-5b1e-a525-c733551f1095","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-20T20:08:16Z","modified":"2026-04-20T20:08:16Z","name":"Phishing domain: 295.lol","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Uniswap. Report & evidence: https://phishdestroy.io/domain/295.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '295.lol']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-20T20:08:16Z","labels":["malicious-activity","phishing","brand:uniswap"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/295.lol"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed9cde18-1541-54c4-af92-2ae91655f28f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:17Z","modified":"2026-07-27T06:02:17Z","name":"Phishing domain: 2951.win","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2951.win","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2951.win']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2951.win"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c7b1b83-7f45-5ad2-b874-05267fb7ba20","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T17:55:31Z","modified":"2026-02-26T17:55:31Z","name":"Phishing domain: 2952.bmt-whatsapp.com.cn","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating whatsapp. Report & evidence: https://phishdestroy.io/domain/2952.bmt-whatsapp.com.cn","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2952.bmt-whatsapp.com.cn']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T17:55:31Z","labels":["malicious-activity","phishing","brand:whatsapp"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2952.bmt-whatsapp.com.cn"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb166e9a-81e6-5c09-88d0-924af6fad89e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-10T17:03:14Z","modified":"2026-03-10T17:03:14Z","name":"Phishing domain: 297421coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/297421coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '297421coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-10T17:03:14Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/297421coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f498a91-b621-5a2f-afea-426ebb7d8888","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 2974785288.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2974785288.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2974785288.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2974785288.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eed8370b-e5de-510d-80cd-43c0ba9f4c7f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-31T16:36:56Z","modified":"2026-01-31T16:36:56Z","name":"Phishing domain: 2985web.whatsapwcox.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating whatsapp. Report & evidence: https://phishdestroy.io/domain/2985web.whatsapwcox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2985web.whatsapwcox.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-31T16:36:56Z","labels":["malicious-activity","phishing","brand:whatsapp"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2985web.whatsapwcox.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e6a2235-01f1-566f-a37c-cb79f044d69a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:26Z","modified":"2026-02-26T23:20:26Z","name":"Phishing domain: 29a7a368.verificators.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/29a7a368.verificators.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '29a7a368.verificators.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:26Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/29a7a368.verificators.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--13242876-352a-5f2d-9187-a6765037aa59","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-24T15:19:32Z","modified":"2025-12-24T15:19:32Z","name":"Phishing domain: 2afak-xyaaa-aaaap-qbl3a-cai.icp0.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2afak-xyaaa-aaaap-qbl3a-cai.icp0.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2afak-xyaaa-aaaap-qbl3a-cai.icp0.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-24T15:19:32Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2afak-xyaaa-aaaap-qbl3a-cai.icp0.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f48641a8-a52c-5270-9e6a-6dcd78c96eb1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-08T13:41:56Z","modified":"2026-07-08T13:41:56Z","name":"Phishing domain: 2agyu.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bridge Scam. Report & evidence: https://phishdestroy.io/domain/2agyu.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2agyu.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-08T13:41:56Z","labels":["malicious-activity","phishing","brand:bridge scam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2agyu.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4544b0e-3759-52f5-bc07-842d207f6d56","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-03T14:19:16Z","modified":"2026-07-03T14:19:16Z","name":"Phishing domain: 2ax3u.naua3.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/2ax3u.naua3.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2ax3u.naua3.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-03T14:19:16Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2ax3u.naua3.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9375a785-639b-5aa1-addb-cd44d43f668e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:02Z","modified":"2026-02-26T23:24:02Z","name":"Phishing domain: 2b737030.tfdyhd-0sfyshjusuiishs.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Sui. Report & evidence: https://phishdestroy.io/domain/2b737030.tfdyhd-0sfyshjusuiishs.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2b737030.tfdyhd-0sfyshjusuiishs.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:02Z","labels":["malicious-activity","phishing","brand:sui"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2b737030.tfdyhd-0sfyshjusuiishs.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec3d6c1d-5c61-54c1-a026-37fa0211f317","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-07T03:16:29Z","modified":"2026-02-07T03:16:29Z","name":"Phishing domain: 2base.cfd","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2base.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2base.cfd']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-07T03:16:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2base.cfd"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d9bafcd-9e34-5941-9328-e7da16a49673","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T16:32:54Z","modified":"2026-06-15T16:32:54Z","name":"Phishing domain: 2base.top","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2base.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2base.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T16:32:54Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2base.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfa1c255-91ab-5279-84c5-8c4d51478c25","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-01T20:03:22Z","modified":"2026-08-01T20:03:22Z","name":"Phishing domain: 2bingenieria.com.ve","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/2bingenieria.com.ve","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2bingenieria.com.ve']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-01T20:03:22Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2bingenieria.com.ve"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--77553db8-aa57-5acf-9a0d-31c4284ce16e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-17T01:21:04Z","modified":"2025-10-17T01:21:04Z","name":"Phishing domain: 2bl4o9lfpk3ii1.dynv6.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating WeTransfer. Report & evidence: https://phishdestroy.io/domain/2bl4o9lfpk3ii1.dynv6.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2bl4o9lfpk3ii1.dynv6.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-17T01:21:04Z","labels":["malicious-activity","phishing","brand:wetransfer"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2bl4o9lfpk3ii1.dynv6.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--85437e90-22e6-540e-b08c-6d8b3749c45e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-13T13:24:34Z","modified":"2026-06-13T13:24:34Z","name":"Phishing domain: 2bone.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2bone.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2bone.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-13T13:24:34Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2bone.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc2bf5f5-2f6c-5699-90f7-b7c236634836","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-12T03:20:17Z","modified":"2026-08-12T03:20:17Z","name":"Phishing domain: 2c74f3.arcadejafet.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/2c74f3.arcadejafet.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2c74f3.arcadejafet.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-12T03:20:17Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2c74f3.arcadejafet.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--17626f5b-9c42-5bef-b456-39f701def3cd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-22T18:40:23Z","modified":"2025-10-22T18:40:23Z","name":"Phishing domain: 2champ.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating foundation. Report & evidence: https://phishdestroy.io/domain/2champ.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2champ.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-22T18:40:23Z","labels":["malicious-activity","phishing","brand:foundation"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2champ.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--866050f2-3a9c-56b9-907f-afc7dd82d3ab","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-17T09:06:07Z","modified":"2026-07-17T09:06:07Z","name":"Phishing domain: 2connektin.click","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2connektin.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2connektin.click']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-17T09:06:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2connektin.click"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4326f513-a76f-5ec8-9049-40f83c5c9387","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-01T05:45:18Z","modified":"2026-07-01T05:45:18Z","name":"Phishing domain: 2counter.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2counter.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2counter.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-01T05:45:18Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2counter.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--16197fd2-a25d-5848-b381-3add26900d1e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T16:33:01Z","modified":"2026-08-10T16:33:01Z","name":"Phishing domain: 2crd.su","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2crd.su","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2crd.su']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T16:33:01Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2crd.su"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--74b8e1ca-2cef-5d91-a9e6-f4fe2ff11ba8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T07:44:58Z","modified":"2026-08-10T07:44:58Z","name":"Phishing domain: 2cs.fail","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating cs2. Report & evidence: https://phishdestroy.io/domain/2cs.fail","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2cs.fail']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T07:44:58Z","labels":["malicious-activity","phishing","brand:cs2"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2cs.fail"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--91e77714-17e6-5d45-ac7b-2186dfd2833d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-29T01:23:27Z","modified":"2025-10-29T01:23:27Z","name":"Phishing domain: 2cyberszone.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2cyberszone.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2cyberszone.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-29T01:23:27Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2cyberszone.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--307013b4-a86d-50a9-87d1-34b3a2394d61","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-25T09:37:57Z","modified":"2025-11-25T09:37:57Z","name":"Phishing domain: 2d0c8d22.ledhu98hjgg.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/2d0c8d22.ledhu98hjgg.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2d0c8d22.ledhu98hjgg.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-25T09:37:57Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2d0c8d22.ledhu98hjgg.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e24f079e-b091-5cae-a60b-970786f4d366","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-18T16:20:17Z","modified":"2025-10-18T16:20:17Z","name":"Phishing domain: 2d351e5fd29b4eb6.raydiumpro-web.shop","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Raydium. Report & evidence: https://phishdestroy.io/domain/2d351e5fd29b4eb6.raydiumpro-web.shop","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2d351e5fd29b4eb6.raydiumpro-web.shop']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-18T16:20:17Z","labels":["malicious-activity","phishing","brand:raydium"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2d351e5fd29b4eb6.raydiumpro-web.shop"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e959357-2600-5750-85ec-fc4b5fd1176d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-18T19:44:35Z","modified":"2026-07-18T19:44:35Z","name":"Phishing domain: 2d3fb702-6718-4020-8075-49a7ab926480-00-2keqavwgggh3y.picard.replit.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bhd. Report & evidence: https://phishdestroy.io/domain/2d3fb702-6718-4020-8075-49a7ab926480-00-2keqavwgggh3y.picard.replit.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2d3fb702-6718-4020-8075-49a7ab926480-00-2keqavwgggh3y.picard.replit.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-18T19:44:35Z","labels":["malicious-activity","phishing","brand:bhd"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2d3fb702-6718-4020-8075-49a7ab926480-00-2keqavwgggh3y.picard.replit.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--167e9ae8-b510-5da2-b87d-b281cf728e19","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T17:37:28Z","modified":"2026-02-26T17:37:28Z","name":"Phishing domain: 2dgal.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2dgal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2dgal.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T17:37:28Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2dgal.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8129670c-5985-5a04-96d4-a81aee35c587","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-28T18:07:28Z","modified":"2026-07-28T18:07:28Z","name":"Phishing domain: 2dmf-9tsf-s767-8y6m6-o6oww.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/2dmf-9tsf-s767-8y6m6-o6oww.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2dmf-9tsf-s767-8y6m6-o6oww.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-28T18:07:28Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2dmf-9tsf-s767-8y6m6-o6oww.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9e96353-e8bf-5bd4-b3e9-a56905f7ec59","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-14T18:08:38Z","modified":"2026-06-14T18:08:38Z","name":"Phishing domain: 2dzl-umko-ou34.tom-macsystemsltd-co-uk-s-account.workers.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2dzl-umko-ou34.tom-macsystemsltd-co-uk-s-account.workers.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2dzl-umko-ou34.tom-macsystemsltd-co-uk-s-account.workers.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-14T18:08:38Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2dzl-umko-ou34.tom-macsystemsltd-co-uk-s-account.workers.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c30f70b-a47d-563e-8bf3-cff4db0d9025","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-09T02:27:34Z","modified":"2026-06-09T02:27:34Z","name":"Phishing domain: 2e5d2a5f-8de6-47f0-baa1-27e72817d50c.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2e5d2a5f-8de6-47f0-baa1-27e72817d50c.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2e5d2a5f-8de6-47f0-baa1-27e72817d50c.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-09T02:27:34Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2e5d2a5f-8de6-47f0-baa1-27e72817d50c.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e5cd8dc-0923-5c3f-a2f8-9e9187589b44","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-13T21:10:16Z","modified":"2026-08-13T21:10:16Z","name":"Phishing domain: 2eaeb7.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2eaeb7.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2eaeb7.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-13T21:10:16Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2eaeb7.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9b451a5-36b4-5ed3-9cc7-1da1d035e01f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-06T11:49:26Z","modified":"2026-07-06T11:49:26Z","name":"Phishing domain: 2eyu3b27kwdqzna3f4mysr4orncup7i3guyygijsue3uwklajhva.arweave.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/2eyu3b27kwdqzna3f4mysr4orncup7i3guyygijsue3uwklajhva.arweave.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2eyu3b27kwdqzna3f4mysr4orncup7i3guyygijsue3uwklajhva.arweave.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-06T11:49:26Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2eyu3b27kwdqzna3f4mysr4orncup7i3guyygijsue3uwklajhva.arweave.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a7ab2be-2b6a-5e22-942e-104e75b19b0e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-10T11:03:08Z","modified":"2025-11-10T11:03:08Z","name":"Phishing domain: 2f-crypto.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Crypto.com. Report & evidence: https://phishdestroy.io/domain/2f-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2f-crypto.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-10T11:03:08Z","labels":["malicious-activity","phishing","brand:crypto.com"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2f-crypto.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e103ffd-5840-56bf-97fd-ea77004d9c57","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:03Z","modified":"2026-02-26T23:23:03Z","name":"Phishing domain: 2f5c-casefb250831.vercel.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2f5c-casefb250831.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2f5c-casefb250831.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:03Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2f5c-casefb250831.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d94c0242-b9ec-5929-8b39-933c5b095552","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-27T19:45:07Z","modified":"2025-11-27T19:45:07Z","name":"Phishing domain: 2fa-kraken.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Kraken. Report & evidence: https://phishdestroy.io/domain/2fa-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2fa-kraken.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-27T19:45:07Z","labels":["malicious-activity","phishing","brand:kraken"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2fa-kraken.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7208705-d570-53b9-8187-8da5a3001553","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-28T10:52:53Z","modified":"2025-10-28T10:52:53Z","name":"Phishing domain: 2fa-security.biz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating trezor. Report & evidence: https://phishdestroy.io/domain/2fa-security.biz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2fa-security.biz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-28T10:52:53Z","labels":["malicious-activity","phishing","brand:trezor"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2fa-security.biz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e90aac07-482e-52ef-8003-7a9c2c732dab","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-29T11:25:07Z","modified":"2025-12-29T11:25:07Z","name":"Phishing domain: 2fa.int-8n.info","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2fa.int-8n.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2fa.int-8n.info']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-29T11:25:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2fa.int-8n.info"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f5b77ff-5cf5-5d29-b1cd-50c7608f6f1a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-18T09:41:18Z","modified":"2025-09-18T09:41:18Z","name":"Phishing domain: 2fa.sammiehosty.online","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/2fa.sammiehosty.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2fa.sammiehosty.online']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-18T09:41:18Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2fa.sammiehosty.online"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a3a7cde-f8d8-59a4-ae83-b0f1a906dc73","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-16T23:55:53Z","modified":"2025-09-16T23:55:53Z","name":"Phishing domain: 2fa.walletpinet.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2fa.walletpinet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2fa.walletpinet.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-16T23:55:53Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2fa.walletpinet.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd2d5053-206d-5385-af9f-6634d7664311","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-11T18:26:54Z","modified":"2026-08-11T18:26:54Z","name":"Phishing domain: 2fa6a4.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/2fa6a4.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2fa6a4.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-11T18:26:54Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2fa6a4.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--520a3a22-ab76-5b73-8017-45289bda2ccd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-24T12:41:46Z","modified":"2026-06-24T12:41:46Z","name":"Phishing domain: 2faroblox.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Roblox. Report & evidence: https://phishdestroy.io/domain/2faroblox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2faroblox.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-24T12:41:46Z","labels":["malicious-activity","phishing","brand:roblox"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2faroblox.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1e505fd-4005-56b0-af75-b43e373ebcd3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:28Z","modified":"2026-02-26T23:24:28Z","name":"Phishing domain: 2fde2a4e-8d44-468f-a14a-a457f48b85d0-00-1lmdm2yz6liz2.janeway.replit.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2fde2a4e-8d44-468f-a14a-a457f48b85d0-00-1lmdm2yz6liz2.janeway.replit.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2fde2a4e-8d44-468f-a14a-a457f48b85d0-00-1lmdm2yz6liz2.janeway.replit.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:28Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2fde2a4e-8d44-468f-a14a-a457f48b85d0-00-1lmdm2yz6liz2.janeway.replit.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fc8bb2a-af43-5bef-af64-0206f65f9f9b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:11Z","modified":"2026-02-26T23:22:11Z","name":"Phishing domain: 2fsxxw73.r.us-east-1.awstrack.me","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2fsxxw73.r.us-east-1.awstrack.me","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2fsxxw73.r.us-east-1.awstrack.me']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:11Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2fsxxw73.r.us-east-1.awstrack.me"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ed91458-831b-59fa-8c96-13b5c7f752e5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-21T02:15:39Z","modified":"2026-06-21T02:15:39Z","name":"Phishing domain: 2ft4.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Roblox. Report & evidence: https://phishdestroy.io/domain/2ft4.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2ft4.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-21T02:15:39Z","labels":["malicious-activity","phishing","brand:roblox"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2ft4.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--68ba4ec8-8490-5efd-bd4c-bb6ac7ccd353","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-24T15:19:30Z","modified":"2025-12-24T15:19:30Z","name":"Phishing domain: 2heg6-2aaaa-aaaap-qbl3q-cai.icp0.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating arbitrum. Report & evidence: https://phishdestroy.io/domain/2heg6-2aaaa-aaaap-qbl3q-cai.icp0.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2heg6-2aaaa-aaaap-qbl3q-cai.icp0.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-24T15:19:30Z","labels":["malicious-activity","phishing","brand:arbitrum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2heg6-2aaaa-aaaap-qbl3q-cai.icp0.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--75adecc0-6140-5f0f-88cf-d98d96162dbb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-27T22:41:16Z","modified":"2026-03-27T22:41:16Z","name":"Phishing domain: 2jetton.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2jetton.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2jetton.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-27T22:41:16Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2jetton.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--78f21d72-51f0-58cb-b155-194c2d7ad9ff","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-24T15:19:26Z","modified":"2025-12-24T15:19:26Z","name":"Phishing domain: 2jglw-bqaaa-aaaap-qbl2q-cai.icp0.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2jglw-bqaaa-aaaap-qbl2q-cai.icp0.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2jglw-bqaaa-aaaap-qbl2q-cai.icp0.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-24T15:19:26Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2jglw-bqaaa-aaaap-qbl2q-cai.icp0.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba6f09fb-200f-52d8-9a11-152d2a3df344","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-03T13:55:47Z","modified":"2025-11-03T13:55:47Z","name":"Phishing domain: 2km.to","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Kraken. Report & evidence: https://phishdestroy.io/domain/2km.to","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2km.to']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-03T13:55:47Z","labels":["malicious-activity","phishing","brand:kraken"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2km.to"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4983084-a442-5776-875b-a99925a1f269","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-27T20:06:10Z","modified":"2026-05-27T20:06:10Z","name":"Phishing domain: 2kprofitsystem.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2kprofitsystem.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2kprofitsystem.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-27T20:06:10Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2kprofitsystem.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fb4a000-5e0e-59e3-8ea2-77f0a4d5e299","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: 2kr.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2kr.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2kr.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2kr.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f676510-3c9c-5ba4-a6fe-be5ad527c415","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: 2kra34.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2kra34.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2kra34.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2kra34.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c5005c3-2b3d-5d35-b8e0-25c82ba56c1e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-28T12:27:10Z","modified":"2026-01-28T12:27:10Z","name":"Phishing domain: 2krakenrustore.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Kraken. Report & evidence: https://phishdestroy.io/domain/2krakenrustore.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2krakenrustore.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-28T12:27:10Z","labels":["malicious-activity","phishing","brand:kraken"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2krakenrustore.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dfa0788-01a1-5ec3-a797-268cb435234c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: 2krn-kraken.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Kraken. Report & evidence: https://phishdestroy.io/domain/2krn-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2krn-kraken.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing","brand:kraken"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2krn-kraken.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fe264e4-4efa-54aa-93fd-1228f62ff0a6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-12T02:23:33Z","modified":"2025-12-12T02:23:33Z","name":"Phishing domain: 2krn.at","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2krn.at","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2krn.at']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-12T02:23:33Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2krn.at"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2849ea98-80c8-5567-ac36-d4748818228e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-13T14:16:35Z","modified":"2026-06-13T14:16:35Z","name":"Phishing domain: 2krn.bio","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2krn.bio","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2krn.bio']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-13T14:16:35Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2krn.bio"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--78ca6443-c5e1-58a5-8d4c-ac0cbb66e0da","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:22Z","modified":"2026-02-26T23:20:22Z","name":"Phishing domain: 2krn.us","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2krn.us","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2krn.us']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:22Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2krn.us"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e21a97c2-15dd-5725-9873-096152564b5d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-29T02:01:34Z","modified":"2026-03-29T02:01:34Z","name":"Phishing domain: 2krn.vip","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2krn.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2krn.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-29T02:01:34Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2krn.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c77307c-63e0-5488-b9c2-4e72a124cf68","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-28T11:41:14Z","modified":"2026-07-28T11:41:14Z","name":"Phishing domain: 2krnmevk2at.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2krnmevk2at.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2krnmevk2at.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-28T11:41:14Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2krnmevk2at.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab8e7ff9-e43b-5d3d-bbe9-21b40c245fe9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-24T21:19:48Z","modified":"2026-01-24T21:19:48Z","name":"Phishing domain: 2ly2ut.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating metamask. Report & evidence: https://phishdestroy.io/domain/2ly2ut.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2ly2ut.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-24T21:19:48Z","labels":["malicious-activity","phishing","brand:metamask"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2ly2ut.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--80efe0b4-5f2c-5003-b495-1d2583a79b6f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-17T09:06:06Z","modified":"2026-07-17T09:06:06Z","name":"Phishing domain: 2meet.click","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2meet.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2meet.click']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-17T09:06:06Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2meet.click"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a031dffa-977e-5018-9c82-95559e09a25a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-07T01:10:25Z","modified":"2026-06-07T01:10:25Z","name":"Phishing domain: 2mud2jka3sv6ndl5f4undbnqhz5pv2nipt54mzdukxttpfxis3ia.arweave.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2mud2jka3sv6ndl5f4undbnqhz5pv2nipt54mzdukxttpfxis3ia.arweave.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2mud2jka3sv6ndl5f4undbnqhz5pv2nipt54mzdukxttpfxis3ia.arweave.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-07T01:10:25Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2mud2jka3sv6ndl5f4undbnqhz5pv2nipt54mzdukxttpfxis3ia.arweave.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6594b56-6419-5a4b-89d4-887f71a98768","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-02T00:27:02Z","modified":"2026-05-02T00:27:02Z","name":"Phishing domain: 2ndline.pro","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2ndline.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2ndline.pro']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-02T00:27:02Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2ndline.pro"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c9688ca-0724-5f7b-8279-d76f3c2ced0d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-10T06:42:19Z","modified":"2025-11-10T06:42:19Z","name":"Phishing domain: 2pigger.soldex.trade","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating solana. Report & evidence: https://phishdestroy.io/domain/2pigger.soldex.trade","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2pigger.soldex.trade']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-10T06:42:19Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2pigger.soldex.trade"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0908798-1e45-529f-b497-b84fc1994e9d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-28T07:58:05Z","modified":"2026-01-28T07:58:05Z","name":"Phishing domain: 2playcarvinvite.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2playcarvinvite.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2playcarvinvite.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-28T07:58:05Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2playcarvinvite.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ace5f548-0645-5bf0-a423-4c5b9e51bc9a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-08T12:17:32Z","modified":"2025-11-08T12:17:32Z","name":"Phishing domain: 2rhlubiwm4.46464tk.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating foundation. Report & evidence: https://phishdestroy.io/domain/2rhlubiwm4.46464tk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2rhlubiwm4.46464tk.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-08T12:17:32Z","labels":["malicious-activity","phishing","brand:foundation"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2rhlubiwm4.46464tk.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--770a64db-815c-5f8f-ac27-2f109395e37a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-03T15:26:11Z","modified":"2026-03-03T15:26:11Z","name":"Phishing domain: 2s.gg","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2s.gg","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2s.gg']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-03T15:26:11Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2s.gg"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc1932c3-06e7-517e-b07c-d007f4720df2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-08T00:08:32Z","modified":"2025-08-08T00:08:32Z","name":"Phishing domain: 2slots.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating foundation. Report & evidence: https://phishdestroy.io/domain/2slots.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2slots.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-08T00:08:32Z","labels":["malicious-activity","phishing","brand:foundation"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2slots.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb0e2eb9-58d4-52e7-a633-726e1b376aae","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-22T23:37:55Z","modified":"2026-06-22T23:37:55Z","name":"Phishing domain: 2toapply-willforwhere.surge.sh","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating facebook. Report & evidence: https://phishdestroy.io/domain/2toapply-willforwhere.surge.sh","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2toapply-willforwhere.surge.sh']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-22T23:37:55Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2toapply-willforwhere.surge.sh"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d9da018-88bd-5851-b6d3-4220c131f459","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-13T19:55:58Z","modified":"2026-08-13T19:55:58Z","name":"Phishing domain: 2tywdr-ovc0j-yp7-enx8w-qa0u0u.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/2tywdr-ovc0j-yp7-enx8w-qa0u0u.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2tywdr-ovc0j-yp7-enx8w-qa0u0u.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-13T19:55:58Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2tywdr-ovc0j-yp7-enx8w-qa0u0u.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1c0db5c-7e68-58e5-adbb-aaceb4fdc451","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-08T22:19:41Z","modified":"2026-02-08T22:19:41Z","name":"Phishing domain: 2up.lol","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating cryptoscam. Report & evidence: https://phishdestroy.io/domain/2up.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2up.lol']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-08T22:19:41Z","labels":["malicious-activity","phishing","brand:cryptoscam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2up.lol"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c132ab73-c281-5da9-9734-0de6d4cf7c86","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-07T21:43:49Z","modified":"2026-07-07T21:43:49Z","name":"Phishing domain: 2upgrader.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2upgrader.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2upgrader.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-07T21:43:49Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2upgrader.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--27ddd356-e7d2-5d39-b497-e11abc0ce4ec","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T13:06:14Z","modified":"2026-06-15T13:06:14Z","name":"Phishing domain: 2us91ol.vip","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating MetaMask. Report & evidence: https://phishdestroy.io/domain/2us91ol.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2us91ol.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T13:06:14Z","labels":["malicious-activity","phishing","brand:metamask"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2us91ol.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f79b37e-2597-5484-bbe0-875e25431947","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-14T01:43:56Z","modified":"2025-12-14T01:43:56Z","name":"Phishing domain: 2vulptfpoov5djahqlskqza5v3itx3k2byj7zir5t3m3p2ann46a.g8way.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2vulptfpoov5djahqlskqza5v3itx3k2byj7zir5t3m3p2ann46a.g8way.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2vulptfpoov5djahqlskqza5v3itx3k2byj7zir5t3m3p2ann46a.g8way.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-14T01:43:56Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2vulptfpoov5djahqlskqza5v3itx3k2byj7zir5t3m3p2ann46a.g8way.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d65533cd-7804-5dcb-a8f2-b400a77c59c4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-05T11:23:43Z","modified":"2025-09-05T11:23:43Z","name":"Phishing domain: 2wncq-oqaaa-aaaak-qiyoa-cai.icp0.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating WalletConnect. Report & evidence: https://phishdestroy.io/domain/2wncq-oqaaa-aaaak-qiyoa-cai.icp0.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2wncq-oqaaa-aaaak-qiyoa-cai.icp0.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-05T11:23:43Z","labels":["malicious-activity","phishing","brand:walletconnect"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2wncq-oqaaa-aaaak-qiyoa-cai.icp0.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8aa740ab-8d6b-5e27-9eca-3d2a6b4a3b7b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-01T21:53:58Z","modified":"2026-02-01T21:53:58Z","name":"Phishing domain: 2x-mstr.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2x-mstr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2x-mstr.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-01T21:53:58Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2x-mstr.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--916dfa60-26c9-56af-b904-b056dd7e1238","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-23T18:43:37Z","modified":"2026-02-23T18:43:37Z","name":"Phishing domain: 2x-mstr.live","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2x-mstr.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2x-mstr.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-23T18:43:37Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2x-mstr.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe3b00f6-e3bc-52e8-8b40-b74a70be938e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-07-11T23:18:17Z","modified":"2025-07-11T23:18:17Z","name":"Phishing domain: 2x-reward.today","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2x-reward.today","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2x-reward.today']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-07-11T23:18:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2x-reward.today"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b96da0ae-c578-5022-b56e-fbb614683690","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-06T04:40:31Z","modified":"2025-11-06T04:40:31Z","name":"Phishing domain: 2x-xrp.gifts","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating XRP. Report & evidence: https://phishdestroy.io/domain/2x-xrp.gifts","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2x-xrp.gifts']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-06T04:40:31Z","labels":["malicious-activity","phishing","brand:xrp"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2x-xrp.gifts"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1304f2c-6232-5866-937d-7bda8562bff4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T06:26:30Z","modified":"2026-06-15T06:26:30Z","name":"Phishing domain: 2x55cip2475qepws642z7xqv2lwxcxlc73jeocbvgqxpvzroskpa.arweave.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2x55cip2475qepws642z7xqv2lwxcxlc73jeocbvgqxpvzroskpa.arweave.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2x55cip2475qepws642z7xqv2lwxcxlc73jeocbvgqxpvzroskpa.arweave.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T06:26:30Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2x55cip2475qepws642z7xqv2lwxcxlc73jeocbvgqxpvzroskpa.arweave.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c9dee55-b201-5274-adea-8d4f4fb80ae5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-04T16:05:54Z","modified":"2026-03-04T16:05:54Z","name":"Phishing domain: 2xornothing.click","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2xornothing.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2xornothing.click']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-04T16:05:54Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2xornothing.click"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--901e775c-2f77-5259-8408-7ad27c537d0b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-06T23:53:41Z","modified":"2026-02-06T23:53:41Z","name":"Phishing domain: 2y999.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2y999.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2y999.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-06T23:53:41Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2y999.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a23391d-ac09-58f7-8f28-1f0821a8c234","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-03T02:15:22Z","modified":"2026-07-03T02:15:22Z","name":"Phishing domain: 2ygkf6ps52-png.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/2ygkf6ps52-png.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2ygkf6ps52-png.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-03T02:15:22Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2ygkf6ps52-png.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a11079e-4fa3-5842-bf9c-b9198a24d6c2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-22T15:19:36Z","modified":"2026-01-22T15:19:36Z","name":"Phishing domain: 2yus7ngwd0c87v-1drvsharepoint.carestakerinc.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2yus7ngwd0c87v-1drvsharepoint.carestakerinc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2yus7ngwd0c87v-1drvsharepoint.carestakerinc.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-22T15:19:36Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2yus7ngwd0c87v-1drvsharepoint.carestakerinc.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3dca50b-790b-5b9f-9c6e-46a7a121542a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-12T22:21:18Z","modified":"2025-12-12T22:21:18Z","name":"Phishing domain: 2yus7ngwd0c87v-1drvsharepoint.deemfirsts.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2yus7ngwd0c87v-1drvsharepoint.deemfirsts.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2yus7ngwd0c87v-1drvsharepoint.deemfirsts.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-12T22:21:18Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2yus7ngwd0c87v-1drvsharepoint.deemfirsts.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--58430e3f-aef7-51e2-887e-059baf21c5eb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-25T15:16:13Z","modified":"2026-02-25T15:16:13Z","name":"Phishing domain: 2yus7ngwd0c87vd1drvsharepoint.capitolelectrics.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2yus7ngwd0c87vd1drvsharepoint.capitolelectrics.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2yus7ngwd0c87vd1drvsharepoint.capitolelectrics.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-25T15:16:13Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2yus7ngwd0c87vd1drvsharepoint.capitolelectrics.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7fb35cd-3d9f-59e7-bdab-38ccbaaf8d64","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-10T05:03:55Z","modified":"2025-12-10T05:03:55Z","name":"Phishing domain: 2yusq7ngwdm363cj87v96gs5do-docusignsharepoints.steelheadincs.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Microsoft. Report & evidence: https://phishdestroy.io/domain/2yusq7ngwdm363cj87v96gs5do-docusignsharepoints.steelheadincs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2yusq7ngwdm363cj87v96gs5do-docusignsharepoints.steelheadincs.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-10T05:03:55Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2yusq7ngwdm363cj87v96gs5do-docusignsharepoints.steelheadincs.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--58d8d2d1-1733-528c-8433-03d31dfea84a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-19T01:12:36Z","modified":"2025-10-19T01:12:36Z","name":"Phishing domain: 2yusq7ngwdm363cj87v96gs5do-workspacesharepoint.hbccontsr.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Microsoft. Report & evidence: https://phishdestroy.io/domain/2yusq7ngwdm363cj87v96gs5do-workspacesharepoint.hbccontsr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2yusq7ngwdm363cj87v96gs5do-workspacesharepoint.hbccontsr.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-19T01:12:36Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2yusq7ngwdm363cj87v96gs5do-workspacesharepoint.hbccontsr.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d043f868-e58a-5845-a024-94ea304ec2ec","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-18T00:18:57Z","modified":"2025-12-18T00:18:57Z","name":"Phishing domain: 2yvne8ngwdmcj87v99gs344090fc-1drivesharepoint.zhenglaiselectric.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2yvne8ngwdmcj87v99gs344090fc-1drivesharepoint.zhenglaiselectric.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2yvne8ngwdmcj87v99gs344090fc-1drivesharepoint.zhenglaiselectric.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-18T00:18:57Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2yvne8ngwdmcj87v99gs344090fc-1drivesharepoint.zhenglaiselectric.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--912bc807-0fb6-5f89-98a9-a64f674977e5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-06T12:51:24Z","modified":"2026-01-06T12:51:24Z","name":"Phishing domain: 2z.stakingsreward.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/2z.stakingsreward.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2z.stakingsreward.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-06T12:51:24Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2z.stakingsreward.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--918833be-e738-52cd-831c-e14b30c17d62","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T14:51:31Z","modified":"2026-02-13T14:51:31Z","name":"Phishing domain: 2zipa.biz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2zipa.biz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2zipa.biz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T14:51:31Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2zipa.biz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c8093ea-903d-595a-a073-6a49999e0c77","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T13:08:53Z","modified":"2026-01-02T13:08:53Z","name":"Phishing domain: 2zoom.me","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating zoom. Report & evidence: https://phishdestroy.io/domain/2zoom.me","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2zoom.me']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T13:08:53Z","labels":["malicious-activity","phishing","brand:zoom"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2zoom.me"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--afd6536f-93ac-528c-8581-726e038c616a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-21T08:13:34Z","modified":"2025-10-21T08:13:34Z","name":"Phishing domain: 2zoommiinviteei.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/2zoommiinviteei.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2zoommiinviteei.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-21T08:13:34Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2zoommiinviteei.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0bd3b7c-f981-5eca-8d28-0e2c16e14098","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-21T08:13:18Z","modified":"2025-10-21T08:13:18Z","name":"Phishing domain: 2zoommminviteee.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Microsoft. Report & evidence: https://phishdestroy.io/domain/2zoommminviteee.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '2zoommminviteee.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-21T08:13:18Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/2zoommminviteee.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--01549df8-b5f8-5aa8-b80b-833693cdf7cc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-05T15:48:29Z","modified":"2025-09-05T15:48:29Z","name":"Phishing domain: 3-14.club","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3-14.club","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3-14.club']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-05T15:48:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3-14.club"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--34225689-9deb-5538-a2dd-498a1454f9c5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-22T13:05:10Z","modified":"2026-06-22T13:05:10Z","name":"Phishing domain: 3-binance.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Binance. Report & evidence: https://phishdestroy.io/domain/3-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3-binance.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-22T13:05:10Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3-binance.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ac468ec-7428-5a6b-885d-4ae207345a61","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-08T01:29:01Z","modified":"2026-08-08T01:29:01Z","name":"Phishing domain: 3-google.com.cn","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating gemini. Report & evidence: https://phishdestroy.io/domain/3-google.com.cn","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3-google.com.cn']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-08T01:29:01Z","labels":["malicious-activity","phishing","brand:gemini"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3-google.com.cn"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e8bc3e7-6175-56c9-ab95-984d5a602838","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-27T22:40:41Z","modified":"2026-03-27T22:40:41Z","name":"Phishing domain: 3-kraken.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Kraken. Report & evidence: https://phishdestroy.io/domain/3-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3-kraken.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-27T22:40:41Z","labels":["malicious-activity","phishing","brand:kraken"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3-kraken.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c45e518-1474-5b5f-b265-c4c939711983","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T04:27:05Z","modified":"2026-02-13T04:27:05Z","name":"Phishing domain: 3-mie.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3-mie.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3-mie.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T04:27:05Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3-mie.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--53f31b70-0a35-52d9-bc59-deac133ea9c1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-16T08:03:17Z","modified":"2025-12-16T08:03:17Z","name":"Phishing domain: 3-mir.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3-mir.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3-mir.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-16T08:03:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3-mir.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9c1479d-a499-5b0c-99c2-836638525bcb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T04:22:19Z","modified":"2026-02-13T04:22:19Z","name":"Phishing domain: 3-mirr.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3-mirr.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3-mirr.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T04:22:19Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3-mirr.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--11622313-e316-5da3-93d4-419247c75796","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T04:24:27Z","modified":"2026-02-13T04:24:27Z","name":"Phishing domain: 3-mit.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3-mit.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3-mit.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T04:24:27Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3-mit.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bd6675f-f957-5758-bf99-ab78ff95a8ee","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T04:20:16Z","modified":"2026-02-13T04:20:16Z","name":"Phishing domain: 3-mjr.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3-mjr.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3-mjr.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T04:20:16Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3-mjr.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aee64db3-5802-5419-8d79-3afdae2c996c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T04:24:34Z","modified":"2026-02-13T04:24:34Z","name":"Phishing domain: 3-mkr.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3-mkr.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3-mkr.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T04:24:34Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3-mkr.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--91032c2a-9af4-5f86-a252-b1d69af0fed4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T04:20:54Z","modified":"2026-02-13T04:20:54Z","name":"Phishing domain: 3-mlr.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3-mlr.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3-mlr.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T04:20:54Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3-mlr.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--047de38c-2445-512f-a62b-37cefb3a968a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T04:25:09Z","modified":"2026-02-13T04:25:09Z","name":"Phishing domain: 3-mmir.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3-mmir.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3-mmir.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T04:25:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3-mmir.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--24e99d39-d68f-50b2-bc19-3b980ec891ba","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T04:21:32Z","modified":"2026-02-13T04:21:32Z","name":"Phishing domain: 3-mor.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3-mor.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3-mor.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T04:21:32Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3-mor.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2bbfbf7-959b-5c66-be1f-e6f02b1f5664","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-26T01:13:23Z","modified":"2026-01-26T01:13:23Z","name":"Phishing domain: 3-ouyi-app.com.cn","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3-ouyi-app.com.cn","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3-ouyi-app.com.cn']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-26T01:13:23Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3-ouyi-app.com.cn"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1777790-9737-58ba-9623-5df158b79702","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-28T07:59:14Z","modified":"2026-03-28T07:59:14Z","name":"Phishing domain: 3-slon-cc.ru","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating [\"kraken\"]. Report & evidence: https://phishdestroy.io/domain/3-slon-cc.ru","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3-slon-cc.ru']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-28T07:59:14Z","labels":["malicious-activity","phishing","brand:[\"kraken\"]"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3-slon-cc.ru"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b6a8d7d-accb-56c0-b5b9-18b272dfae7c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-28T07:59:11Z","modified":"2026-03-28T07:59:11Z","name":"Phishing domain: 3-slon3at.ru","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating [\"telegram\"]. Report & evidence: https://phishdestroy.io/domain/3-slon3at.ru","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3-slon3at.ru']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-28T07:59:11Z","labels":["malicious-activity","phishing","brand:[\"telegram\"]"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3-slon3at.ru"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--62935d3f-32af-51db-93ce-90b02ee29b8d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-28T07:59:13Z","modified":"2026-03-28T07:59:13Z","name":"Phishing domain: 3-slon3cc.ru","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating [\"telegram\"]. Report & evidence: https://phishdestroy.io/domain/3-slon3cc.ru","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3-slon3cc.ru']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-28T07:59:13Z","labels":["malicious-activity","phishing","brand:[\"telegram\"]"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3-slon3cc.ru"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bba54606-5692-5a83-b7e7-207e6e94a4ec","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-14T15:28:22Z","modified":"2026-03-14T15:28:22Z","name":"Phishing domain: 3-utsrqponmlkjihgf.am.coinbase.co.in","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/3-utsrqponmlkjihgf.am.coinbase.co.in","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3-utsrqponmlkjihgf.am.coinbase.co.in']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-14T15:28:22Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3-utsrqponmlkjihgf.am.coinbase.co.in"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--256bd37b-29a8-5a25-acdc-896e584bc792","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-16T08:01:16Z","modified":"2025-12-16T08:01:16Z","name":"Phishing domain: 3.omgpwa1.pw","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3.omgpwa1.pw","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3.omgpwa1.pw']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-16T08:01:16Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3.omgpwa1.pw"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3be6f7c3-b0ba-5cc6-a10f-f75f30423d8b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-08T03:02:35Z","modified":"2026-08-08T03:02:35Z","name":"Phishing domain: 3.therewardinglocker.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3.therewardinglocker.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3.therewardinglocker.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-08T03:02:35Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3.therewardinglocker.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--555a08bc-dbc0-5a2e-87ea-82e70d699cd5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-22T23:59:14Z","modified":"2026-04-22T23:59:14Z","name":"Phishing domain: 3001autos.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3001autos.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3001autos.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-22T23:59:14Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3001autos.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--24038603-f246-500b-9414-0f9625c6bc3f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-11T18:36:48Z","modified":"2026-08-11T18:36:48Z","name":"Phishing domain: 3009de.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/3009de.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3009de.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-11T18:36:48Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3009de.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--360151f1-e0d1-515b-94a2-7c763ce5d17a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:00Z","modified":"2026-02-26T23:20:00Z","name":"Phishing domain: 3011662.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/3011662.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3011662.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:00Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3011662.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0275f473-0cdc-5636-88bb-11074f87e6ad","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-10T16:25:00Z","modified":"2026-02-10T16:25:00Z","name":"Phishing domain: 3011669.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/3011669.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3011669.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-10T16:25:00Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3011669.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5515d0e9-52c1-5e44-89e9-e9821a985ae1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-04T23:08:09Z","modified":"2025-09-04T23:08:09Z","name":"Phishing domain: 3011m3011.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/3011m3011.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3011m3011.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-04T23:08:09Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3011m3011.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--71fe38d8-bc5f-5623-8669-dba09e01184c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-07-24T05:44:11Z","modified":"2025-07-24T05:44:11Z","name":"Phishing domain: 30303033.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/30303033.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '30303033.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-07-24T05:44:11Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/30303033.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e4f8c82-3f38-569f-b115-6cdea1b9636b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: 304bet.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/304bet.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '304bet.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/304bet.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2ce6bc3-cc92-50b4-8cd2-bfa287e43b6a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 305165056165.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/305165056165.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '305165056165.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/305165056165.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--63462d3a-2049-5418-8996-c4b9e97e121a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-29T02:24:23Z","modified":"2026-06-29T02:24:23Z","name":"Phishing domain: 306002-ledger.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/306002-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '306002-ledger.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-29T02:24:23Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/306002-ledger.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd23db03-d068-583b-a152-5e00072eeb7d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-03T02:07:28Z","modified":"2026-03-03T02:07:28Z","name":"Phishing domain: 3073p.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericgambling. Report & evidence: https://phishdestroy.io/domain/3073p.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3073p.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-03T02:07:28Z","labels":["malicious-activity","phishing","brand:genericgambling"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3073p.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4ad5dc3-6b37-5e92-83b4-7b948b7b1426","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-24T05:24:48Z","modified":"2026-03-24T05:24:48Z","name":"Phishing domain: 308-suitelive.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Trezor. Report & evidence: https://phishdestroy.io/domain/308-suitelive.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '308-suitelive.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-24T05:24:48Z","labels":["malicious-activity","phishing","brand:trezor"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/308-suitelive.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--faecb70d-55a4-57b1-b202-4edd817540fa","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-01T15:39:46Z","modified":"2026-02-01T15:39:46Z","name":"Phishing domain: 3080app.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Fake Shop. Report & evidence: https://phishdestroy.io/domain/3080app.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3080app.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-01T15:39:46Z","labels":["malicious-activity","phishing","brand:fake shop"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3080app.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dcaf93a-ec01-5fa6-ad89-4caa1fe201e4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-20T12:51:24Z","modified":"2026-07-20T12:51:24Z","name":"Phishing domain: 309282-overviewledn.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/309282-overviewledn.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '309282-overviewledn.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-20T12:51:24Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/309282-overviewledn.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--81bffb5b-9b1f-5232-9a76-a292cf7f44e9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-28T18:22:49Z","modified":"2026-02-28T18:22:49Z","name":"Phishing domain: 3098marsbahis.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3098marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3098marsbahis.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-28T18:22:49Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3098marsbahis.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4202a2c-1750-535f-9d2a-1bdd269570f5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-07-24T18:37:31Z","modified":"2025-07-24T18:37:31Z","name":"Phishing domain: 30eth.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/30eth.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '30eth.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-07-24T18:37:31Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/30eth.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4db695da-9b79-5cd1-a660-101fef450c16","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-28T14:08:53Z","modified":"2025-11-28T14:08:53Z","name":"Phishing domain: 30eth.eu","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/30eth.eu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '30eth.eu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-28T14:08:53Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/30eth.eu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--49fdd791-c426-548a-83bb-0ad76efe116f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-11T00:23:54Z","modified":"2025-09-11T00:23:54Z","name":"Phishing domain: 30eth.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/30eth.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '30eth.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-11T00:23:54Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/30eth.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fd55f1c-1d46-55de-ac79-a64c9ab59f85","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-09T22:30:29Z","modified":"2025-10-09T22:30:29Z","name":"Phishing domain: 30eth.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating trustwallet. Report & evidence: https://phishdestroy.io/domain/30eth.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '30eth.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-09T22:30:29Z","labels":["malicious-activity","phishing","brand:trustwallet"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/30eth.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--da8c4269-8be0-54cb-b3c7-2c0d55f8dfc1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-24T17:50:10Z","modified":"2026-01-24T17:50:10Z","name":"Phishing domain: 30eth.vip","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/30eth.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '30eth.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-24T17:50:10Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/30eth.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b897802d-7cac-5c07-b5ad-b2a73580b985","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-16T20:55:46Z","modified":"2025-10-16T20:55:46Z","name":"Phishing domain: 30ethe.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Lido. Report & evidence: https://phishdestroy.io/domain/30ethe.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '30ethe.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-16T20:55:46Z","labels":["malicious-activity","phishing","brand:lido"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/30ethe.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3781d3fb-50f2-5952-9e64-d2377e95f1fd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-11T00:23:41Z","modified":"2025-09-11T00:23:41Z","name":"Phishing domain: 30eths.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/30eths.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '30eths.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-11T00:23:41Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/30eths.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5ffa9b8-ee59-5dcd-b8b2-fc3ee2653d88","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-21T14:27:48Z","modified":"2025-12-21T14:27:48Z","name":"Phishing domain: 30f1b22b.elvsoo.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/30f1b22b.elvsoo.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '30f1b22b.elvsoo.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-21T14:27:48Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/30f1b22b.elvsoo.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--38d47daa-90bc-5b99-9e9f-197a5df32718","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: 30kra.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/30kra.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '30kra.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/30kra.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b916057-00f9-5900-9810-95562e41e418","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-16T07:35:19Z","modified":"2025-12-16T07:35:19Z","name":"Phishing domain: 30p.faf.mytemp.website","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/30p.faf.mytemp.website","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '30p.faf.mytemp.website']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-16T07:35:19Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/30p.faf.mytemp.website"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d47ff8d-6912-58a1-9729-dcf109a5b971","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-04T01:15:10Z","modified":"2026-03-04T01:15:10Z","name":"Phishing domain: 30pj8.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/30pj8.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '30pj8.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-04T01:15:10Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/30pj8.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bcdef7d-46d0-5c91-bb0e-d0521161a47b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-19T01:05:54Z","modified":"2025-09-19T01:05:54Z","name":"Phishing domain: 311316145.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/311316145.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '311316145.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-19T01:05:54Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/311316145.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb694483-ac4e-55b0-8a75-2a1fb2f2a449","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:07Z","modified":"2026-02-26T23:24:07Z","name":"Phishing domain: 3113161452.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3113161452.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3113161452.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3113161452.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c28c967d-2cb9-5b36-90d3-269ba73417f3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-08T14:37:57Z","modified":"2026-07-08T14:37:57Z","name":"Phishing domain: 3115ww.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/3115ww.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3115ww.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-08T14:37:57Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3115ww.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9eabed11-7e86-5743-9cb5-9ce23a805915","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-17T01:02:15Z","modified":"2026-03-17T01:02:15Z","name":"Phishing domain: 312.lol","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/312.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '312.lol']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-17T01:02:15Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/312.lol"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--987b7b22-30bf-5008-8e4c-685cddaa8f76","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-28T14:57:39Z","modified":"2026-02-28T14:57:39Z","name":"Phishing domain: 3124003124.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3124003124.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3124003124.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-28T14:57:39Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3124003124.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a47869ff-ea57-51b6-abbf-2e7c509e06b6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-15T10:58:03Z","modified":"2025-11-15T10:58:03Z","name":"Phishing domain: 312831coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/312831coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '312831coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-15T10:58:03Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/312831coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6545db01-5eba-5d2d-962b-058fcf65152d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:41Z","modified":"2026-02-26T23:21:41Z","name":"Phishing domain: 313b2f9e.wormhole-5sz.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/313b2f9e.wormhole-5sz.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '313b2f9e.wormhole-5sz.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:41Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/313b2f9e.wormhole-5sz.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9e10cf2-0ffe-55f9-887e-24b643ec7dd4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-03T09:52:51Z","modified":"2025-09-03T09:52:51Z","name":"Phishing domain: 31477.academy","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/31477.academy","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '31477.academy']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-03T09:52:51Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/31477.academy"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d61900e0-0b29-50bd-a032-d61b2ced8e6e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T15:47:12Z","modified":"2026-08-09T15:47:12Z","name":"Phishing domain: 315247.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/315247.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '315247.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T15:47:12Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/315247.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--97e85b07-9382-5d61-8284-e104cc22d06b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-23T22:36:42Z","modified":"2025-11-23T22:36:42Z","name":"Phishing domain: 318922-portal.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/318922-portal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '318922-portal.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-23T22:36:42Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/318922-portal.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0855c33-14ca-510b-ad42-90f8bf7fafb4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-23T19:45:24Z","modified":"2026-03-23T19:45:24Z","name":"Phishing domain: 31c1m9.minecrypto.pro","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/31c1m9.minecrypto.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '31c1m9.minecrypto.pro']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-23T19:45:24Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/31c1m9.minecrypto.pro"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ef82483-a9a5-5de3-85fa-2aa63e97865c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-25T14:16:45Z","modified":"2026-06-25T14:16:45Z","name":"Phishing domain: 31sanchit12pandey.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Amazon. Report & evidence: https://phishdestroy.io/domain/31sanchit12pandey.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '31sanchit12pandey.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-25T14:16:45Z","labels":["malicious-activity","phishing","brand:amazon"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/31sanchit12pandey.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2226ff8-5492-51bb-8153-543f6be1d901","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-26T13:41:03Z","modified":"2025-10-26T13:41:03Z","name":"Phishing domain: 32000ff.fit","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Apple. Report & evidence: https://phishdestroy.io/domain/32000ff.fit","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '32000ff.fit']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-26T13:41:03Z","labels":["malicious-activity","phishing","brand:apple"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/32000ff.fit"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--adbe73fa-1491-5ce8-9377-eab212cf924e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-20T15:01:49Z","modified":"2026-07-20T15:01:49Z","name":"Phishing domain: 32094373.dojiner.at","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating steam. Report & evidence: https://phishdestroy.io/domain/32094373.dojiner.at","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '32094373.dojiner.at']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-20T15:01:49Z","labels":["malicious-activity","phishing","brand:steam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/32094373.dojiner.at"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc1bcf40-dcb4-5c4d-a922-536fd731ee6f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-03T09:52:31Z","modified":"2025-09-03T09:52:31Z","name":"Phishing domain: 32113.one","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/32113.one","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '32113.one']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-03T09:52:31Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/32113.one"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dabd3765-59e8-53d9-b78b-3d500a2fd7a2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:42:05Z","modified":"2026-07-27T04:42:05Z","name":"Phishing domain: 32126l.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/32126l.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '32126l.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:42:05Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/32126l.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d9c3e81-f1a3-59f9-a055-a56ea97aac38","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-26T17:49:47Z","modified":"2025-12-26T17:49:47Z","name":"Phishing domain: 32173-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/32173-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '32173-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-26T17:49:47Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/32173-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--559a66bb-cda3-5ceb-b9b6-75848e34ab78","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 321vns.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/321vns.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '321vns.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/321vns.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0b97730-f240-5ea8-9e83-e26b6dbbc9fa","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-28T02:08:06Z","modified":"2026-07-28T02:08:06Z","name":"Phishing domain: 322320a2.buzz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/322320a2.buzz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '322320a2.buzz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-28T02:08:06Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/322320a2.buzz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--57d2d34e-5f4e-5159-a750-f779bfe6a305","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 322vns.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/322vns.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '322vns.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/322vns.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8421a708-5ffe-5fe5-8cef-6eb9f0d18b26","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-18T05:21:39Z","modified":"2025-12-18T05:21:39Z","name":"Phishing domain: 324567coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/324567coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '324567coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-18T05:21:39Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/324567coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--96f02ff3-042f-573a-b3ed-3839b39bda5e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:29Z","modified":"2026-02-26T23:23:29Z","name":"Phishing domain: 32501-reembolso-forma.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/32501-reembolso-forma.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '32501-reembolso-forma.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/32501-reembolso-forma.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--76cf00fc-104d-5663-b60b-4f90c1e2da6c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:17Z","modified":"2026-07-27T06:02:17Z","name":"Phishing domain: 32527.co","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/32527.co","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '32527.co']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/32527.co"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--128f87b0-c216-558e-9fd0-6b9da1d1f220","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-29T11:24:34Z","modified":"2025-12-29T11:24:34Z","name":"Phishing domain: 32657.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating tiktok. Report & evidence: https://phishdestroy.io/domain/32657.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '32657.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-29T11:24:34Z","labels":["malicious-activity","phishing","brand:tiktok"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/32657.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--52f4dd29-f125-568e-9e26-ae6f96e005c9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-12T15:28:29Z","modified":"2026-08-12T15:28:29Z","name":"Phishing domain: 326955.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/326955.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '326955.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-12T15:28:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/326955.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aaf93eba-260e-5b01-a3af-177e560b6f18","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-13T13:26:50Z","modified":"2025-12-13T13:26:50Z","name":"Phishing domain: 326c322c.kjfdjfh.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/326c322c.kjfdjfh.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '326c322c.kjfdjfh.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-13T13:26:50Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/326c322c.kjfdjfh.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b7beb7b-de19-59a5-b622-d866262ad02e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-12T15:27:27Z","modified":"2026-08-12T15:27:27Z","name":"Phishing domain: 328315906745954326.weebly.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating xfinity. Report & evidence: https://phishdestroy.io/domain/328315906745954326.weebly.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '328315906745954326.weebly.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-12T15:27:27Z","labels":["malicious-activity","phishing","brand:xfinity"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/328315906745954326.weebly.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d192112-418e-526e-85fc-bc658fee29bd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 32dyj.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/32dyj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '32dyj.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/32dyj.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e82ac9b-543a-5269-b6c8-acf8cbbee057","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-06T02:59:02Z","modified":"2026-08-06T02:59:02Z","name":"Phishing domain: 32e3x2x.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating apple. Report & evidence: https://phishdestroy.io/domain/32e3x2x.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '32e3x2x.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-06T02:59:02Z","labels":["malicious-activity","phishing","brand:apple"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/32e3x2x.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--88048174-91eb-5901-9141-ac87e6f3e802","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: 32kra.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/32kra.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '32kra.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/32kra.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--024c8301-0d30-53c6-b04e-eb9735d1eec5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:05Z","modified":"2026-02-26T23:23:05Z","name":"Phishing domain: 32mallora.com.bunestack.com.ng","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/32mallora.com.bunestack.com.ng","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '32mallora.com.bunestack.com.ng']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:05Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/32mallora.com.bunestack.com.ng"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c7e57de-7041-5d9e-9b6b-b9b8209a3ac8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-28T18:07:32Z","modified":"2026-07-28T18:07:32Z","name":"Phishing domain: 32rx23cr32c.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/32rx23cr32c.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '32rx23cr32c.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-28T18:07:32Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/32rx23cr32c.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3b1f92e-052c-53d4-93bd-250a0ba5ab81","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-04T16:14:17Z","modified":"2026-08-04T16:14:17Z","name":"Phishing domain: 32s23s32s3.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/32s23s32s3.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '32s23s32s3.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-04T16:14:17Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/32s23s32s3.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--886e60e0-42ec-5daa-9578-89faa6aff043","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-11T20:30:02Z","modified":"2026-03-11T20:30:02Z","name":"Phishing domain: 32slot2d.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/32slot2d.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '32slot2d.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-11T20:30:02Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/32slot2d.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b9d3711-b409-5318-acd6-fbaa2298ea60","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-30T00:25:53Z","modified":"2026-05-30T00:25:53Z","name":"Phishing domain: 32win-32win.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/32win-32win.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '32win-32win.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-30T00:25:53Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/32win-32win.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1720554c-3cb0-5a31-9452-831dbd715842","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-22T11:57:33Z","modified":"2026-06-22T11:57:33Z","name":"Phishing domain: 33-icloud.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Apple. Report & evidence: https://phishdestroy.io/domain/33-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '33-icloud.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-22T11:57:33Z","labels":["malicious-activity","phishing","brand:apple"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/33-icloud.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7097feef-f3da-5890-b86f-0442fc789b8f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 3321561652hd.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3321561652hd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3321561652hd.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3321561652hd.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5af185f-10ca-570a-826f-7823b4043a13","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:49Z","modified":"2026-02-26T23:24:49Z","name":"Phishing domain: 333k.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/333k.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '333k.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:49Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/333k.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b70c6b2b-f67e-5ba8-8dc8-da80351780ac","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:38Z","modified":"2026-02-26T23:24:38Z","name":"Phishing domain: 3355tt.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3355tt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3355tt.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:38Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3355tt.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd4124b1-8f5b-51fa-9af0-5385e4bd98ef","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-17T20:53:25Z","modified":"2025-12-17T20:53:25Z","name":"Phishing domain: 33565.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/33565.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '33565.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-17T20:53:25Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/33565.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--16a21d39-a8e7-5c73-966b-e9e6cbcb9046","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:17Z","modified":"2026-07-27T06:02:17Z","name":"Phishing domain: 3363.pw","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3363.pw","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3363.pw']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3363.pw"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--de26febd-df53-51b2-8a29-697b57ff3d00","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-29T13:00:31Z","modified":"2025-12-29T13:00:31Z","name":"Phishing domain: 3365.us","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/3365.us","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3365.us']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-29T13:00:31Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3365.us"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--35349a3a-5282-5a95-ac91-cc930bfb78ac","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-31T22:39:41Z","modified":"2026-03-31T22:39:41Z","name":"Phishing domain: 338suratbet.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/338suratbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '338suratbet.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-31T22:39:41Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/338suratbet.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d33dac3e-9e19-527e-b71b-a6db632e9f88","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-31T17:44:10Z","modified":"2026-01-31T17:44:10Z","name":"Phishing domain: 3399581-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/3399581-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3399581-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-31T17:44:10Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3399581-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cd7bc64-26ae-5918-8484-75a95e8de4d9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-11T18:25:54Z","modified":"2026-08-11T18:25:54Z","name":"Phishing domain: 33dbae.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/33dbae.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '33dbae.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-11T18:25:54Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/33dbae.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f535e05-f3d3-5cc3-b9df-6da849a38363","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T18:16:55Z","modified":"2026-02-13T18:16:55Z","name":"Phishing domain: 33el.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/33el.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '33el.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T18:16:55Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/33el.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e75a244d-2e7b-56c2-9386-6951ce18dcc2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: 33kra.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/33kra.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '33kra.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/33kra.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d60fad4d-3c2a-5400-ade2-7f0cae128dbc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-14T20:12:26Z","modified":"2025-12-14T20:12:26Z","name":"Phishing domain: 33krkn.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Kraken. Report & evidence: https://phishdestroy.io/domain/33krkn.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '33krkn.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-14T20:12:26Z","labels":["malicious-activity","phishing","brand:kraken"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/33krkn.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c992c39b-a46a-555c-bacf-9d13921f1b83","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-05T13:28:06Z","modified":"2025-11-05T13:28:06Z","name":"Phishing domain: 33ysb8.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/33ysb8.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '33ysb8.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-05T13:28:06Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/33ysb8.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0db79cb-0d46-5173-bbff-2b9972259be8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-24T09:33:55Z","modified":"2026-01-24T09:33:55Z","name":"Phishing domain: 340590coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/340590coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '340590coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-24T09:33:55Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/340590coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a74e639-97bc-55b2-b94e-9e9b224ec415","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-21T15:16:43Z","modified":"2026-02-21T15:16:43Z","name":"Phishing domain: 34155dh8.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/34155dh8.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '34155dh8.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-21T15:16:43Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/34155dh8.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a5f2736-a99a-59be-9e46-7b947d2581a3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:17Z","modified":"2026-02-26T23:21:17Z","name":"Phishing domain: 34235k-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating argent. Report & evidence: https://phishdestroy.io/domain/34235k-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '34235k-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:17Z","labels":["malicious-activity","phishing","brand:argent"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/34235k-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d268ff86-54bd-5d52-97f1-51374cef26b1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:58:55Z","modified":"2026-07-27T04:58:55Z","name":"Phishing domain: 342458761653.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/342458761653.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '342458761653.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:58:55Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/342458761653.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--33d0bff3-45c6-561f-8f09-7bb51f91c57d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-16T23:49:42Z","modified":"2025-10-16T23:49:42Z","name":"Phishing domain: 3429c3af-171c-4dc1-8d7c-bfee54326c6f.steamcodegenerator.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating steam. Report & evidence: https://phishdestroy.io/domain/3429c3af-171c-4dc1-8d7c-bfee54326c6f.steamcodegenerator.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3429c3af-171c-4dc1-8d7c-bfee54326c6f.steamcodegenerator.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-16T23:49:42Z","labels":["malicious-activity","phishing","brand:steam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3429c3af-171c-4dc1-8d7c-bfee54326c6f.steamcodegenerator.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--06102a2e-1cab-59cf-8085-ace6cd46206d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-09T12:07:06Z","modified":"2025-12-09T12:07:06Z","name":"Phishing domain: 343243-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/343243-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '343243-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-09T12:07:06Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/343243-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a61815b-e846-519b-90aa-e02337f8eb67","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:56Z","modified":"2026-02-26T23:21:56Z","name":"Phishing domain: 3433ww45.weebly.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3433ww45.weebly.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3433ww45.weebly.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:56Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3433ww45.weebly.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--63ea6593-8002-511c-9137-12a876066985","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-14T15:43:31Z","modified":"2026-03-14T15:43:31Z","name":"Phishing domain: 3436.greenfrienndlypaint.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3436.greenfrienndlypaint.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3436.greenfrienndlypaint.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-14T15:43:31Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3436.greenfrienndlypaint.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a6b5503-4781-5e4d-b623-65175765b0f3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-04T20:30:59Z","modified":"2026-03-04T20:30:59Z","name":"Phishing domain: 3450htxpj.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating HTX. Report & evidence: https://phishdestroy.io/domain/3450htxpj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3450htxpj.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-04T20:30:59Z","labels":["malicious-activity","phishing","brand:htx"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3450htxpj.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e34b361-3eaa-5241-8b7c-8a2b6f2861bc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-14T14:27:39Z","modified":"2026-06-14T14:27:39Z","name":"Phishing domain: 34567yh.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/34567yh.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '34567yh.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-14T14:27:39Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/34567yh.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a136556-f5aa-5146-bfea-14fd6a83d1ad","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-28T18:07:37Z","modified":"2026-07-28T18:07:37Z","name":"Phishing domain: 345934-google.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/345934-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '345934-google.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-28T18:07:37Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/345934-google.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bcc966d-0c3a-5900-91c4-2cde65c298ab","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-21T18:19:07Z","modified":"2026-02-21T18:19:07Z","name":"Phishing domain: 345934coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/345934coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '345934coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-21T18:19:07Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/345934coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d84422ea-147b-5c0f-b776-47337a9e2016","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 3462488---6165.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3462488---6165.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3462488---6165.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3462488---6165.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c434f49-3ff1-584f-a4f5-0b120e4c04bd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-13T02:33:02Z","modified":"2026-07-13T02:33:02Z","name":"Phishing domain: 3466betslot.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/3466betslot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3466betslot.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-13T02:33:02Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3466betslot.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e26cf43-73eb-5a0c-b5e0-d1f12f1f02ec","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-26T00:29:14Z","modified":"2026-07-26T00:29:14Z","name":"Phishing domain: 347182-icloud.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Apple. Report & evidence: https://phishdestroy.io/domain/347182-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '347182-icloud.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-26T00:29:14Z","labels":["malicious-activity","phishing","brand:apple"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/347182-icloud.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bb7406b-8eee-5482-a8e6-4d539e34d0fb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:16Z","modified":"2026-07-27T06:02:16Z","name":"Phishing domain: 34773.pet","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/34773.pet","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '34773.pet']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:16Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/34773.pet"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--557ce45d-b4e9-5e13-9869-f0d43fbabe61","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-30T19:39:50Z","modified":"2026-06-30T19:39:50Z","name":"Phishing domain: 3482865.zk622872.web.hosting-test.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating wetransfer. Report & evidence: https://phishdestroy.io/domain/3482865.zk622872.web.hosting-test.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3482865.zk622872.web.hosting-test.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-30T19:39:50Z","labels":["malicious-activity","phishing","brand:wetransfer"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3482865.zk622872.web.hosting-test.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b586827-0f8c-524d-a6db-c1ca9cdd6542","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 34961652.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/34961652.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '34961652.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/34961652.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6774fd14-fa53-5417-8f90-ea8a7d36941c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T17:57:15Z","modified":"2026-02-26T17:57:15Z","name":"Phishing domain: 34axe.luxeste.vg","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/34axe.luxeste.vg","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '34axe.luxeste.vg']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T17:57:15Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/34axe.luxeste.vg"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b648d10a-a121-53b4-b56c-15d59800975c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-02T16:09:51Z","modified":"2026-03-02T16:09:51Z","name":"Phishing domain: 34bai.proxofive.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/34bai.proxofive.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '34bai.proxofive.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-02T16:09:51Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/34bai.proxofive.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4c5172c-f3bb-5182-9875-e043a09683d2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-21T18:45:19Z","modified":"2025-12-21T18:45:19Z","name":"Phishing domain: 34c2ba41.ripsyr.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/34c2ba41.ripsyr.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '34c2ba41.ripsyr.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-21T18:45:19Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/34c2ba41.ripsyr.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--23e8e2d4-f6a8-543d-9cac-adb8eb0ed6a9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-07T03:34:43Z","modified":"2026-02-07T03:34:43Z","name":"Phishing domain: 34lon.proxofive.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/34lon.proxofive.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '34lon.proxofive.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-07T03:34:43Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/34lon.proxofive.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1953a328-2a0a-5d7f-bac3-1a93e638ac05","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-08T17:22:47Z","modified":"2026-02-08T17:22:47Z","name":"Phishing domain: 350291-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/350291-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '350291-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-08T17:22:47Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/350291-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--978f7aec-f30b-58ae-9f5a-d0c145ca0921","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-26T15:27:37Z","modified":"2025-12-26T15:27:37Z","name":"Phishing domain: 35147c05.hdfuhduddijgji.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/35147c05.hdfuhduddijgji.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '35147c05.hdfuhduddijgji.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-26T15:27:37Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/35147c05.hdfuhduddijgji.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--13cbb428-9845-5d77-b399-ca304f18666c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T16:02:01Z","modified":"2026-08-09T16:02:01Z","name":"Phishing domain: 35229b.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/35229b.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '35229b.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T16:02:01Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/35229b.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c694a969-e725-5e8b-8cb3-87e690172edf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:17Z","modified":"2026-07-27T06:02:17Z","name":"Phishing domain: 3539.win","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3539.win","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3539.win']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3539.win"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3eca6b5-5d6a-5082-9ebb-4afb1c920ebc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-10T14:37:25Z","modified":"2026-06-10T14:37:25Z","name":"Phishing domain: 35391986365.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/35391986365.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '35391986365.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-10T14:37:25Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/35391986365.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--998e1c63-a18a-5e6f-b968-2e9e333f0f5a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-27T07:57:36Z","modified":"2026-02-27T07:57:36Z","name":"Phishing domain: 353nitrobahis.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/353nitrobahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '353nitrobahis.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-27T07:57:36Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/353nitrobahis.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--288bc397-b022-5e1d-b2b9-0830c99c0d02","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 3550718---6165.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3550718---6165.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3550718---6165.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3550718---6165.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1293bf5f-c281-56a8-8076-b8a6784134d8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-03T13:58:54Z","modified":"2025-11-03T13:58:54Z","name":"Phishing domain: 35546424255.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating VakifBank. Report & evidence: https://phishdestroy.io/domain/35546424255.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '35546424255.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-03T13:58:54Z","labels":["malicious-activity","phishing","brand:vakifbank"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/35546424255.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a648ca15-5f78-5ebf-884b-f4bbed809dc0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:16Z","modified":"2026-07-27T06:02:16Z","name":"Phishing domain: 35588.pet","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/35588.pet","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '35588.pet']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:16Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/35588.pet"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--599332e9-9bc4-5ebb-8d9f-bd46aa0752a7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-02T18:01:08Z","modified":"2026-03-02T18:01:08Z","name":"Phishing domain: 355nitrobahis.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/355nitrobahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '355nitrobahis.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-02T18:01:08Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/355nitrobahis.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d220cb5d-20bb-5d26-86ee-a46334c0777b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: 3560guest-booking.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3560guest-booking.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3560guest-booking.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3560guest-booking.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3f47dcd-9b2b-53ea-91dd-02a7418ac59c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-15T07:38:27Z","modified":"2026-03-15T07:38:27Z","name":"Phishing domain: 359.lol","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating discord. Report & evidence: https://phishdestroy.io/domain/359.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '359.lol']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-15T07:38:27Z","labels":["malicious-activity","phishing","brand:discord"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/359.lol"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4d2687b-dcd1-544d-a2cc-6cafb90d286f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-11T20:48:57Z","modified":"2026-04-11T20:48:57Z","name":"Phishing domain: 3593453-test-243234.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/3593453-test-243234.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3593453-test-243234.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-11T20:48:57Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3593453-test-243234.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d29bd9a1-cd0c-5132-b94c-832b9167cecd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-05T03:21:06Z","modified":"2026-02-05T03:21:06Z","name":"Phishing domain: 35joi.lofesdes.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating binance. Report & evidence: https://phishdestroy.io/domain/35joi.lofesdes.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '35joi.lofesdes.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-05T03:21:06Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/35joi.lofesdes.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0223da81-0330-5b88-abf8-b885c38ea70c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-21T15:17:49Z","modified":"2026-02-21T15:17:49Z","name":"Phishing domain: 35kit.luxeste.vg","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/35kit.luxeste.vg","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '35kit.luxeste.vg']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-21T15:17:49Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/35kit.luxeste.vg"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f405b72-68f8-5547-a8af-21688075c6a5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-13T14:10:34Z","modified":"2026-06-13T14:10:34Z","name":"Phishing domain: 35kra.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/35kra.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '35kra.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-13T14:10:34Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/35kra.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1cc69bd-b017-5f43-9441-447a51e1f0f2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-28T03:56:33Z","modified":"2026-01-28T03:56:33Z","name":"Phishing domain: 35liq.proxette.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/35liq.proxette.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '35liq.proxette.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-28T03:56:33Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/35liq.proxette.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9702c51d-e2fb-5c88-87d8-c45bfd39c5ad","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:44:40Z","modified":"2026-07-27T04:44:40Z","name":"Phishing domain: 360.fundzcapital.online","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericscam. Report & evidence: https://phishdestroy.io/domain/360.fundzcapital.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '360.fundzcapital.online']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:44:40Z","labels":["malicious-activity","phishing","brand:genericscam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/360.fundzcapital.online"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e7a1ea6-9738-5af1-a4a0-a0d7dda97590","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-25T23:28:08Z","modified":"2025-12-25T23:28:08Z","name":"Phishing domain: 36051f51.bvfhgvuddfh.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/36051f51.bvfhgvuddfh.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '36051f51.bvfhgvuddfh.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-25T23:28:08Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/36051f51.bvfhgvuddfh.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6545f516-dd8a-50fc-aadb-7b509fb34d54","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-07T02:11:57Z","modified":"2026-06-07T02:11:57Z","name":"Phishing domain: 360967365756.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/360967365756.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '360967365756.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-07T02:11:57Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/360967365756.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d69e5d3f-27ce-5c73-95a4-64650fded404","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-09T17:26:01Z","modified":"2026-06-09T17:26:01Z","name":"Phishing domain: 360cncn.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/360cncn.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '360cncn.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-09T17:26:01Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/360cncn.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b88bc33f-eafd-5cf7-9eed-50d84de29ce4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:47:35Z","modified":"2026-07-27T04:47:35Z","name":"Phishing domain: 360fxfinancialservices.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/360fxfinancialservices.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '360fxfinancialservices.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:47:35Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/360fxfinancialservices.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0579bae6-e3cc-59a8-a20c-c2a3bd55b47e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-05T15:42:19Z","modified":"2026-03-05T15:42:19Z","name":"Phishing domain: 360horizonoptions.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericscam. Report & evidence: https://phishdestroy.io/domain/360horizonoptions.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '360horizonoptions.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-05T15:42:19Z","labels":["malicious-activity","phishing","brand:genericscam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/360horizonoptions.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e86d2cd-de33-5148-ac5e-7dd6137359f0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T09:03:13Z","modified":"2026-07-27T09:03:13Z","name":"Phishing domain: 360metafxtrades.live","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/360metafxtrades.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '360metafxtrades.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T09:03:13Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/360metafxtrades.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e1316a9-f2e0-53c5-ac04-46ee2136f137","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-22T23:23:59Z","modified":"2026-06-22T23:23:59Z","name":"Phishing domain: 360mpa.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/360mpa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '360mpa.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-22T23:23:59Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/360mpa.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--14e22439-aafd-52b9-9ab7-84e75b57fee8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:44:55Z","modified":"2026-07-27T04:44:55Z","name":"Phishing domain: 360trustwealthavenue.stglen.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Trust Wallet. Report & evidence: https://phishdestroy.io/domain/360trustwealthavenue.stglen.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '360trustwealthavenue.stglen.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:44:55Z","labels":["malicious-activity","phishing","brand:trust wallet"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/360trustwealthavenue.stglen.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--71422ceb-2f0b-5ddf-919f-204971f5be59","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:57:45Z","modified":"2026-07-27T04:57:45Z","name":"Phishing domain: 36165g.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/36165g.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '36165g.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:57:45Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/36165g.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c24fbc8-f651-5372-87e7-97801b95d74d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:42:08Z","modified":"2026-07-27T04:42:08Z","name":"Phishing domain: 36165p.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/36165p.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '36165p.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:42:08Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/36165p.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--af5fddbc-ce70-5d86-a2d0-9550faac870d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 362vns.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/362vns.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '362vns.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/362vns.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2d83a27-4b7a-5332-b08b-ed1d93e3df7f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:52Z","modified":"2026-02-26T23:19:52Z","name":"Phishing domain: 363.k44os4c4wcwk0gwo0ckwccww.162.55.81.185.sslip.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Hyperliquid. Report & evidence: https://phishdestroy.io/domain/363.k44os4c4wcwk0gwo0ckwccww.162.55.81.185.sslip.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '363.k44os4c4wcwk0gwo0ckwccww.162.55.81.185.sslip.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:52Z","labels":["malicious-activity","phishing","brand:hyperliquid"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/363.k44os4c4wcwk0gwo0ckwccww.162.55.81.185.sslip.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7041347-0c7e-5566-9194-5bd3a6065efc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-11T14:10:48Z","modified":"2026-07-11T14:10:48Z","name":"Phishing domain: 3636522944.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/3636522944.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3636522944.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-11T14:10:48Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3636522944.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--39f1bb23-68c2-56d7-b771-77dccf25a869","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-28T07:38:35Z","modified":"2026-01-28T07:38:35Z","name":"Phishing domain: 365-nexivox.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating amex. Report & evidence: https://phishdestroy.io/domain/365-nexivox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '365-nexivox.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-28T07:38:35Z","labels":["malicious-activity","phishing","brand:amex"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/365-nexivox.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2450fdc3-43f9-5625-be26-a25bcfcb0bd4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-15T10:54:28Z","modified":"2025-11-15T10:54:28Z","name":"Phishing domain: 3651234.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/3651234.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3651234.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-15T10:54:28Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3651234.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b6a00f4-236d-55e3-b92b-359106c71b6f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-17T04:20:58Z","modified":"2026-07-17T04:20:58Z","name":"Phishing domain: 3652365e.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/3652365e.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3652365e.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-17T04:20:58Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3652365e.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--27e4faaf-73ee-50f2-93e3-8e683c4a1445","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-01T14:22:39Z","modified":"2026-07-01T14:22:39Z","name":"Phishing domain: 3652vip3.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Microsoft. Report & evidence: https://phishdestroy.io/domain/3652vip3.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3652vip3.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-01T14:22:39Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3652vip3.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0bc9886-b244-5e1c-953c-cd9c94ea7b41","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-01T14:24:34Z","modified":"2026-07-01T14:24:34Z","name":"Phishing domain: 3652vip4.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/3652vip4.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3652vip4.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-01T14:24:34Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3652vip4.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f2f98d9-ad00-5d8a-8d60-552ad7c2e088","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-09T14:25:02Z","modified":"2026-06-09T14:25:02Z","name":"Phishing domain: 365556.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/365556.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '365556.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-09T14:25:02Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/365556.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fb28e84-2b36-591b-84b8-5efd6e4b0229","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-18T15:15:43Z","modified":"2026-03-18T15:15:43Z","name":"Phishing domain: 3656534.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/3656534.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3656534.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-18T15:15:43Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3656534.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--59330770-9317-521c-a25c-556629885436","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-12T11:11:37Z","modified":"2026-06-12T11:11:37Z","name":"Phishing domain: 3656v9.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Microsoft. Report & evidence: https://phishdestroy.io/domain/3656v9.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3656v9.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-12T11:11:37Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3656v9.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a39e01d-9adf-5f44-a791-aedd0a4c5237","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-21T02:17:57Z","modified":"2026-06-21T02:17:57Z","name":"Phishing domain: 365756amylzz.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/365756amylzz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '365756amylzz.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-21T02:17:57Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/365756amylzz.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cffa8e0-0ac2-5eb3-b1ea-e139fb328810","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-16T14:20:04Z","modified":"2026-07-16T14:20:04Z","name":"Phishing domain: 365756bb.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/365756bb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '365756bb.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-16T14:20:04Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/365756bb.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--40ff12a7-d57c-5d04-b385-300c8d1af8cf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:26Z","modified":"2026-02-26T23:23:26Z","name":"Phishing domain: 365756hd.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/365756hd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '365756hd.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:26Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/365756hd.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a950427-babe-5bc1-b3e4-04a7464c9ef3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-01T12:39:15Z","modified":"2025-11-01T12:39:15Z","name":"Phishing domain: 365756yh.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/365756yh.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '365756yh.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-01T12:39:15Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/365756yh.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcf58aba-2a60-58c3-88c7-71584510d6bc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-28T12:03:45Z","modified":"2026-06-28T12:03:45Z","name":"Phishing domain: 365756zxd.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/365756zxd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '365756zxd.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-28T12:03:45Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/365756zxd.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cd8874d-76c0-5b6a-b8bd-d41ef4085bf9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-31T14:26:25Z","modified":"2026-07-31T14:26:25Z","name":"Phishing domain: 3658992.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/3658992.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3658992.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-31T14:26:25Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3658992.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d49d36f-46ba-519f-b044-f18dc8ccf053","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-21T02:16:13Z","modified":"2026-07-21T02:16:13Z","name":"Phishing domain: 3658997.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/3658997.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3658997.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-21T02:16:13Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3658997.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7732d0df-1a15-5c06-8bb3-b7835ef61fde","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-23T02:18:27Z","modified":"2026-07-23T02:18:27Z","name":"Phishing domain: 3658coni562.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/3658coni562.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3658coni562.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-23T02:18:27Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3658coni562.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1315cd4-c055-57b6-b735-d9ddf749b75a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-23T02:24:21Z","modified":"2026-07-23T02:24:21Z","name":"Phishing domain: 3658coni563.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/3658coni563.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3658coni563.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-23T02:24:21Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3658coni563.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc9ce58f-1e3b-5d5d-a458-dd4000a71106","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-22T11:52:32Z","modified":"2026-07-22T11:52:32Z","name":"Phishing domain: 3658coni565.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/3658coni565.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3658coni565.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-22T11:52:32Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3658coni565.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--89b8028b-888b-5fdc-bb11-3b4c4d5a1f12","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-28T18:22:15Z","modified":"2026-07-28T18:22:15Z","name":"Phishing domain: 3658coni568.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/3658coni568.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3658coni568.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-28T18:22:15Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3658coni568.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--872cf5b3-41d7-50ab-b7f3-4b15563795f1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-22T12:23:45Z","modified":"2026-07-22T12:23:45Z","name":"Phishing domain: 3658e100.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/3658e100.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3658e100.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-22T12:23:45Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3658e100.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--97e15435-3f08-538d-be54-b7217e1d4e29","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-21T15:00:04Z","modified":"2026-07-21T15:00:04Z","name":"Phishing domain: 3658e101.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/3658e101.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3658e101.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-21T15:00:04Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3658e101.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bf17733-807a-52ff-8cbb-2212549d60aa","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-21T15:00:25Z","modified":"2026-07-21T15:00:25Z","name":"Phishing domain: 3658e102.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/3658e102.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3658e102.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-21T15:00:25Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3658e102.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b958d51-9e0f-5da1-8d68-d1a9c991301b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-21T15:01:14Z","modified":"2026-07-21T15:01:14Z","name":"Phishing domain: 3658e104.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/3658e104.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3658e104.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-21T15:01:14Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3658e104.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a169aba8-0565-50d9-9c16-6c3ee970a48d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-21T15:07:57Z","modified":"2026-07-21T15:07:57Z","name":"Phishing domain: 3658e105.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/3658e105.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3658e105.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-21T15:07:57Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3658e105.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--97e7afd5-6f97-5616-abab-51b9bbff4bcf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-28T18:24:10Z","modified":"2026-07-28T18:24:10Z","name":"Phishing domain: 3658friy59232.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/3658friy59232.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3658friy59232.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-28T18:24:10Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3658friy59232.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffefbe32-8034-55f3-9be1-f9e7ec232cfa","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-28T18:16:03Z","modified":"2026-07-28T18:16:03Z","name":"Phishing domain: 3658fry58213.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/3658fry58213.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3658fry58213.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-28T18:16:03Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3658fry58213.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dacefa90-203a-52a6-b130-763e6d3d6d93","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-21T15:06:50Z","modified":"2026-07-21T15:06:50Z","name":"Phishing domain: 3658hifi291.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/3658hifi291.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3658hifi291.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-21T15:06:50Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3658hifi291.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--842af539-66d4-5bcd-9dff-8e5b81bad96e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-22T11:54:58Z","modified":"2026-07-22T11:54:58Z","name":"Phishing domain: 3658hifi293.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/3658hifi293.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3658hifi293.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-22T11:54:58Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3658hifi293.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d99c4d00-9baa-51eb-bf0d-d6b7616ab67c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-28T18:22:05Z","modified":"2026-07-28T18:22:05Z","name":"Phishing domain: 3658katli5243.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/3658katli5243.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3658katli5243.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-28T18:22:05Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3658katli5243.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--22f4d650-95c7-5d92-b6f5-7785429a8f3a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-22T11:51:34Z","modified":"2026-07-22T11:51:34Z","name":"Phishing domain: 3658miki10200.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/3658miki10200.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3658miki10200.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-22T11:51:34Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3658miki10200.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--38943341-42ff-5a98-b9ff-07fd9975eb69","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-23T02:21:26Z","modified":"2026-07-23T02:21:26Z","name":"Phishing domain: 3658miki11200.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/3658miki11200.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3658miki11200.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-23T02:21:26Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3658miki11200.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cfb4286-8f32-5cec-a073-dee5bef787eb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-23T02:22:08Z","modified":"2026-07-23T02:22:08Z","name":"Phishing domain: 3658miki13200.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/3658miki13200.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3658miki13200.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-23T02:22:08Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3658miki13200.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fce95b05-3518-5727-b29a-08162fbd93d2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-23T02:17:42Z","modified":"2026-07-23T02:17:42Z","name":"Phishing domain: 3658miki15200.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/3658miki15200.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3658miki15200.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-23T02:17:42Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3658miki15200.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--409c019b-0629-5763-95df-22f132294623","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-23T02:19:09Z","modified":"2026-07-23T02:19:09Z","name":"Phishing domain: 3658miki17200.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/3658miki17200.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3658miki17200.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-23T02:19:09Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3658miki17200.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--670cd212-0c15-58f1-a326-3a7a22283206","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-22T12:28:26Z","modified":"2026-07-22T12:28:26Z","name":"Phishing domain: 3658nike5258.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/3658nike5258.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3658nike5258.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-22T12:28:26Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3658nike5258.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8913232-be49-50e3-aca6-560ed8479130","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-01T03:00:05Z","modified":"2026-07-01T03:00:05Z","name":"Phishing domain: 3658sora1058200.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/3658sora1058200.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3658sora1058200.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-01T03:00:05Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3658sora1058200.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2569ee48-f620-5ef0-b4e4-39ac47dc5310","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-01T03:00:05Z","modified":"2026-07-01T03:00:05Z","name":"Phishing domain: 3658sora1158200.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/3658sora1158200.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3658sora1158200.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-01T03:00:05Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3658sora1158200.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--235a1cd4-4baf-5af9-a8a6-4256f1391609","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-01T03:00:05Z","modified":"2026-07-01T03:00:05Z","name":"Phishing domain: 3658sora458200.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/3658sora458200.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3658sora458200.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-01T03:00:05Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3658sora458200.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc0f744e-e40b-561a-b451-9de724f3b5eb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-01T02:24:22Z","modified":"2026-07-01T02:24:22Z","name":"Phishing domain: 3658sora558200.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/3658sora558200.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3658sora558200.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-01T02:24:22Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3658sora558200.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1e66da0-a323-54a4-9f24-cb2fffac6bb5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-01T03:00:05Z","modified":"2026-07-01T03:00:05Z","name":"Phishing domain: 3658sora658200.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/3658sora658200.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3658sora658200.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-01T03:00:05Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3658sora658200.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ae6f7a3-ed28-57d6-a182-37739e6f7c48","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-22T11:55:47Z","modified":"2026-07-22T11:55:47Z","name":"Phishing domain: 3658yohu10200.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/3658yohu10200.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3658yohu10200.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-22T11:55:47Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3658yohu10200.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--be31b02b-330e-5bb7-b788-9cb3662464eb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-22T11:55:03Z","modified":"2026-07-22T11:55:03Z","name":"Phishing domain: 3658yohu2200.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/3658yohu2200.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3658yohu2200.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-22T11:55:03Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3658yohu2200.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--208c2bdf-2fb4-5197-a808-707c18ce2c41","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-22T11:44:09Z","modified":"2026-07-22T11:44:09Z","name":"Phishing domain: 3658yohu5200.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/3658yohu5200.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3658yohu5200.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-22T11:44:09Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3658yohu5200.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--240775e1-f2a9-5bdd-8474-7367a2e20885","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-21T14:53:26Z","modified":"2026-07-21T14:53:26Z","name":"Phishing domain: 3658yohu8200.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/3658yohu8200.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3658yohu8200.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-21T14:53:26Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3658yohu8200.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4022b8b2-f433-52a8-95e7-2c516d786ddb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-22T13:14:26Z","modified":"2026-07-22T13:14:26Z","name":"Phishing domain: 3658yohu9200.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/3658yohu9200.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3658yohu9200.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-22T13:14:26Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3658yohu9200.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5f93028-6c95-58c5-a1c4-94aa46cd3328","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-08T13:42:35Z","modified":"2026-07-08T13:42:35Z","name":"Phishing domain: 3659euro.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Microsoft. Report & evidence: https://phishdestroy.io/domain/3659euro.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3659euro.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-08T13:42:35Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3659euro.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1955f1fd-b0de-5510-8633-8c88539ae3b9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-04T01:16:17Z","modified":"2026-03-04T01:16:17Z","name":"Phishing domain: 365betdengru.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/365betdengru.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '365betdengru.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-04T01:16:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/365betdengru.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c54c7c1c-0e99-525d-b9a2-ecb67d711232","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-14T12:01:14Z","modified":"2026-07-14T12:01:14Z","name":"Phishing domain: 365etop1.co","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/365etop1.co","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '365etop1.co']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-14T12:01:14Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/365etop1.co"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2faf62f8-c873-5738-bfcb-78951350cbe7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-06T14:46:22Z","modified":"2026-07-06T14:46:22Z","name":"Phishing domain: 365etop2.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Microsoft. Report & evidence: https://phishdestroy.io/domain/365etop2.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '365etop2.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-06T14:46:22Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/365etop2.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--70b65853-2bcf-56ef-ada1-d6fea92555ab","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-07T11:22:17Z","modified":"2025-11-07T11:22:17Z","name":"Phishing domain: 365hty1.vip","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/365hty1.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '365hty1.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-07T11:22:17Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/365hty1.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--214fd9de-0b2b-52de-b085-1b0087fcb572","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-02T15:28:11Z","modified":"2026-07-02T15:28:11Z","name":"Phishing domain: 365infverificar.fwh.is","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Microsoft. Report & evidence: https://phishdestroy.io/domain/365infverificar.fwh.is","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '365infverificar.fwh.is']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-02T15:28:11Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/365infverificar.fwh.is"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--91bc1162-783b-553d-86e5-4f6fdbf53ac6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-22T12:59:12Z","modified":"2025-12-22T12:59:12Z","name":"Phishing domain: 365kjump.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/365kjump.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '365kjump.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-22T12:59:12Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/365kjump.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--97521099-2727-54ab-85ac-c05edca1efaa","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-27T17:07:12Z","modified":"2025-11-27T17:07:12Z","name":"Phishing domain: 365kk11.ink","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/365kk11.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '365kk11.ink']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-27T17:07:12Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/365kk11.ink"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--815774d7-7535-5e90-a6af-6cac3d3f0e35","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:04Z","modified":"2026-02-26T23:21:04Z","name":"Phishing domain: 365officemicroservices.buzz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/365officemicroservices.buzz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '365officemicroservices.buzz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:04Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/365officemicroservices.buzz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7091c52b-222d-5c62-9051-ec75cc30f9b4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-08T13:49:03Z","modified":"2026-07-08T13:49:03Z","name":"Phishing domain: 365outlookcl.webcindario.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Microsoft. Report & evidence: https://phishdestroy.io/domain/365outlookcl.webcindario.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '365outlookcl.webcindario.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-08T13:49:03Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/365outlookcl.webcindario.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--09efbdf4-8455-5563-97a5-c69d9175b14e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-18T14:38:39Z","modified":"2026-06-18T14:38:39Z","name":"Phishing domain: 365outloverifica.fwh.is","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating microsoft. Report & evidence: https://phishdestroy.io/domain/365outloverifica.fwh.is","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '365outloverifica.fwh.is']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-18T14:38:39Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/365outloverifica.fwh.is"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--da4d9eab-dd10-5d7d-af66-97ab3bdea6a7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:05Z","modified":"2026-02-26T23:22:05Z","name":"Phishing domain: 365raja.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/365raja.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '365raja.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:05Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/365raja.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b11b65c6-2b40-5d3a-9baf-83ef0b15cda9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-03T14:21:14Z","modified":"2026-02-03T14:21:14Z","name":"Phishing domain: 365scoresbets.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating [\"ethereum\"]. Report & evidence: https://phishdestroy.io/domain/365scoresbets.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '365scoresbets.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-03T14:21:14Z","labels":["malicious-activity","phishing","brand:[\"ethereum\"]"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/365scoresbets.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0122f4d3-6128-5e6c-a53e-aa7fdc1f6d94","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-19T14:26:07Z","modified":"2026-06-19T14:26:07Z","name":"Phishing domain: 365verificafacial.fwh.is","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating microsoft. Report & evidence: https://phishdestroy.io/domain/365verificafacial.fwh.is","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '365verificafacial.fwh.is']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-19T14:26:07Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/365verificafacial.fwh.is"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d7614ca-ddfc-57be-9479-f487b1e3eb50","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-29T12:14:20Z","modified":"2025-10-29T12:14:20Z","name":"Phishing domain: 365w.bet","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/365w.bet","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '365w.bet']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-29T12:14:20Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/365w.bet"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7128dd7b-888d-5ae5-b6b5-a6a356752aad","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-03T14:20:18Z","modified":"2026-07-03T14:20:18Z","name":"Phishing domain: 365wtvip.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/365wtvip.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '365wtvip.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-03T14:20:18Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/365wtvip.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f69f8811-f4ce-5009-8c7f-bee479d555b7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 365yzh.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/365yzh.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '365yzh.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/365yzh.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0703b908-862e-5018-a136-86cf5ec1e260","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:43Z","modified":"2026-02-26T23:23:43Z","name":"Phishing domain: 366319-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/366319-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '366319-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:43Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/366319-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--669f5330-0d23-5053-80c4-e327541b2529","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 36668126.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/36668126.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '36668126.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/36668126.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e913a98d-8a06-5e0c-b270-67e4b6f57f2e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-01T14:35:59Z","modified":"2026-07-01T14:35:59Z","name":"Phishing domain: 36679.vip","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/36679.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '36679.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-01T14:35:59Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/36679.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--324b53eb-e36d-545c-b7d8-3af3caebf4aa","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-08T16:35:34Z","modified":"2026-06-08T16:35:34Z","name":"Phishing domain: 367ha52gsj5dndxkhz4ttsf6kmwc5dl3upwqemn3thb7c6ocgseq.arweave.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/367ha52gsj5dndxkhz4ttsf6kmwc5dl3upwqemn3thb7c6ocgseq.arweave.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '367ha52gsj5dndxkhz4ttsf6kmwc5dl3upwqemn3thb7c6ocgseq.arweave.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-08T16:35:34Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/367ha52gsj5dndxkhz4ttsf6kmwc5dl3upwqemn3thb7c6ocgseq.arweave.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2af2fa5-a773-53dc-b07d-f755e1f6a56d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-24T13:56:44Z","modified":"2026-03-24T13:56:44Z","name":"Phishing domain: 369zk888.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/369zk888.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '369zk888.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-24T13:56:44Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/369zk888.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d199918-fcad-56a7-aeff-0763d33da15d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-21T23:51:12Z","modified":"2025-12-21T23:51:12Z","name":"Phishing domain: 36c96a11.demmoo-5p7.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/36c96a11.demmoo-5p7.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '36c96a11.demmoo-5p7.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-21T23:51:12Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/36c96a11.demmoo-5p7.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--03999839-2c98-50d6-8b30-5cfd41679215","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-25T12:30:41Z","modified":"2025-12-25T12:30:41Z","name":"Phishing domain: 36e0e9e4.mfgjgnihfh.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/36e0e9e4.mfgjgnihfh.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '36e0e9e4.mfgjgnihfh.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-25T12:30:41Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/36e0e9e4.mfgjgnihfh.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb9d5d16-25e7-51b4-a299-48ef289ed7af","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-08T12:16:57Z","modified":"2025-11-08T12:16:57Z","name":"Phishing domain: 36erap36adfhewf5ea9899685w20jh2q.suneastholdings.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/36erap36adfhewf5ea9899685w20jh2q.suneastholdings.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '36erap36adfhewf5ea9899685w20jh2q.suneastholdings.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-08T12:16:57Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/36erap36adfhewf5ea9899685w20jh2q.suneastholdings.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--613f022a-2408-5f6b-b614-8bc87a2e82ea","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-27T16:14:14Z","modified":"2025-12-27T16:14:14Z","name":"Phishing domain: 36f3cdd9.knfdjfhusurje.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating trezor. Report & evidence: https://phishdestroy.io/domain/36f3cdd9.knfdjfhusurje.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '36f3cdd9.knfdjfhusurje.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-27T16:14:14Z","labels":["malicious-activity","phishing","brand:trezor"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/36f3cdd9.knfdjfhusurje.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--92b75956-7a1c-585c-be86-5f78ab95398c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-22T11:04:19Z","modified":"2025-10-22T11:04:19Z","name":"Phishing domain: 372656135051488813789482033989mjrfadimxatvapj.adelon.com.br","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Microsoft. Report & evidence: https://phishdestroy.io/domain/372656135051488813789482033989mjrfadimxatvapj.adelon.com.br","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '372656135051488813789482033989mjrfadimxatvapj.adelon.com.br']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-22T11:04:19Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/372656135051488813789482033989mjrfadimxatvapj.adelon.com.br"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--263b4e8e-9a70-58ab-a633-689058b1d20e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-14T19:38:56Z","modified":"2026-02-14T19:38:56Z","name":"Phishing domain: 376992coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/376992coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '376992coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-14T19:38:56Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/376992coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--31ff155a-6b57-52ae-9805-5662b429aab4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:35Z","modified":"2026-02-26T23:19:35Z","name":"Phishing domain: 37737.live-security-checkmarks365.click","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating facebook. Report & evidence: https://phishdestroy.io/domain/37737.live-security-checkmarks365.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '37737.live-security-checkmarks365.click']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:35Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/37737.live-security-checkmarks365.click"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--af63e964-392f-50e8-9067-647014e45c08","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-14T13:22:45Z","modified":"2025-12-14T13:22:45Z","name":"Phishing domain: 37737.view-unlockbluestick2025.cloud","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/37737.view-unlockbluestick2025.cloud","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '37737.view-unlockbluestick2025.cloud']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-14T13:22:45Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/37737.view-unlockbluestick2025.cloud"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--78b5981d-e87c-56c4-887d-67c68880b689","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-15T15:25:42Z","modified":"2025-10-15T15:25:42Z","name":"Phishing domain: 3778367267262.netlify.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3778367267262.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3778367267262.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-15T15:25:42Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3778367267262.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3df42b4b-18e2-5e6d-a309-f657f2562ac5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-12T21:15:48Z","modified":"2026-02-12T21:15:48Z","name":"Phishing domain: 377betbrazil.bet","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/377betbrazil.bet","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '377betbrazil.bet']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-12T21:15:48Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/377betbrazil.bet"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac60906c-5524-53c2-ac01-b8ace8cfbec9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-17T19:14:26Z","modified":"2026-02-17T19:14:26Z","name":"Phishing domain: 377wbahis.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/377wbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '377wbahis.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-17T19:14:26Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/377wbahis.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd6672d4-c783-5c97-9c01-416b0efec01c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-03T14:26:18Z","modified":"2026-08-03T14:26:18Z","name":"Phishing domain: 378182-kucoin.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating KuCoin. Report & evidence: https://phishdestroy.io/domain/378182-kucoin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '378182-kucoin.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-03T14:26:18Z","labels":["malicious-activity","phishing","brand:kucoin"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/378182-kucoin.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c7f3592-c25e-5f02-a508-58f6231a49cc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-13T20:56:04Z","modified":"2026-08-13T20:56:04Z","name":"Phishing domain: 37b67b.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/37b67b.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '37b67b.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-13T20:56:04Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/37b67b.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd7ac1fa-a26d-514a-8823-13a57ff6890a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-29T02:34:11Z","modified":"2026-06-29T02:34:11Z","name":"Phishing domain: 37m.xgfc555.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ethereum. Report & evidence: https://phishdestroy.io/domain/37m.xgfc555.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '37m.xgfc555.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-29T02:34:11Z","labels":["malicious-activity","phishing","brand:ethereum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/37m.xgfc555.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f9dee61-da91-504d-ba08-78d1dd206cac","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-03T09:56:02Z","modified":"2025-09-03T09:56:02Z","name":"Phishing domain: 38010.lgbt","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/38010.lgbt","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '38010.lgbt']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-03T09:56:02Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/38010.lgbt"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2720c394-a2a7-5b48-b89a-1ac6a3d5f64b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:17Z","modified":"2026-07-27T06:02:17Z","name":"Phishing domain: 38017.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/38017.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '38017.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/38017.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6345c1b8-cc2f-5fb8-9a1e-4af849579f48","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:16Z","modified":"2026-02-26T23:20:16Z","name":"Phishing domain: 381884-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/381884-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '381884-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:16Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/381884-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e47190bd-0931-5530-a88e-fd45ffbf0dad","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-08T14:42:06Z","modified":"2026-07-08T14:42:06Z","name":"Phishing domain: 383110.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/383110.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '383110.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-08T14:42:06Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/383110.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--253b1d5f-a526-505b-bfcf-ddc2b9c3854e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-12T23:55:16Z","modified":"2025-10-12T23:55:16Z","name":"Phishing domain: 3832299f-6d0d-4e51-8e2e-af21d07ba068.team-coinbase.help","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/3832299f-6d0d-4e51-8e2e-af21d07ba068.team-coinbase.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3832299f-6d0d-4e51-8e2e-af21d07ba068.team-coinbase.help']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-12T23:55:16Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3832299f-6d0d-4e51-8e2e-af21d07ba068.team-coinbase.help"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e1cc0a6-84ba-5dfb-9f05-0de89286d0d0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-07T15:54:10Z","modified":"2026-07-07T15:54:10Z","name":"Phishing domain: 38536.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/38536.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '38536.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-07T15:54:10Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/38536.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9f940d7-0ed1-52e5-ba4d-52700eba2500","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-02T14:47:03Z","modified":"2025-09-02T14:47:03Z","name":"Phishing domain: 38633.loan","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/38633.loan","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '38633.loan']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-02T14:47:03Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/38633.loan"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca3834c7-b86e-5b89-9f88-0552c5c884b0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-25T09:41:08Z","modified":"2025-12-25T09:41:08Z","name":"Phishing domain: 388242coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/388242coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '388242coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-25T09:41:08Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/388242coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7adc8066-2f82-51fc-a6ef-f638b698b5e3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-17T17:53:17Z","modified":"2026-02-17T17:53:17Z","name":"Phishing domain: 388281-ticket-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/388281-ticket-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '388281-ticket-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-17T17:53:17Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/388281-ticket-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7b60a8e-757b-5994-bb0f-4beb03021cff","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-17T17:53:21Z","modified":"2026-02-17T17:53:21Z","name":"Phishing domain: 388281-ticket-crypto.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Crypto.com. Report & evidence: https://phishdestroy.io/domain/388281-ticket-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '388281-ticket-crypto.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-17T17:53:21Z","labels":["malicious-activity","phishing","brand:crypto.com"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/388281-ticket-crypto.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd6ee47e-3416-5116-81ba-b95ada88a856","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-14T14:12:35Z","modified":"2026-08-14T14:12:35Z","name":"Phishing domain: 388374-kraken.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/388374-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '388374-kraken.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-14T14:12:35Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/388374-kraken.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5489c7c-e189-5baf-a1af-8594fef7f870","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-31T06:56:44Z","modified":"2025-10-31T06:56:44Z","name":"Phishing domain: 389291coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/389291coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '389291coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-31T06:56:44Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/389291coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ff2186f-4946-5a9f-b4c9-c8e3ffb878b9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-19T12:41:24Z","modified":"2025-11-19T12:41:24Z","name":"Phishing domain: 38nxtbzi.union-label.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Telegram. Report & evidence: https://phishdestroy.io/domain/38nxtbzi.union-label.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '38nxtbzi.union-label.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-19T12:41:24Z","labels":["malicious-activity","phishing","brand:telegram"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/38nxtbzi.union-label.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2937553a-86d4-5df3-bad2-5e58f30d39e2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-29T12:11:05Z","modified":"2025-10-29T12:11:05Z","name":"Phishing domain: 39-krakencasino.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Kraken. Report & evidence: https://phishdestroy.io/domain/39-krakencasino.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '39-krakencasino.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-29T12:11:05Z","labels":["malicious-activity","phishing","brand:kraken"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/39-krakencasino.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--266058ea-1ca4-5529-9e8b-8e813249c8b2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-15T03:22:22Z","modified":"2026-03-15T03:22:22Z","name":"Phishing domain: 391.lol","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating discord. Report & evidence: https://phishdestroy.io/domain/391.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '391.lol']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-15T03:22:22Z","labels":["malicious-activity","phishing","brand:discord"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/391.lol"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2d6ce73-2425-59b2-825e-59b353a64e15","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 39159xl.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/39159xl.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '39159xl.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/39159xl.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c1a3395-328e-522c-8081-e75fd3684fa3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 391656.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/391656.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '391656.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/391656.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dffe0596-48df-5630-8d70-02f16a11d51c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-07T11:21:33Z","modified":"2025-11-07T11:21:33Z","name":"Phishing domain: 39192131coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/39192131coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '39192131coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-07T11:21:33Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/39192131coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5879d7e-1c1b-5bc3-b243-4938abf1e246","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 39275743182823.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/39275743182823.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '39275743182823.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/39275743182823.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9d092fa-0fc1-5c0d-a3a3-8550b38a56ab","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-03T14:28:16Z","modified":"2026-08-03T14:28:16Z","name":"Phishing domain: 392847-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/392847-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '392847-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-03T14:28:16Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/392847-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c90019b3-e74c-5f21-a301-11626dc0d049","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-14T15:32:40Z","modified":"2026-03-14T15:32:40Z","name":"Phishing domain: 394287coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/394287coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '394287coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-14T15:32:40Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/394287coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--49d00259-2567-5444-88b0-97357a333dee","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-25T02:13:13Z","modified":"2026-06-25T02:13:13Z","name":"Phishing domain: 395bet1.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/395bet1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '395bet1.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-25T02:13:13Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/395bet1.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--087fe4b7-fc89-5a47-a86a-fa2ec1282708","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-01T05:59:45Z","modified":"2026-07-01T05:59:45Z","name":"Phishing domain: 397casibom.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/397casibom.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '397casibom.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-01T05:59:45Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/397casibom.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--57b1fbaf-b2ca-5282-841b-ad48e0adf722","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-16T17:21:40Z","modified":"2026-03-16T17:21:40Z","name":"Phishing domain: 398276coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/398276coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '398276coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-16T17:21:40Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/398276coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--02d0ee50-166a-56c0-9de3-9ad749d3b22a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-30T11:24:47Z","modified":"2025-10-30T11:24:47Z","name":"Phishing domain: 398498coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/398498coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '398498coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-30T11:24:47Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/398498coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c997a320-1efc-586c-8277-d9a1981300a0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-23T15:51:15Z","modified":"2026-01-23T15:51:15Z","name":"Phishing domain: 39bt42j.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/39bt42j.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '39bt42j.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-23T15:51:15Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/39bt42j.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6639a9e-d475-5e7e-9432-131c710c8f48","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-17T20:45:13Z","modified":"2025-12-17T20:45:13Z","name":"Phishing domain: 39eaa487.startts.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/39eaa487.startts.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '39eaa487.startts.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-17T20:45:13Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/39eaa487.startts.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--051d59ff-b2c3-531a-b8ef-5aa058d7d101","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-30T07:46:39Z","modified":"2025-12-30T07:46:39Z","name":"Phishing domain: 3a44ba27.lvcshgchydcguahha.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/3a44ba27.lvcshgchydcguahha.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3a44ba27.lvcshgchydcguahha.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-30T07:46:39Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3a44ba27.lvcshgchydcguahha.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--464aed3e-8b35-5536-9156-34e1267c2715","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-08T16:56:06Z","modified":"2026-07-08T16:56:06Z","name":"Phishing domain: 3arrowsjp.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3arrowsjp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3arrowsjp.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-08T16:56:06Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3arrowsjp.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6548e45a-7fe3-5ead-bb11-07c8b2542176","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T15:43:35Z","modified":"2026-08-09T15:43:35Z","name":"Phishing domain: 3b0d63.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/3b0d63.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3b0d63.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T15:43:35Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3b0d63.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--db19a714-419a-5b57-b909-f8a92ba07709","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:22Z","modified":"2026-02-26T23:20:22Z","name":"Phishing domain: 3b9fc57f.trehd-0cjdn9cd.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/3b9fc57f.trehd-0cjdn9cd.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3b9fc57f.trehd-0cjdn9cd.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:22Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3b9fc57f.trehd-0cjdn9cd.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4887ae6e-fe2b-52e2-bba3-b7b19419d0c1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-13T06:03:26Z","modified":"2026-03-13T06:03:26Z","name":"Phishing domain: 3blockdag.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating BlockDAG. Report & evidence: https://phishdestroy.io/domain/3blockdag.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3blockdag.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-13T06:03:26Z","labels":["malicious-activity","phishing","brand:blockdag"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3blockdag.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--63c941c0-05f0-5b4c-8fc0-8a246990bbaa","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-23T16:12:31Z","modified":"2025-09-23T16:12:31Z","name":"Phishing domain: 3bxnlej.icu","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating PancakeSwap. Report & evidence: https://phishdestroy.io/domain/3bxnlej.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3bxnlej.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-23T16:12:31Z","labels":["malicious-activity","phishing","brand:pancakeswap"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3bxnlej.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4db48dca-5550-5ba0-b3f4-65c3dc4cc1bd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-07T10:43:50Z","modified":"2026-08-07T10:43:50Z","name":"Phishing domain: 3c33c32c.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating apple. Report & evidence: https://phishdestroy.io/domain/3c33c32c.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3c33c32c.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-07T10:43:50Z","labels":["malicious-activity","phishing","brand:apple"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3c33c32c.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--de900c8e-e71f-5bf4-a06c-434be0c7fcad","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-11T18:38:20Z","modified":"2026-08-11T18:38:20Z","name":"Phishing domain: 3c5d30.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/3c5d30.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3c5d30.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-11T18:38:20Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3c5d30.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--845398f7-2085-5bb7-9d0f-e288d9267970","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T13:44:11Z","modified":"2026-02-13T13:44:11Z","name":"Phishing domain: 3capitalstrading.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3capitalstrading.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3capitalstrading.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T13:44:11Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3capitalstrading.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e3233b5-b0a0-51b3-a806-871bc2d1540e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:16Z","modified":"2026-02-26T23:22:16Z","name":"Phishing domain: 3cb74683-0d37-4c6c-9f33-daf51cf6819a.kryllion.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ethereum. Report & evidence: https://phishdestroy.io/domain/3cb74683-0d37-4c6c-9f33-daf51cf6819a.kryllion.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3cb74683-0d37-4c6c-9f33-daf51cf6819a.kryllion.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:16Z","labels":["malicious-activity","phishing","brand:ethereum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3cb74683-0d37-4c6c-9f33-daf51cf6819a.kryllion.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4740f1fc-b149-5caa-9f74-888965dbe34f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:57Z","modified":"2026-02-26T23:23:57Z","name":"Phishing domain: 3cryptocurrency.top","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3cryptocurrency.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3cryptocurrency.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:57Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3cryptocurrency.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--71b5c520-2599-5582-a990-f4315edfc40b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T07:32:19Z","modified":"2026-08-10T07:32:19Z","name":"Phishing domain: 3cs.fail","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating cs2. Report & evidence: https://phishdestroy.io/domain/3cs.fail","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3cs.fail']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T07:32:19Z","labels":["malicious-activity","phishing","brand:cs2"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3cs.fail"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4411b44a-ee74-5e26-b0ca-8073e3963265","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-25T14:12:38Z","modified":"2026-06-25T14:12:38Z","name":"Phishing domain: 3cud-je09-uln1.accounting-coralridgetowerssouth-com-s-account.workers.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3cud-je09-uln1.accounting-coralridgetowerssouth-com-s-account.workers.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3cud-je09-uln1.accounting-coralridgetowerssouth-com-s-account.workers.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-25T14:12:38Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3cud-je09-uln1.accounting-coralridgetowerssouth-com-s-account.workers.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--149212e4-2fa0-5317-9c71-c80999835d59","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-24T06:59:19Z","modified":"2025-11-24T06:59:19Z","name":"Phishing domain: 3d-secure-payment.codes","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3d-secure-payment.codes","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3d-secure-payment.codes']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-24T06:59:19Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3d-secure-payment.codes"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7be929f-fcf2-548f-b6d1-ba1d26b3d93b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-11T03:07:28Z","modified":"2026-04-11T03:07:28Z","name":"Phishing domain: 3d-vance.entrance-cryptolist.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3d-vance.entrance-cryptolist.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3d-vance.entrance-cryptolist.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-11T03:07:28Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3d-vance.entrance-cryptolist.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--405838c7-697d-5b09-be58-fbf85713402d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:25Z","modified":"2026-02-26T23:20:25Z","name":"Phishing domain: 3d446d67.mewjdjckc-0sbbc83hhzxsh.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/3d446d67.mewjdjckc-0sbbc83hhzxsh.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3d446d67.mewjdjckc-0sbbc83hhzxsh.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:25Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3d446d67.mewjdjckc-0sbbc83hhzxsh.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bd14a14-df1c-57cf-94dd-bffbe894fa34","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-20T17:03:48Z","modified":"2025-12-20T17:03:48Z","name":"Phishing domain: 3db4ea20.leger-dpk.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/3db4ea20.leger-dpk.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3db4ea20.leger-dpk.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-20T17:03:48Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3db4ea20.leger-dpk.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--045fd101-17e0-5c18-9a4e-884ecc6d9bd2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T01:52:36Z","modified":"2026-02-13T01:52:36Z","name":"Phishing domain: 3dcd99tefsfu.icu","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3dcd99tefsfu.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3dcd99tefsfu.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T01:52:36Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3dcd99tefsfu.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aea45901-e93f-5371-bd34-3f8dbb250c6e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-24T15:22:03Z","modified":"2025-12-24T15:22:03Z","name":"Phishing domain: 3dfinance.vip","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating foundation. Report & evidence: https://phishdestroy.io/domain/3dfinance.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3dfinance.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-24T15:22:03Z","labels":["malicious-activity","phishing","brand:foundation"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3dfinance.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3c9cdd3-845e-5023-8b3f-2a17558b63f2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-15T03:05:56Z","modified":"2026-07-15T03:05:56Z","name":"Phishing domain: 3dgame-promo.icu","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3dgame-promo.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3dgame-promo.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-15T03:05:56Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3dgame-promo.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--839057c0-dad6-5d60-a9cb-44d9912fc2c1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-12T16:30:03Z","modified":"2026-03-12T16:30:03Z","name":"Phishing domain: 3dimensionful.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating TikTok. Report & evidence: https://phishdestroy.io/domain/3dimensionful.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3dimensionful.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-12T16:30:03Z","labels":["malicious-activity","phishing","brand:tiktok"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3dimensionful.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c485fd45-0dd0-5265-8d55-8f9fd2afc9e7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-17T14:40:40Z","modified":"2026-07-17T14:40:40Z","name":"Phishing domain: 3dstudiobd.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericemail. Report & evidence: https://phishdestroy.io/domain/3dstudiobd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3dstudiobd.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-17T14:40:40Z","labels":["malicious-activity","phishing","brand:genericemail"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3dstudiobd.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fdc4ba2-8eb2-5299-b65d-5b6d49a83b6b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-04T16:14:25Z","modified":"2026-08-04T16:14:25Z","name":"Phishing domain: 3edt-ker5-lfgt0-i1aau-5wb.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/3edt-ker5-lfgt0-i1aau-5wb.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3edt-ker5-lfgt0-i1aau-5wb.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-04T16:14:25Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3edt-ker5-lfgt0-i1aau-5wb.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe3ee115-ca35-56f0-b5b1-ac99ec85fed1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-08T16:08:09Z","modified":"2025-08-08T16:08:09Z","name":"Phishing domain: 3ex-login.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Apple. Report & evidence: https://phishdestroy.io/domain/3ex-login.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3ex-login.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-08T16:08:09Z","labels":["malicious-activity","phishing","brand:apple"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3ex-login.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a6696e3-c015-5ed0-a768-e9f5138def5b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-06T02:34:43Z","modified":"2026-08-06T02:34:43Z","name":"Phishing domain: 3f-icloud.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating apple. Report & evidence: https://phishdestroy.io/domain/3f-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3f-icloud.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-06T02:34:43Z","labels":["malicious-activity","phishing","brand:apple"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3f-icloud.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ee5c7db-ad81-5309-b315-e3ecd0a08df3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-21T10:39:33Z","modified":"2025-12-21T10:39:33Z","name":"Phishing domain: 3ffb6387.memo-ba1.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/3ffb6387.memo-ba1.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3ffb6387.memo-ba1.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-21T10:39:33Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3ffb6387.memo-ba1.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c200fcbe-2cc3-5d3f-87f0-b184a6a6c805","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T01:39:54Z","modified":"2026-02-13T01:39:54Z","name":"Phishing domain: 3gdmv8npo3j.icu","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3gdmv8npo3j.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3gdmv8npo3j.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T01:39:54Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3gdmv8npo3j.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cad9d7f-2d71-52cd-bb57-9ac58339fae3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-19T12:44:27Z","modified":"2025-11-19T12:44:27Z","name":"Phishing domain: 3gnexus.gitbook.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/3gnexus.gitbook.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3gnexus.gitbook.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-19T12:44:27Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3gnexus.gitbook.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a23bed0-390a-5a6f-a529-09d7b9223a70","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-20T13:22:49Z","modified":"2025-10-20T13:22:49Z","name":"Phishing domain: 3guq.sap2062785.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3guq.sap2062785.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3guq.sap2062785.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-20T13:22:49Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3guq.sap2062785.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6db114cb-c212-5ef2-b22b-a32c2c653fad","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-12T12:39:52Z","modified":"2025-10-12T12:39:52Z","name":"Phishing domain: 3guq.sap3362wcl.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Apple. Report & evidence: https://phishdestroy.io/domain/3guq.sap3362wcl.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3guq.sap3362wcl.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-12T12:39:52Z","labels":["malicious-activity","phishing","brand:apple"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3guq.sap3362wcl.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--789178f5-faa1-5f16-bd40-494356f941bf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-18T04:00:05Z","modified":"2026-05-18T04:00:05Z","name":"Phishing domain: 3hdmedia.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3hdmedia.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3hdmedia.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-18T04:00:05Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3hdmedia.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e58b63c4-d659-594a-99e5-22b56358f2ea","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-09T02:50:57Z","modified":"2026-07-09T02:50:57Z","name":"Phishing domain: 3hiplus.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3hiplus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3hiplus.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-09T02:50:57Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3hiplus.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--03d60a67-e9c3-52e6-afb5-9bbff1b61a32","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T12:13:35Z","modified":"2026-02-13T12:13:35Z","name":"Phishing domain: 3imr.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3imr.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3imr.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T12:13:35Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3imr.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6a3e460-d748-5a00-8883-dfa1ef71e512","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-16T07:18:44Z","modified":"2025-12-16T07:18:44Z","name":"Phishing domain: 3ivision.ai","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3ivision.ai","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3ivision.ai']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-16T07:18:44Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3ivision.ai"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f24357d1-eaa2-5c00-9e49-5ebe28de2155","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:55Z","modified":"2026-02-26T23:20:55Z","name":"Phishing domain: 3jains.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3jains.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3jains.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:55Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3jains.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9387e6b8-7905-5464-a525-6f61e8a32eac","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-28T15:38:10Z","modified":"2026-06-28T15:38:10Z","name":"Phishing domain: 3jane.info","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3jane.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3jane.info']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-28T15:38:10Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3jane.info"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aad5f09d-0510-5f8f-a792-ae3a03ebc34f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T04:21:45Z","modified":"2026-02-13T04:21:45Z","name":"Phishing domain: 3jir.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3jir.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3jir.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T04:21:45Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3jir.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff03f7bd-f42e-5979-9aec-40a49cd2872f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-20T21:14:36Z","modified":"2026-06-20T21:14:36Z","name":"Phishing domain: 3leaf.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3leaf.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3leaf.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-20T21:14:36Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3leaf.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d44e08f6-d733-536e-b5f8-5d047b471623","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:59Z","modified":"2026-02-26T23:20:59Z","name":"Phishing domain: 3linkbones.icu","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3linkbones.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3linkbones.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:59Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3linkbones.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--08ae58f5-c316-5f31-ab8b-47f022fbacb0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-06T18:13:32Z","modified":"2026-07-06T18:13:32Z","name":"Phishing domain: 3lrxwe.top","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3lrxwe.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3lrxwe.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-06T18:13:32Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3lrxwe.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--48611e48-6bfd-52d9-bd02-5776e39e51c2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-19T01:12:43Z","modified":"2025-10-19T01:12:43Z","name":"Phishing domain: 3lse.sap2303u19.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3lse.sap2303u19.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3lse.sap2303u19.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-19T01:12:43Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3lse.sap2303u19.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e95f7b45-937f-512f-b1b3-837d124f5b5f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:27Z","modified":"2026-02-26T23:23:27Z","name":"Phishing domain: 3lzn-casefb255128.vercel.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3lzn-casefb255128.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3lzn-casefb255128.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:27Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3lzn-casefb255128.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--78fe6ec2-070d-5c58-ba5d-aa458e1f044f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T04:23:27Z","modified":"2026-02-13T04:23:27Z","name":"Phishing domain: 3m-ir.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3m-ir.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3m-ir.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T04:23:27Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3m-ir.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--72913bae-a4aa-5704-a6a3-2013fbc772c4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T04:18:18Z","modified":"2026-02-13T04:18:18Z","name":"Phishing domain: 3m420.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3m420.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3m420.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T04:18:18Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3m420.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a785075a-7751-56f0-9d3e-6b62c2df4d73","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-16T08:01:45Z","modified":"2025-12-16T08:01:45Z","name":"Phishing domain: 3mir.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3mir.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3mir.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-16T08:01:45Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3mir.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f021923-724f-5acb-abc5-4b6aaec4d9f3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T04:22:53Z","modified":"2026-02-13T04:22:53Z","name":"Phishing domain: 3mirr.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3mirr.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3mirr.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T04:22:53Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3mirr.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6841d76d-7278-503d-b72d-17e246be6bbd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T04:23:49Z","modified":"2026-02-13T04:23:49Z","name":"Phishing domain: 3mit.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3mit.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3mit.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T04:23:49Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3mit.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--563110e7-5c57-51e4-b039-082bf1402bea","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-23T02:10:30Z","modified":"2026-02-23T02:10:30Z","name":"Phishing domain: 3mlr.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3mlr.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3mlr.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-23T02:10:30Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3mlr.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee1083fd-b907-5c16-9ee4-7e5e13cdc056","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-28T18:07:28Z","modified":"2026-07-28T18:07:28Z","name":"Phishing domain: 3mx-685z05-wr0-35n-y85n0.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/3mx-685z05-wr0-35n-y85n0.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3mx-685z05-wr0-35n-y85n0.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-28T18:07:28Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3mx-685z05-wr0-35n-y85n0.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c7918c1-77f6-5f6d-aae8-8aa96ee241dd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-07T01:10:27Z","modified":"2026-06-07T01:10:27Z","name":"Phishing domain: 3nci6wnf4vxy3mucgjmxn2ti77tp2khwbn54jhr7l3cjxab7gara.arweave.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3nci6wnf4vxy3mucgjmxn2ti77tp2khwbn54jhr7l3cjxab7gara.arweave.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3nci6wnf4vxy3mucgjmxn2ti77tp2khwbn54jhr7l3cjxab7gara.arweave.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-07T01:10:27Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3nci6wnf4vxy3mucgjmxn2ti77tp2khwbn54jhr7l3cjxab7gara.arweave.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fdebbd7-0c44-5297-9e2c-ef5fdeda512a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-26T13:22:21Z","modified":"2026-01-26T13:22:21Z","name":"Phishing domain: 3pgcwalet.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating ethereum. Report & evidence: https://phishdestroy.io/domain/3pgcwalet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3pgcwalet.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-26T13:22:21Z","labels":["malicious-activity","phishing","brand:ethereum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3pgcwalet.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e921147-b0e0-5fbf-bd78-ca5698aec235","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-16T09:40:34Z","modified":"2026-06-16T09:40:34Z","name":"Phishing domain: 3pj66.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3pj66.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3pj66.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-16T09:40:34Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3pj66.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e86262dd-d6cc-559c-b314-5db678f38da8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-15T23:06:12Z","modified":"2026-05-15T23:06:12Z","name":"Phishing domain: 3riversmyb.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3riversmyb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3riversmyb.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-15T23:06:12Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3riversmyb.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aceec3ba-7734-5b2c-8599-4f3ecbe4185e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-01T13:31:10Z","modified":"2026-03-01T13:31:10Z","name":"Phishing domain: 3rv97t9n.cn","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3rv97t9n.cn","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3rv97t9n.cn']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-01T13:31:10Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3rv97t9n.cn"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1954b839-a2df-5bd6-be60-2188b7b3fb3b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-02T20:42:55Z","modified":"2026-07-02T20:42:55Z","name":"Phishing domain: 3srnu7iyjvvgr6ccr5pnejoq2tskqozn6ovo6ix5vfccrlkjtiea.turbo-gateway.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3srnu7iyjvvgr6ccr5pnejoq2tskqozn6ovo6ix5vfccrlkjtiea.turbo-gateway.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3srnu7iyjvvgr6ccr5pnejoq2tskqozn6ovo6ix5vfccrlkjtiea.turbo-gateway.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-02T20:42:55Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3srnu7iyjvvgr6ccr5pnejoq2tskqozn6ovo6ix5vfccrlkjtiea.turbo-gateway.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--10d1abfe-f7f7-5430-a052-a7ef6de67943","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-17T02:19:42Z","modified":"2026-06-17T02:19:42Z","name":"Phishing domain: 3tbetoi.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/3tbetoi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3tbetoi.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-17T02:19:42Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3tbetoi.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--47734cfb-9225-5deb-930f-aa29a7756de2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-02T20:38:03Z","modified":"2026-07-02T20:38:03Z","name":"Phishing domain: 3tboh6b5kic65gouekzlw6q4a6mdk5i5577kndfr7ffioni2akxa.turbo-gateway.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3tboh6b5kic65gouekzlw6q4a6mdk5i5577kndfr7ffioni2akxa.turbo-gateway.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3tboh6b5kic65gouekzlw6q4a6mdk5i5577kndfr7ffioni2akxa.turbo-gateway.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-02T20:38:03Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3tboh6b5kic65gouekzlw6q4a6mdk5i5577kndfr7ffioni2akxa.turbo-gateway.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fef1f8c5-c8f6-5f60-aa96-fb17f0414a83","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-21T03:50:28Z","modified":"2026-03-21T03:50:28Z","name":"Phishing domain: 3thamd.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3thamd.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3thamd.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-21T03:50:28Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3thamd.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--739c1820-5662-543e-9f19-c8a54b45b467","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-26T18:52:21Z","modified":"2026-03-26T18:52:21Z","name":"Phishing domain: 3ton-8l7.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Lido. Report & evidence: https://phishdestroy.io/domain/3ton-8l7.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3ton-8l7.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-26T18:52:21Z","labels":["malicious-activity","phishing","brand:lido"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3ton-8l7.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--695e5dba-dd81-5b97-8e1e-fa411dda838b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-09T02:27:36Z","modified":"2026-06-09T02:27:36Z","name":"Phishing domain: 3ton-airdrop.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3ton-airdrop.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3ton-airdrop.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-09T02:27:36Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3ton-airdrop.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ec5eff2-f968-5a13-ab11-b30740eb8b47","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-07T21:43:35Z","modified":"2026-07-07T21:43:35Z","name":"Phishing domain: 3upgrader.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3upgrader.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3upgrader.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-07T21:43:35Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3upgrader.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9ffbd4a-4f68-598a-bcc5-ece8b743fd5d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-09T01:32:31Z","modified":"2026-04-09T01:32:31Z","name":"Phishing domain: 3verify.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Microsoft. Report & evidence: https://phishdestroy.io/domain/3verify.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3verify.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-09T01:32:31Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3verify.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c5fd90f-5610-552a-80cf-a671da0c79b7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-19T02:44:28Z","modified":"2026-06-19T02:44:28Z","name":"Phishing domain: 3vg.de","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/3vg.de","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3vg.de']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-19T02:44:28Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3vg.de"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--61585a9f-593a-5b35-9bae-0143fb05e569","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-07T01:10:09Z","modified":"2026-06-07T01:10:09Z","name":"Phishing domain: 3vhk5lfjjm3iocoidll45h3itnzqsifcyk2ykhpseuilnjpitfia.arweave.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3vhk5lfjjm3iocoidll45h3itnzqsifcyk2ykhpseuilnjpitfia.arweave.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3vhk5lfjjm3iocoidll45h3itnzqsifcyk2ykhpseuilnjpitfia.arweave.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-07T01:10:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3vhk5lfjjm3iocoidll45h3itnzqsifcyk2ykhpseuilnjpitfia.arweave.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--62848f06-46fe-596c-b978-a29d886d9160","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-23T21:50:41Z","modified":"2026-04-23T21:50:41Z","name":"Phishing domain: 3wcsgo.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating [\"cs2\"]. Report & evidence: https://phishdestroy.io/domain/3wcsgo.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3wcsgo.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-23T21:50:41Z","labels":["malicious-activity","phishing","brand:[\"cs2\"]"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3wcsgo.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b00cc81-ef5d-5767-b9ee-e9d48592052b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T11:55:49Z","modified":"2026-08-09T11:55:49Z","name":"Phishing domain: 3x34x43xrx.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating apple. Report & evidence: https://phishdestroy.io/domain/3x34x43xrx.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3x34x43xrx.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T11:55:49Z","labels":["malicious-activity","phishing","brand:apple"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3x34x43xrx.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--830beffc-5e97-5932-8b99-3d74f2ca892a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-23T13:02:07Z","modified":"2025-09-23T13:02:07Z","name":"Phishing domain: 3xalphaztp.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/3xalphaztp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3xalphaztp.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-23T13:02:07Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3xalphaztp.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ac2caab-4cb4-5fbb-933e-d039dfecfc8e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-20T14:41:44Z","modified":"2026-04-20T14:41:44Z","name":"Phishing domain: 3xcas.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/3xcas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3xcas.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-20T14:41:44Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3xcas.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5c18c00-4aec-5b05-b1f3-ef80b81c9c70","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-02-21T13:29:55Z","modified":"2025-02-21T13:29:55Z","name":"Phishing domain: 3xplay.top","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3xplay.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3xplay.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-02-21T13:29:55Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3xplay.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8211281d-a473-5113-ad96-dedeb981da43","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:45:25Z","modified":"2026-07-27T04:45:25Z","name":"Phishing domain: 3xtrade.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3xtrade.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3xtrade.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:45:25Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3xtrade.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--49e12d51-1a4a-5ce0-ad36-311975a4a114","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-11T14:41:40Z","modified":"2025-10-11T14:41:40Z","name":"Phishing domain: 3xuv.tap37797bl.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3xuv.tap37797bl.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3xuv.tap37797bl.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-11T14:41:40Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3xuv.tap37797bl.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f15cc6e8-935f-5bec-8653-9982891ec715","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-03T15:28:05Z","modified":"2026-03-03T15:28:05Z","name":"Phishing domain: 3yusq7ngwdm363cj87v96-1drvsharespoint.bmisyysstems.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/3yusq7ngwdm363cj87v96-1drvsharespoint.bmisyysstems.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '3yusq7ngwdm363cj87v96-1drvsharespoint.bmisyysstems.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-03T15:28:05Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/3yusq7ngwdm363cj87v96-1drvsharespoint.bmisyysstems.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c42a86fa-2a5d-5ccc-8101-cc033eea0450","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-18T20:39:03Z","modified":"2026-03-18T20:39:03Z","name":"Phishing domain: 4-25webullish.lat","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/4-25webullish.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4-25webullish.lat']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-18T20:39:03Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4-25webullish.lat"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d683147b-485d-5205-b9a6-24e7f04764fe","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-27T14:23:34Z","modified":"2026-01-27T14:23:34Z","name":"Phishing domain: 4-asterdex.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/4-asterdex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4-asterdex.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-27T14:23:34Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4-asterdex.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e32508b-4e90-5191-a8a4-7df131245b45","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-08T01:29:44Z","modified":"2026-08-08T01:29:44Z","name":"Phishing domain: 4-google.com.cn","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating gemini. Report & evidence: https://phishdestroy.io/domain/4-google.com.cn","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4-google.com.cn']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-08T01:29:44Z","labels":["malicious-activity","phishing","brand:gemini"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4-google.com.cn"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b628109-6693-5d68-b5c7-10e2ba11101f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T14:33:13Z","modified":"2026-02-13T14:33:13Z","name":"Phishing domain: 4-mir.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/4-mir.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4-mir.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T14:33:13Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4-mir.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbc514d4-0d50-5d83-b9e6-c540eb34cf56","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-17T14:35:38Z","modified":"2026-07-17T14:35:38Z","name":"Phishing domain: 4-y.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating spectrum. Report & evidence: https://phishdestroy.io/domain/4-y.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4-y.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-17T14:35:38Z","labels":["malicious-activity","phishing","brand:spectrum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4-y.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddb75032-9afd-5929-82a0-eb74e1fb2e1a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-16T08:06:31Z","modified":"2025-12-16T08:06:31Z","name":"Phishing domain: 4.omgpwa1.pw","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/4.omgpwa1.pw","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4.omgpwa1.pw']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-16T08:06:31Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4.omgpwa1.pw"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--81d4d157-d905-551b-b717-c5ce912dab62","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-12T02:32:57Z","modified":"2026-03-12T02:32:57Z","name":"Phishing domain: 4.sdk.tyzb8.pro","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/4.sdk.tyzb8.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4.sdk.tyzb8.pro']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-12T02:32:57Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4.sdk.tyzb8.pro"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6876252-b88c-5bd7-9e1f-a5423ce7ceed","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-16T12:26:44Z","modified":"2025-11-16T12:26:44Z","name":"Phishing domain: 4000.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/4000.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4000.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-16T12:26:44Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4000.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d3169a6-a691-5d5c-9b46-e96fa6303147","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-12T03:20:27Z","modified":"2026-08-12T03:20:27Z","name":"Phishing domain: 400cf3.arcadejafet.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/400cf3.arcadejafet.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '400cf3.arcadejafet.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-12T03:20:27Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/400cf3.arcadejafet.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8993fb04-133b-54ff-8823-14fd703c9aa8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-01T13:29:59Z","modified":"2026-03-01T13:29:59Z","name":"Phishing domain: 401564coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/401564coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '401564coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-01T13:29:59Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/401564coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ac93774-8ba7-55ab-95b5-d14124731c06","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:12Z","modified":"2026-02-26T23:21:12Z","name":"Phishing domain: 401k.raydium-drop.live","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating raydium. Report & evidence: https://phishdestroy.io/domain/401k.raydium-drop.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '401k.raydium-drop.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:12Z","labels":["malicious-activity","phishing","brand:raydium"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/401k.raydium-drop.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcc26322-d601-5cfc-8611-50c95505759a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:26Z","modified":"2026-02-26T23:22:26Z","name":"Phishing domain: 401krevshare.w3claim.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/401krevshare.w3claim.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '401krevshare.w3claim.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:26Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/401krevshare.w3claim.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4485498d-c53f-560d-a0e0-dbc681b3f00d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-17T14:32:26Z","modified":"2026-07-17T14:32:26Z","name":"Phishing domain: 402d8b54-a79e-4025-8d53-334b3607fbd1.clouding.host","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating santander. Report & evidence: https://phishdestroy.io/domain/402d8b54-a79e-4025-8d53-334b3607fbd1.clouding.host","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '402d8b54-a79e-4025-8d53-334b3607fbd1.clouding.host']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-17T14:32:26Z","labels":["malicious-activity","phishing","brand:santander"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/402d8b54-a79e-4025-8d53-334b3607fbd1.clouding.host"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed5343aa-8484-5076-8f0c-d16b2e674267","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:29Z","modified":"2026-02-26T23:19:29Z","name":"Phishing domain: 404-ntfound-psgsss-77udjsjsxx.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/404-ntfound-psgsss-77udjsjsxx.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '404-ntfound-psgsss-77udjsjsxx.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/404-ntfound-psgsss-77udjsjsxx.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d110a405-39bb-5820-8a1d-18f7167f91d3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:49Z","modified":"2026-02-26T23:21:49Z","name":"Phishing domain: 40413.locker","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/40413.locker","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '40413.locker']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:49Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/40413.locker"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--822ea829-5fa8-5562-a688-38717a7b0c62","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 40667amyl.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/40667amyl.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '40667amyl.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/40667amyl.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--be0e655c-3b9e-5fbb-837e-e2b225cee3d1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 40667kk.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/40667kk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '40667kk.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/40667kk.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7caf4c7-a9ed-5b54-9274-444b69fa88ec","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 40667qq.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/40667qq.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '40667qq.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/40667qq.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7dd5e990-7f91-529b-806e-370099d394a5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 40667tt.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/40667tt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '40667tt.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/40667tt.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ae48f0e-3b69-578a-ad85-b3ca48bd29f1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 40667vv.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/40667vv.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '40667vv.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/40667vv.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb130828-b08e-58dd-9bee-e36ca0d82139","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 40667ww.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/40667ww.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '40667ww.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/40667ww.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffac5d50-50da-5a95-8e43-a9b66b009f0c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 40667xx.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/40667xx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '40667xx.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/40667xx.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0a8579e-1d76-59f6-949a-251829cc7bbb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 40668uu.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/40668uu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '40668uu.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/40668uu.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--139e3bf4-ea7d-5db4-b27a-25629d7f6f0c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 40668zxd.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/40668zxd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '40668zxd.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/40668zxd.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--af347eb4-fcd6-54c0-88a4-742bb9266684","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:21Z","modified":"2026-02-26T23:21:21Z","name":"Phishing domain: 406coin.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/406coin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '406coin.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:21Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/406coin.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--247ad1fd-1496-5510-b7ef-95f11e2eb853","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-02T16:39:02Z","modified":"2026-03-02T16:39:02Z","name":"Phishing domain: 409741coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/409741coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '409741coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-02T16:39:02Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/409741coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--14a0e53a-8dce-5439-a3bf-86583ea6e7bd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-07-21T05:11:51Z","modified":"2025-07-21T05:11:51Z","name":"Phishing domain: 40eth.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating lido. Report & evidence: https://phishdestroy.io/domain/40eth.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '40eth.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-07-21T05:11:51Z","labels":["malicious-activity","phishing","brand:lido"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/40eth.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6fb943d-2f6a-50b1-8a14-ebbd9b4c7258","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-28T14:08:54Z","modified":"2025-11-28T14:08:54Z","name":"Phishing domain: 40eth.eu","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/40eth.eu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '40eth.eu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-28T14:08:54Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/40eth.eu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d66acc9-cae8-5a6e-a0f9-b44d260650dd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-17T21:57:19Z","modified":"2025-11-17T21:57:19Z","name":"Phishing domain: 40eth.vip","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/40eth.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '40eth.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-17T21:57:19Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/40eth.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--82d57717-c81b-5167-ab6f-6d52a3b6a76e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T06:48:24Z","modified":"2026-06-15T06:48:24Z","name":"Phishing domain: 40power-hotslot.cfd","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/40power-hotslot.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '40power-hotslot.cfd']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T06:48:24Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/40power-hotslot.cfd"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--53ee5e02-6143-57ae-871a-155dfa44f99a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-29T12:10:49Z","modified":"2025-10-29T12:10:49Z","name":"Phishing domain: 41-krakencasino.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Kraken. Report & evidence: https://phishdestroy.io/domain/41-krakencasino.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '41-krakencasino.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-29T12:10:49Z","labels":["malicious-activity","phishing","brand:kraken"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/41-krakencasino.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca0d06eb-638d-5ef8-8bb0-27d312f54bdd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 41118126.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/41118126.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '41118126.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/41118126.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac8d8d9d-2bb1-593e-a966-a1b0b9f42efc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 4112535---6165.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/4112535---6165.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4112535---6165.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4112535---6165.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--572c7fe3-40ec-5552-a3ff-4ac71bd4303d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-18T02:37:25Z","modified":"2025-12-18T02:37:25Z","name":"Phishing domain: 411852coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/411852coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '411852coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-18T02:37:25Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/411852coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--585c64d3-8e8e-5778-afc2-d29cb0cab4c2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 41660bb.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/41660bb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '41660bb.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/41660bb.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c5c4535-7b2b-5616-81cb-fd1631786c9e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 41660kk.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/41660kk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '41660kk.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/41660kk.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--01b8f538-f7cd-5b50-8778-1e878aef125e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 41660ll.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/41660ll.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '41660ll.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/41660ll.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7eaf0152-ab0d-5a6c-ad90-442c9b10eb44","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:42:03Z","modified":"2026-07-27T04:42:03Z","name":"Phishing domain: 41663tt.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/41663tt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '41663tt.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:42:03Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/41663tt.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e90fa641-d366-513b-941a-260dd71a4044","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 41663vv.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/41663vv.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '41663vv.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/41663vv.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--27a26d02-dc5d-53f6-bd0a-1463ad730983","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 41665vip.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/41665vip.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '41665vip.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/41665vip.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd5187a2-9bda-570e-b106-4241f443ed3b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:24Z","modified":"2026-02-26T23:20:24Z","name":"Phishing domain: 4184d363.jascha.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/4184d363.jascha.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4184d363.jascha.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:24Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4184d363.jascha.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--63c87445-f615-5235-af75-e21498fe7dda","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:17Z","modified":"2026-07-27T06:02:17Z","name":"Phishing domain: 4196.win","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/4196.win","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4196.win']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4196.win"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd3172fc-cadc-566d-8848-b544c2d27b51","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-08T15:03:14Z","modified":"2026-03-08T15:03:14Z","name":"Phishing domain: 420dv.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/420dv.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '420dv.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-08T15:03:14Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/420dv.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--842de0dc-25f2-51b2-953c-85ce730b99e7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T07:02:12Z","modified":"2026-07-27T07:02:12Z","name":"Phishing domain: 42224.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/42224.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '42224.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T07:02:12Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/42224.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--75f93571-2e25-526c-80d0-020d1bd3bc5b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:17Z","modified":"2026-07-27T06:02:17Z","name":"Phishing domain: 42398.tw","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/42398.tw","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '42398.tw']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/42398.tw"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4a928f9-8192-5723-87f2-5ce86ebec6e2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T05:26:41Z","modified":"2026-02-13T05:26:41Z","name":"Phishing domain: 4253343997.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/4253343997.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4253343997.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T05:26:41Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4253343997.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--66292313-cb30-566b-a418-8d215aa58f13","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-21T23:53:28Z","modified":"2025-12-21T23:53:28Z","name":"Phishing domain: 425532coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/425532coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '425532coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-21T23:53:28Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/425532coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d65a4e73-d363-5242-b69a-eede0a4031bf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-11T18:24:26Z","modified":"2026-08-11T18:24:26Z","name":"Phishing domain: 4255e4.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/4255e4.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4255e4.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-11T18:24:26Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4255e4.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--814f1094-a030-5f1d-89d5-ca6bdc844818","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 4293486---6165.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/4293486---6165.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4293486---6165.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4293486---6165.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d711ef71-4768-5f12-bc7e-366077c8ee35","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 42961652.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/42961652.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '42961652.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/42961652.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--19c86f13-5639-509a-ac12-a07cdb9f8caa","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-22T19:52:46Z","modified":"2026-07-22T19:52:46Z","name":"Phishing domain: 42g648.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/42g648.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '42g648.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-22T19:52:46Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/42g648.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--336fa3ec-5a84-5eea-8067-e4c5f853f618","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:17Z","modified":"2026-07-27T06:02:17Z","name":"Phishing domain: 43066.vip","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/43066.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '43066.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/43066.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a24fbaa-fd04-520b-8013-6ce703d88303","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:17Z","modified":"2026-07-27T06:02:17Z","name":"Phishing domain: 43092.tw","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/43092.tw","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '43092.tw']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/43092.tw"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a51ff1f-be65-559e-8840-ba20de9c4a91","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T13:49:01Z","modified":"2026-02-13T13:49:01Z","name":"Phishing domain: 431337binance.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Binance. Report & evidence: https://phishdestroy.io/domain/431337binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '431337binance.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T13:49:01Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/431337binance.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8cf9f06-3640-51c5-a4e2-5846fccbd6c0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-11T18:27:27Z","modified":"2026-08-11T18:27:27Z","name":"Phishing domain: 431b3d.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/431b3d.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '431b3d.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-11T18:27:27Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/431b3d.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eaa9fb5f-fb88-51f7-88b6-adfd2cf53e2d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 43339126.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/43339126.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '43339126.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/43339126.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--430069d2-e352-5d7e-ade0-67fa446458f3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-15T11:20:10Z","modified":"2025-11-15T11:20:10Z","name":"Phishing domain: 4337196coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/4337196coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4337196coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-15T11:20:10Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4337196coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--476dcb17-5ef9-5e57-84fc-cbadda538d36","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-06T12:57:41Z","modified":"2026-03-06T12:57:41Z","name":"Phishing domain: 4342-crypto.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Crypto.com. Report & evidence: https://phishdestroy.io/domain/4342-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4342-crypto.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-06T12:57:41Z","labels":["malicious-activity","phishing","brand:crypto.com"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4342-crypto.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--49c6991e-c71c-544d-9e2a-55e8991d9357","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:17Z","modified":"2026-07-27T06:02:17Z","name":"Phishing domain: 4349.win","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/4349.win","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4349.win']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4349.win"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--264c8a43-a9a6-5628-947b-7b77b83d4ba3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-31T17:47:59Z","modified":"2026-01-31T17:47:59Z","name":"Phishing domain: 4359238-trezor.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Trezor. Report & evidence: https://phishdestroy.io/domain/4359238-trezor.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4359238-trezor.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-31T17:47:59Z","labels":["malicious-activity","phishing","brand:trezor"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4359238-trezor.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f87e72d9-2bbc-5efe-993c-46d53a799613","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 436014798159.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/436014798159.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '436014798159.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/436014798159.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea69ca59-1f16-5bdf-ac0a-66600a472ea8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-12T11:16:05Z","modified":"2026-06-12T11:16:05Z","name":"Phishing domain: 437snji2jhnulguiwmbhnx6xjnwoivdsnwas5fz32yemuilifpga.turbo-gateway.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/437snji2jhnulguiwmbhnx6xjnwoivdsnwas5fz32yemuilifpga.turbo-gateway.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '437snji2jhnulguiwmbhnx6xjnwoivdsnwas5fz32yemuilifpga.turbo-gateway.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-12T11:16:05Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/437snji2jhnulguiwmbhnx6xjnwoivdsnwas5fz32yemuilifpga.turbo-gateway.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a82e863-0d1a-5aff-828d-a75accc421cc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-05T18:40:10Z","modified":"2026-08-05T18:40:10Z","name":"Phishing domain: 43897.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/43897.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '43897.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-05T18:40:10Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/43897.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa9d2e03-872e-5998-9211-90ec6a404a8a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-19T15:06:34Z","modified":"2026-02-19T15:06:34Z","name":"Phishing domain: 439812-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/439812-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '439812-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-19T15:06:34Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/439812-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1be920e1-7ff7-5d76-968b-b09dad5acb8a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-21T15:17:19Z","modified":"2026-02-21T15:17:19Z","name":"Phishing domain: 43d62c1c-fd02-4156-a94b-92a17ed205b0-00-1rgmk1gjsd1n2.janeway.replit.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Banco de Venezuela. Report & evidence: https://phishdestroy.io/domain/43d62c1c-fd02-4156-a94b-92a17ed205b0-00-1rgmk1gjsd1n2.janeway.replit.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '43d62c1c-fd02-4156-a94b-92a17ed205b0-00-1rgmk1gjsd1n2.janeway.replit.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-21T15:17:19Z","labels":["malicious-activity","phishing","brand:banco de venezuela"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/43d62c1c-fd02-4156-a94b-92a17ed205b0-00-1rgmk1gjsd1n2.janeway.replit.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a37b4d2-f2fc-5643-9988-432edbfa740a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-02T08:24:27Z","modified":"2026-08-02T08:24:27Z","name":"Phishing domain: 43fffeeww2.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/43fffeeww2.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '43fffeeww2.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-02T08:24:27Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/43fffeeww2.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--928bb403-c435-5518-b52b-70905475c4d3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:24Z","modified":"2026-02-26T23:20:24Z","name":"Phishing domain: 43iyfsbd.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/43iyfsbd.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '43iyfsbd.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:24Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/43iyfsbd.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7481e57d-d79f-5fa5-ae64-e1c131033631","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-16T23:50:50Z","modified":"2025-10-16T23:50:50Z","name":"Phishing domain: 442648coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/442648coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '442648coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-16T23:50:50Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/442648coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--98691131-3c4f-5075-8b56-6507e55c11ca","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-30T17:17:51Z","modified":"2026-05-30T17:17:51Z","name":"Phishing domain: 4432989893843755838403843984399997777939y3939j.jvjkogjv.workers.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Uniswap. Report & evidence: https://phishdestroy.io/domain/4432989893843755838403843984399997777939y3939j.jvjkogjv.workers.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4432989893843755838403843984399997777939y3939j.jvjkogjv.workers.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-30T17:17:51Z","labels":["malicious-activity","phishing","brand:uniswap"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4432989893843755838403843984399997777939y3939j.jvjkogjv.workers.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3031f3cc-e2ad-5049-ae88-270e010d84d5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T05:28:22Z","modified":"2026-07-27T05:28:22Z","name":"Phishing domain: 443968159app.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/443968159app.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '443968159app.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T05:28:22Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/443968159app.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c5f3bed-b6a1-5083-b3ae-f59ec6efe95f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-04T01:17:33Z","modified":"2026-03-04T01:17:33Z","name":"Phishing domain: 44445-a.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/44445-a.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '44445-a.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-04T01:17:33Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/44445-a.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--603f4b6c-cd32-55da-9ce2-d09b026100f0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-04T14:16:37Z","modified":"2026-03-04T14:16:37Z","name":"Phishing domain: 44445dr3.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/44445dr3.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '44445dr3.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-04T14:16:37Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/44445dr3.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--de63d364-798f-5a94-ab01-b70403cb50fb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-21T14:23:27Z","modified":"2026-01-21T14:23:27Z","name":"Phishing domain: 445-test-444.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/445-test-444.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '445-test-444.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-21T14:23:27Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/445-test-444.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d813f36-11a3-54db-bb7e-c64e0e34676c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 4452.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/4452.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4452.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4452.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--113e17d1-1f4d-5470-b13d-2021edcf755e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T17:37:06Z","modified":"2026-02-26T17:37:06Z","name":"Phishing domain: 445544.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/445544.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '445544.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T17:37:06Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/445544.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--748cbc03-147c-5cfb-808b-4fdf89784a10","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T15:58:23Z","modified":"2026-08-09T15:58:23Z","name":"Phishing domain: 4458e7.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/4458e7.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4458e7.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T15:58:23Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4458e7.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0735720-ab93-52c0-b2bf-381fa7f76ec1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 44761652.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/44761652.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '44761652.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/44761652.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5bf6b9a-9215-5b83-bb17-25d9180834f9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:35Z","modified":"2026-02-26T23:23:35Z","name":"Phishing domain: 448620.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/448620.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '448620.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:35Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/448620.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--80d18424-48fd-540c-8d6b-66392d1c61b7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-25T12:30:35Z","modified":"2025-12-25T12:30:35Z","name":"Phishing domain: 44daf2aa.purree.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/44daf2aa.purree.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '44daf2aa.purree.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-25T12:30:35Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/44daf2aa.purree.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7f37b4c-ffce-5b97-bce2-e7a98e4730dd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:15Z","modified":"2026-02-26T23:20:15Z","name":"Phishing domain: 45-146-234-180.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/45-146-234-180.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '45-146-234-180.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:15Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/45-146-234-180.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--014c1c48-9c17-5b25-b161-51402f9662dc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-18T15:30:05Z","modified":"2026-02-18T15:30:05Z","name":"Phishing domain: 45-32-94-105.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/45-32-94-105.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '45-32-94-105.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-18T15:30:05Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/45-32-94-105.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d76b6b24-d1b5-54dc-b9b7-7743e14e5f14","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-16T14:19:09Z","modified":"2026-07-16T14:19:09Z","name":"Phishing domain: 45-33-15-251.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating dpd. Report & evidence: https://phishdestroy.io/domain/45-33-15-251.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '45-33-15-251.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-16T14:19:09Z","labels":["malicious-activity","phishing","brand:dpd"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/45-33-15-251.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0deedf2a-b23c-5549-9c78-8b5e64b1dbfd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-21T13:46:49Z","modified":"2025-11-21T13:46:49Z","name":"Phishing domain: 45-56-104-214.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/45-56-104-214.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '45-56-104-214.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-21T13:46:49Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/45-56-104-214.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e923c9f8-9433-5ca4-9f1e-2d296eb95f1b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-25T12:33:48Z","modified":"2025-11-25T12:33:48Z","name":"Phishing domain: 45-61-148-254.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/45-61-148-254.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '45-61-148-254.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-25T12:33:48Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/45-61-148-254.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bbe2b49-bab4-5aa3-8ca2-7ae47abf4697","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:34Z","modified":"2026-02-26T23:22:34Z","name":"Phishing domain: 45-79-149-117.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/45-79-149-117.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '45-79-149-117.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:34Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/45-79-149-117.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b70ee8f-9049-54d2-8af2-4214859eb242","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:20Z","modified":"2026-02-26T23:24:20Z","name":"Phishing domain: 45231-cb.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Apple. Report & evidence: https://phishdestroy.io/domain/45231-cb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '45231-cb.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:20Z","labels":["malicious-activity","phishing","brand:apple"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/45231-cb.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--33df7f53-cfae-50ca-80d5-85c9734b981c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-03T02:22:10Z","modified":"2026-02-03T02:22:10Z","name":"Phishing domain: 453241-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/453241-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '453241-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-03T02:22:10Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/453241-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd6c2268-cb2c-5b0f-a296-ebe155b02582","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-13T20:37:48Z","modified":"2026-08-13T20:37:48Z","name":"Phishing domain: 4533ff.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/4533ff.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4533ff.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-13T20:37:48Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4533ff.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--136b8209-5403-5245-8219-02ba7d2176db","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-09T10:32:12Z","modified":"2025-12-09T10:32:12Z","name":"Phishing domain: 453441-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/453441-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '453441-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-09T10:32:12Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/453441-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--23554211-ce81-5ce0-9331-8bc2357e7cd5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 4554291---6165.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/4554291---6165.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4554291---6165.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4554291---6165.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0058346e-1c04-5e64-97d4-94b77f0b1ba3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-24T22:53:16Z","modified":"2025-09-24T22:53:16Z","name":"Phishing domain: 456456156156pald-wallet.co.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/456456156156pald-wallet.co.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '456456156156pald-wallet.co.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-24T22:53:16Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/456456156156pald-wallet.co.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--773d854c-001d-5c41-99ec-13625d10defc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-12T22:31:38Z","modified":"2026-02-12T22:31:38Z","name":"Phishing domain: 456734coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/456734coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '456734coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-12T22:31:38Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/456734coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--50088c60-49a8-5422-af14-4a6cbb751f1d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-27T08:21:52Z","modified":"2026-02-27T08:21:52Z","name":"Phishing domain: 456enjoybet.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/456enjoybet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '456enjoybet.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-27T08:21:52Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/456enjoybet.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5af720a4-1d42-5e7d-b342-497dc8489ac0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-20T19:03:32Z","modified":"2026-02-20T19:03:32Z","name":"Phishing domain: 456w4q-sdeqqs.lol","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/456w4q-sdeqqs.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '456w4q-sdeqqs.lol']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-20T19:03:32Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/456w4q-sdeqqs.lol"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2343a1ba-0cf7-521b-9e94-98154e94bb8d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-31T16:39:55Z","modified":"2026-01-31T16:39:55Z","name":"Phishing domain: 458web.whatsapwacz.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating whatsapp. Report & evidence: https://phishdestroy.io/domain/458web.whatsapwacz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '458web.whatsapwacz.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-31T16:39:55Z","labels":["malicious-activity","phishing","brand:whatsapp"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/458web.whatsapwacz.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0557564b-26ce-56a5-a7bf-ee19808ac33b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-05T06:20:39Z","modified":"2026-07-05T06:20:39Z","name":"Phishing domain: 45dayreattraction.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/45dayreattraction.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '45dayreattraction.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-05T06:20:39Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/45dayreattraction.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--462f4417-71f1-5ffd-ae31-e89653322237","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-01T13:06:37Z","modified":"2025-11-01T13:06:37Z","name":"Phishing domain: 4601f388-c532-490e-8236-ee121ac2127f-00-2wmrach7robjm.pike.replit.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/4601f388-c532-490e-8236-ee121ac2127f-00-2wmrach7robjm.pike.replit.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4601f388-c532-490e-8236-ee121ac2127f-00-2wmrach7robjm.pike.replit.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-01T13:06:37Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4601f388-c532-490e-8236-ee121ac2127f-00-2wmrach7robjm.pike.replit.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5979789-b8fc-58ad-990b-5f4faa66e311","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 46061652.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/46061652.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '46061652.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/46061652.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--85f2b97d-7a58-5940-85fa-c16827263220","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-22T18:14:58Z","modified":"2026-02-22T18:14:58Z","name":"Phishing domain: 460betrabet.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating instagram. Report & evidence: https://phishdestroy.io/domain/460betrabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '460betrabet.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-22T18:14:58Z","labels":["malicious-activity","phishing","brand:instagram"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/460betrabet.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--169306c8-0742-5bc6-b96b-acae596b73d5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 46165a.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/46165a.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '46165a.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/46165a.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--60e06841-a939-55b2-b71f-a34516813969","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 46165h.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/46165h.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '46165h.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/46165h.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ef4ace6-96e8-5d0c-8aa5-672045ac2e00","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 46165vip.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/46165vip.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '46165vip.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/46165vip.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1da89a0-fb0d-5086-8421-24032fcf14b8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 462758548159.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/462758548159.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '462758548159.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/462758548159.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e113b3d4-5a59-54b7-9dd9-1d935a1f0ed2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:17Z","modified":"2026-07-27T06:02:17Z","name":"Phishing domain: 4628.win","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/4628.win","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4628.win']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4628.win"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fa5ed03-d1f3-5455-8890-1feafc607dae","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-19T09:29:35Z","modified":"2025-11-19T09:29:35Z","name":"Phishing domain: 462847coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/462847coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '462847coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-19T09:29:35Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/462847coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--57ef7713-d23b-53a3-addf-bdcecce87893","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-28T10:32:16Z","modified":"2025-10-28T10:32:16Z","name":"Phishing domain: 463596-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/463596-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '463596-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-28T10:32:16Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/463596-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--431ed84d-eed5-56c1-921b-b0cc84e546bf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-02T15:34:40Z","modified":"2026-02-02T15:34:40Z","name":"Phishing domain: 463812.krakenrecover.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating kraken. Report & evidence: https://phishdestroy.io/domain/463812.krakenrecover.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '463812.krakenrecover.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-02T15:34:40Z","labels":["malicious-activity","phishing","brand:kraken"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/463812.krakenrecover.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd2f7a2d-d2bc-554f-8669-3c86739f3988","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T15:47:57Z","modified":"2026-08-09T15:47:57Z","name":"Phishing domain: 468398.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/468398.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '468398.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T15:47:57Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/468398.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--14060f6f-46a1-5863-a6e7-ee3ffb131941","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 468486165tyj.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/468486165tyj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '468486165tyj.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/468486165tyj.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--07206023-2ed9-5640-a86e-aae166deb2bf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-22T09:25:31Z","modified":"2025-12-22T09:25:31Z","name":"Phishing domain: 46a28e92.bfhjbfhjfh.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/46a28e92.bfhjbfhjfh.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '46a28e92.bfhjbfhjfh.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-22T09:25:31Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/46a28e92.bfhjbfhjfh.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a70eb054-391c-5303-bca4-519431d3faa1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:23Z","modified":"2026-02-26T23:20:23Z","name":"Phishing domain: 46ace0a.sbs","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/46ace0a.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '46ace0a.sbs']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:23Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/46ace0a.sbs"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a842a14-7b63-5800-9772-07e48843cb93","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-28T07:35:30Z","modified":"2026-01-28T07:35:30Z","name":"Phishing domain: 46i9hvpjms.intesa-850aurum.it","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/46i9hvpjms.intesa-850aurum.it","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '46i9hvpjms.intesa-850aurum.it']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-28T07:35:30Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/46i9hvpjms.intesa-850aurum.it"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e15a6d1-1bde-5337-81b7-fdcea5a10b32","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T15:49:26Z","modified":"2026-08-09T15:49:26Z","name":"Phishing domain: 4706ba.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/4706ba.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4706ba.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T15:49:26Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4706ba.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4c7de8d-a61e-53c3-9f1f-a7e0ab222ae5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 4720537---6165.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/4720537---6165.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4720537---6165.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4720537---6165.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--06fec5b9-6013-52f6-ab14-1054c2e40206","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 47661zxd.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/47661zxd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '47661zxd.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/47661zxd.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--213e6a35-0675-5cd9-9159-0b9940372aaa","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-03T09:52:48Z","modified":"2025-09-03T09:52:48Z","name":"Phishing domain: 47770.academy","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/47770.academy","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '47770.academy']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-03T09:52:48Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/47770.academy"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbf73aeb-ba62-5137-b7a0-06db4902e869","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-04T16:13:40Z","modified":"2026-03-04T16:13:40Z","name":"Phishing domain: 478299coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/478299coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '478299coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-04T16:13:40Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/478299coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--51e84608-b577-54a6-8027-39a89023760d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:16Z","modified":"2026-07-27T06:02:16Z","name":"Phishing domain: 47860.pet","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/47860.pet","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '47860.pet']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:16Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/47860.pet"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a5bc167-f289-5af9-806a-0798387f45bd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-17T11:11:05Z","modified":"2026-03-17T11:11:05Z","name":"Phishing domain: 478865coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/478865coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '478865coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-17T11:11:05Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/478865coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c2aaeff-1997-5f63-95b0-8be6b02fd19b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-21T21:14:34Z","modified":"2026-04-21T21:14:34Z","name":"Phishing domain: 479.lol","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating jupiter. Report & evidence: https://phishdestroy.io/domain/479.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '479.lol']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-21T21:14:34Z","labels":["malicious-activity","phishing","brand:jupiter"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/479.lol"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5428655b-4bba-5a7b-b488-40ab1510507e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T13:48:16Z","modified":"2026-02-13T13:48:16Z","name":"Phishing domain: 47kra.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating kraken. Report & evidence: https://phishdestroy.io/domain/47kra.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '47kra.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T13:48:16Z","labels":["malicious-activity","phishing","brand:kraken"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/47kra.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d28bd2b-f597-5a08-82d7-9002cc2c1f35","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-29T11:27:20Z","modified":"2025-12-29T11:27:20Z","name":"Phishing domain: 481923coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/481923coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '481923coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-29T11:27:20Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/481923coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--91f331ea-153f-5ff4-a36c-995d59734c40","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-16T07:15:54Z","modified":"2025-12-16T07:15:54Z","name":"Phishing domain: 4823848-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/4823848-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4823848-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-16T07:15:54Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4823848-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d87df430-06ba-5b13-843a-062129d569a1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T13:48:57Z","modified":"2026-02-13T13:48:57Z","name":"Phishing domain: 4827193-crypto.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/4827193-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4827193-crypto.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T13:48:57Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4827193-crypto.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f179a202-24e2-5562-8fd5-69728cc2dc0b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-31T17:47:32Z","modified":"2026-01-31T17:47:32Z","name":"Phishing domain: 4828449-ledger.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/4828449-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4828449-ledger.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-31T17:47:32Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4828449-ledger.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ca519fc-6ca0-50a3-824d-58df104fc178","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-19T12:44:32Z","modified":"2025-11-19T12:44:32Z","name":"Phishing domain: 482931coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/482931coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '482931coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-19T12:44:32Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/482931coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0a73817-5e05-50e0-a898-c1b05cea4546","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:04Z","modified":"2026-02-26T23:24:04Z","name":"Phishing domain: 483726-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/483726-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '483726-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:04Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/483726-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f13077e-e87a-54c1-9461-ff240cd5e83c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-27T19:18:58Z","modified":"2025-11-27T19:18:58Z","name":"Phishing domain: 48391-kraken.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Kraken. Report & evidence: https://phishdestroy.io/domain/48391-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '48391-kraken.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-27T19:18:58Z","labels":["malicious-activity","phishing","brand:kraken"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/48391-kraken.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6755c32-7720-50e3-87fa-f1f47f4adf96","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-21T09:19:19Z","modified":"2026-03-21T09:19:19Z","name":"Phishing domain: 484.lol","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating discord. Report & evidence: https://phishdestroy.io/domain/484.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '484.lol']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-21T09:19:19Z","labels":["malicious-activity","phishing","brand:discord"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/484.lol"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e05f0009-84a1-5303-8f8f-bcb58a4f1792","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-20T06:55:50Z","modified":"2025-12-20T06:55:50Z","name":"Phishing domain: 48410b52.formartt.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/48410b52.formartt.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '48410b52.formartt.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-20T06:55:50Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/48410b52.formartt.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--81cfcaa7-b860-5f3b-bee2-d149813397af","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-15T06:06:16Z","modified":"2025-10-15T06:06:16Z","name":"Phishing domain: 48479636-0fcb-4a64-a08f-981f9743d314.accountbasedpension.com.au","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/48479636-0fcb-4a64-a08f-981f9743d314.accountbasedpension.com.au","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '48479636-0fcb-4a64-a08f-981f9743d314.accountbasedpension.com.au']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-15T06:06:16Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/48479636-0fcb-4a64-a08f-981f9743d314.accountbasedpension.com.au"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--51a8453d-8f11-5138-aeff-e485fe57382b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 4849002.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/4849002.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4849002.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4849002.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3f0c7ad-d23d-5a65-88a1-2fcb5f0c33d6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 484906.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/484906.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '484906.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/484906.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6b3cd2b-36b2-57b9-a480-0b9a9d05fa59","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:50:17Z","modified":"2026-07-27T04:50:17Z","name":"Phishing domain: 484907.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/484907.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '484907.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:50:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/484907.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d2d5dda-ff92-56fd-ac92-7a6c36cfd196","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 4849157.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/4849157.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4849157.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4849157.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5efbe0d5-58b1-5b73-8673-7aed36e9cb37","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 4849879.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/4849879.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4849879.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4849879.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5b2e204-f730-5bd3-a529-c8bf02017875","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 4849a67.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/4849a67.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4849a67.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4849a67.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--628b9a6b-6bc1-518e-ad74-c70ee11c3ed5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 4849a87.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/4849a87.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4849a87.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4849a87.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdd52fd5-f9b7-5988-888f-12601c73189b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T07:11:23Z","modified":"2026-02-13T07:11:23Z","name":"Phishing domain: 485013-coinbaseportal.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/485013-coinbaseportal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '485013-coinbaseportal.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T07:11:23Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/485013-coinbaseportal.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--511dca88-dead-5936-bb20-02d8c2ebf243","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-10T10:45:47Z","modified":"2026-07-10T10:45:47Z","name":"Phishing domain: 485129-robinhood.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Robinhood. Report & evidence: https://phishdestroy.io/domain/485129-robinhood.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '485129-robinhood.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-10T10:45:47Z","labels":["malicious-activity","phishing","brand:robinhood"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/485129-robinhood.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--28372369-2663-5cf5-a175-d91570dce411","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-03T20:29:49Z","modified":"2026-08-03T20:29:49Z","name":"Phishing domain: 4868.bluefin.pr.app.bluefin.foundation","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/4868.bluefin.pr.app.bluefin.foundation","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4868.bluefin.pr.app.bluefin.foundation']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-03T20:29:49Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4868.bluefin.pr.app.bluefin.foundation"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--462e1d1d-8361-5cee-b623-9f07e383ebef","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-04T08:44:15Z","modified":"2025-11-04T08:44:15Z","name":"Phishing domain: 487122coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/487122coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '487122coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-04T08:44:15Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/487122coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--235e0d6d-a64a-5fd7-afd5-e8135cdd56d2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-25T12:29:37Z","modified":"2025-12-25T12:29:37Z","name":"Phishing domain: 487432ea.bvfhgvuddfh.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/487432ea.bvfhgvuddfh.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '487432ea.bvfhgvuddfh.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-25T12:29:37Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/487432ea.bvfhgvuddfh.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d62bb327-6934-50de-b904-6d53e6700e07","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-16T15:34:09Z","modified":"2026-03-16T15:34:09Z","name":"Phishing domain: 4875ledger.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/4875ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4875ledger.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-16T15:34:09Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4875ledger.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b90ce9a1-e773-5d88-9526-f963d2cd5ef8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-12T16:30:02Z","modified":"2026-03-12T16:30:02Z","name":"Phishing domain: 48765ledger.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating ledger. Report & evidence: https://phishdestroy.io/domain/48765ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '48765ledger.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-12T16:30:02Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/48765ledger.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6cd752b-bc7b-5f7b-a1d4-020b9d4839df","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-02T15:47:10Z","modified":"2026-02-02T15:47:10Z","name":"Phishing domain: 487admin.jiuzhouw.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating amazon. Report & evidence: https://phishdestroy.io/domain/487admin.jiuzhouw.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '487admin.jiuzhouw.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-02T15:47:10Z","labels":["malicious-activity","phishing","brand:amazon"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/487admin.jiuzhouw.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--55f7de04-4cfc-532d-a4ea-32c1e479b218","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-07T10:44:30Z","modified":"2026-08-07T10:44:30Z","name":"Phishing domain: 4882.bluefin.pr.app.bluefin.foundation","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Sui. Report & evidence: https://phishdestroy.io/domain/4882.bluefin.pr.app.bluefin.foundation","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4882.bluefin.pr.app.bluefin.foundation']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-07T10:44:30Z","labels":["malicious-activity","phishing","brand:sui"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4882.bluefin.pr.app.bluefin.foundation"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1aa77ab6-eb8c-570d-a31e-2661dece8794","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-20T12:22:25Z","modified":"2026-01-20T12:22:25Z","name":"Phishing domain: 488543-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/488543-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '488543-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-20T12:22:25Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/488543-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--236b10ed-c1bf-5931-b476-5bfd02b99c11","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-07T10:38:34Z","modified":"2026-08-07T10:38:34Z","name":"Phishing domain: 4887.bluefin.pr.app.bluefin.foundation","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating sui. Report & evidence: https://phishdestroy.io/domain/4887.bluefin.pr.app.bluefin.foundation","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4887.bluefin.pr.app.bluefin.foundation']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-07T10:38:34Z","labels":["malicious-activity","phishing","brand:sui"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4887.bluefin.pr.app.bluefin.foundation"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba1ac046-8288-5afb-a4b3-a1cf5a38ff8a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 489.tw","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/489.tw","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '489.tw']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/489.tw"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf991c49-0cb8-5677-882a-fbe10c405339","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-11T18:42:16Z","modified":"2026-08-11T18:42:16Z","name":"Phishing domain: 48a2ba.arcadejafet.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/48a2ba.arcadejafet.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '48a2ba.arcadejafet.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-11T18:42:16Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/48a2ba.arcadejafet.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7243821f-5056-53f6-99c7-37911af91453","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-18T10:45:51Z","modified":"2025-09-18T10:45:51Z","name":"Phishing domain: 48club-bnb.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bnb chain. Report & evidence: https://phishdestroy.io/domain/48club-bnb.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '48club-bnb.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-18T10:45:51Z","labels":["malicious-activity","phishing","brand:bnb chain"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/48club-bnb.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a78634fc-3d35-55dc-8c78-2d55d6afd264","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:01Z","modified":"2026-02-26T23:23:01Z","name":"Phishing domain: 48clubreward.connectkit.world","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bnb chain. Report & evidence: https://phishdestroy.io/domain/48clubreward.connectkit.world","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '48clubreward.connectkit.world']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:01Z","labels":["malicious-activity","phishing","brand:bnb chain"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/48clubreward.connectkit.world"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dedade31-264c-5fc0-8193-e6488ac50b09","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:21Z","modified":"2026-02-26T23:24:21Z","name":"Phishing domain: 48clubreward.w3claim.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bnb chain. Report & evidence: https://phishdestroy.io/domain/48clubreward.w3claim.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '48clubreward.w3claim.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:21Z","labels":["malicious-activity","phishing","brand:bnb chain"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/48clubreward.w3claim.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed4326aa-049f-52c3-823c-5d46b9c79ce6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-31T17:17:13Z","modified":"2026-01-31T17:17:13Z","name":"Phishing domain: 49-12-218-254.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/49-12-218-254.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '49-12-218-254.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-31T17:17:13Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/49-12-218-254.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b81b6d8f-5aad-552d-9b89-a26d6befd432","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T20:39:18Z","modified":"2026-08-10T20:39:18Z","name":"Phishing domain: 4903.bluefin.pr.app.bluefin.foundation","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating sui. Report & evidence: https://phishdestroy.io/domain/4903.bluefin.pr.app.bluefin.foundation","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4903.bluefin.pr.app.bluefin.foundation']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T20:39:18Z","labels":["malicious-activity","phishing","brand:sui"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4903.bluefin.pr.app.bluefin.foundation"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c856c76-1376-586b-93fa-97f226d92cb9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:49:01Z","modified":"2026-07-27T04:49:01Z","name":"Phishing domain: 49080a.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/49080a.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '49080a.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:49:01Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/49080a.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2bf1b37-7de5-58d2-b48e-b259ab62acfd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-15T08:22:02Z","modified":"2026-02-15T08:22:02Z","name":"Phishing domain: 4909d4aa.faqconn.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/4909d4aa.faqconn.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4909d4aa.faqconn.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-15T08:22:02Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4909d4aa.faqconn.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bbb1845-13bb-56bc-93ef-71c99f660b99","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:45:36Z","modified":"2026-07-27T04:45:36Z","name":"Phishing domain: 4912377.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/4912377.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4912377.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:45:36Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4912377.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1730d5a3-7246-5118-ba6d-9750b1bf86a4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-27T06:49:17Z","modified":"2025-10-27T06:49:17Z","name":"Phishing domain: 491852coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/491852coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '491852coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-27T06:49:17Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/491852coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5227d7f1-6997-58dd-aa7d-b9b8ea423d73","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-29T09:47:48Z","modified":"2025-11-29T09:47:48Z","name":"Phishing domain: 491862-kraken.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Kraken. Report & evidence: https://phishdestroy.io/domain/491862-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '491862-kraken.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-29T09:47:48Z","labels":["malicious-activity","phishing","brand:kraken"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/491862-kraken.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e41f5e89-a031-54e7-9a35-0781575513e7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 49217002.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/49217002.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '49217002.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/49217002.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a908edbf-a36e-5e00-951b-c6671bd05f60","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 49217007.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/49217007.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '49217007.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/49217007.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--995de4a8-8d65-5df1-a2a1-e3a4804993e5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 4921855.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/4921855.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4921855.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4921855.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1a131b5-ee46-5558-9d1b-091558ff4355","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-24T16:48:39Z","modified":"2026-02-24T16:48:39Z","name":"Phishing domain: 4927518362947153826497.duckdns.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Garanti. Report & evidence: https://phishdestroy.io/domain/4927518362947153826497.duckdns.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4927518362947153826497.duckdns.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-24T16:48:39Z","labels":["malicious-activity","phishing","brand:garanti"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4927518362947153826497.duckdns.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d999f0ed-5fec-555f-86be-db504c6de5ef","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-30T18:43:38Z","modified":"2025-10-30T18:43:38Z","name":"Phishing domain: 49278523.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/49278523.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '49278523.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-30T18:43:38Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/49278523.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf7eb5a1-0d5b-521c-81db-d14820a18b83","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-27T06:49:17Z","modified":"2025-10-27T06:49:17Z","name":"Phishing domain: 492851coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/492851coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '492851coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-27T06:49:17Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/492851coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c2abca9-cb89-5a99-ad42-ad13a340669a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:17Z","modified":"2026-07-27T06:02:17Z","name":"Phishing domain: 49392.co","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/49392.co","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '49392.co']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/49392.co"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2992800-022e-57cd-8ab3-3eee277d0846","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 49461652.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/49461652.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '49461652.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/49461652.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c605249d-9e67-5db0-b26f-aa9b6087c3e9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-03T09:50:39Z","modified":"2025-09-03T09:50:39Z","name":"Phishing domain: 49639.loan","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/49639.loan","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '49639.loan']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-03T09:50:39Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/49639.loan"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--95fc6bca-77e7-5bbf-9f78-6f23943acb2e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-28T18:07:33Z","modified":"2026-07-28T18:07:33Z","name":"Phishing domain: 498491-ledger.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/498491-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '498491-ledger.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-28T18:07:33Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/498491-ledger.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c26d1946-e2bc-590c-a696-9c0a15561c37","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-03T09:57:41Z","modified":"2025-09-03T09:57:41Z","name":"Phishing domain: 49853.my","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/49853.my","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '49853.my']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-03T09:57:41Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/49853.my"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--374be7be-d9ab-524c-9f75-e6a587b4fde6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-20T15:32:36Z","modified":"2025-11-20T15:32:36Z","name":"Phishing domain: 49df0d62-0ac7-494f-aef4-565ec9c94195.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/49df0d62-0ac7-494f-aef4-565ec9c94195.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '49df0d62-0ac7-494f-aef4-565ec9c94195.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-20T15:32:36Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/49df0d62-0ac7-494f-aef4-565ec9c94195.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--04c524db-2d94-5d73-9d70-5e377f5893ef","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-31T16:37:43Z","modified":"2026-01-31T16:37:43Z","name":"Phishing domain: 49web.whatsapwacz.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating whatsapp. Report & evidence: https://phishdestroy.io/domain/49web.whatsapwacz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '49web.whatsapwacz.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-31T16:37:43Z","labels":["malicious-activity","phishing","brand:whatsapp"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/49web.whatsapwacz.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--46031673-66e8-518f-b831-c705071566b6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-03T14:26:58Z","modified":"2026-08-03T14:26:58Z","name":"Phishing domain: 4a365eut6r7tryisk5re6uj5eukajmfnhcsr45y5eia79w7wrezfkt6diwr7.weebly.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/4a365eut6r7tryisk5re6uj5eukajmfnhcsr45y5eia79w7wrezfkt6diwr7.weebly.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4a365eut6r7tryisk5re6uj5eukajmfnhcsr45y5eia79w7wrezfkt6diwr7.weebly.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-03T14:26:58Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4a365eut6r7tryisk5re6uj5eukajmfnhcsr45y5eia79w7wrezfkt6diwr7.weebly.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--21705454-7e3d-5e11-9e13-e820065f8905","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-13T15:03:02Z","modified":"2025-12-13T15:03:02Z","name":"Phishing domain: 4a537f8276704fe3b6b61761570858560.2141976.meusitehostgator.com.br","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/4a537f8276704fe3b6b61761570858560.2141976.meusitehostgator.com.br","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4a537f8276704fe3b6b61761570858560.2141976.meusitehostgator.com.br']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-13T15:03:02Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4a537f8276704fe3b6b61761570858560.2141976.meusitehostgator.com.br"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fa8e947-8f95-58b3-b106-146e8989f16a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-23T15:34:22Z","modified":"2026-02-23T15:34:22Z","name":"Phishing domain: 4a60b417-zimbra-8d7f-web-o4286-fd24f6.netlify.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/4a60b417-zimbra-8d7f-web-o4286-fd24f6.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4a60b417-zimbra-8d7f-web-o4286-fd24f6.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-23T15:34:22Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4a60b417-zimbra-8d7f-web-o4286-fd24f6.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--efaa3157-2479-5e82-b786-e285bae7cc52","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-13T20:11:36Z","modified":"2026-08-13T20:11:36Z","name":"Phishing domain: 4b3183.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/4b3183.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4b3183.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-13T20:11:36Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4b3183.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--af8ae51d-4345-5abe-9806-f0868fa23e95","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T12:02:03Z","modified":"2026-07-27T12:02:03Z","name":"Phishing domain: 4b677a73.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/4b677a73.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4b677a73.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T12:02:03Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4b677a73.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--461ddc9e-1747-54ee-bed1-99a2dd7e4e1d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-17T20:42:36Z","modified":"2025-12-17T20:42:36Z","name":"Phishing domain: 4ba67ccf.vivewss.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/4ba67ccf.vivewss.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4ba67ccf.vivewss.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-17T20:42:36Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4ba67ccf.vivewss.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b82fafc-0bd6-5909-9141-1013e44e2f9f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-20T17:19:32Z","modified":"2026-03-20T17:19:32Z","name":"Phishing domain: 4base.cfd","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/4base.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4base.cfd']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-20T17:19:32Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4base.cfd"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2f80b05-9f52-5bc5-aa60-1d45258f4d93","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-11T18:29:18Z","modified":"2026-08-11T18:29:18Z","name":"Phishing domain: 4bc19e.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/4bc19e.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4bc19e.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-11T18:29:18Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4bc19e.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a41239e5-aea7-54a2-ba13-dcb8a2762452","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:49:58Z","modified":"2026-07-27T04:49:58Z","name":"Phishing domain: 4bkglobal.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/4bkglobal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4bkglobal.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:49:58Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4bkglobal.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca86e709-eb31-55ea-93e1-cafd847dbc8c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-13T01:38:32Z","modified":"2025-10-13T01:38:32Z","name":"Phishing domain: 4bsctoken.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating binance. Report & evidence: https://phishdestroy.io/domain/4bsctoken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4bsctoken.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-13T01:38:32Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4bsctoken.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--93d0426d-cb87-5c64-bc88-6aca83ffa0a2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-21T21:31:59Z","modified":"2026-02-21T21:31:59Z","name":"Phishing domain: 4burn-giveaway.netlify.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ethereum. Report & evidence: https://phishdestroy.io/domain/4burn-giveaway.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4burn-giveaway.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-21T21:31:59Z","labels":["malicious-activity","phishing","brand:ethereum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4burn-giveaway.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--469a8428-cdfd-56f7-8ccd-4f357bfd4695","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-15T03:53:48Z","modified":"2026-02-15T03:53:48Z","name":"Phishing domain: 4burn.netlify.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/4burn.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4burn.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-15T03:53:48Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4burn.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0551f1ed-d9e3-534c-9c11-b6067d93c621","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T23:53:46Z","modified":"2026-08-09T23:53:46Z","name":"Phishing domain: 4c90b0.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/4c90b0.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4c90b0.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T23:53:46Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4c90b0.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ecbf7a4-dc17-5689-9701-a91055f35065","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-13T20:39:17Z","modified":"2026-08-13T20:39:17Z","name":"Phishing domain: 4cad71.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/4cad71.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4cad71.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-13T20:39:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4cad71.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--616fe040-d01e-55d3-9910-040723201229","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-13T20:32:12Z","modified":"2026-08-13T20:32:12Z","name":"Phishing domain: 4cb485.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/4cb485.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4cb485.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-13T20:32:12Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4cb485.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--58fb1f78-2351-57e9-94d0-2a094feb4193","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-03T14:54:11Z","modified":"2025-11-03T14:54:11Z","name":"Phishing domain: 4chananon.finance","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/4chananon.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4chananon.finance']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-03T14:54:11Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4chananon.finance"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--43d798d3-9522-58b9-87a9-b1e20b356be8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T18:40:07Z","modified":"2026-08-09T18:40:07Z","name":"Phishing domain: 4coins.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/4coins.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4coins.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T18:40:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4coins.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--53b22f34-8d34-52ae-a9ab-8c5f58dd8c7d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T07:39:34Z","modified":"2026-08-10T07:39:34Z","name":"Phishing domain: 4cs.fail","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating cs2. Report & evidence: https://phishdestroy.io/domain/4cs.fail","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4cs.fail']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T07:39:34Z","labels":["malicious-activity","phishing","brand:cs2"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4cs.fail"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b687226-c8c2-5df6-b085-d78bcf073316","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-11T18:28:00Z","modified":"2026-08-11T18:28:00Z","name":"Phishing domain: 4d2582.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/4d2582.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4d2582.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-11T18:28:00Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4d2582.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b264ad59-5130-5c53-a505-ba86988801fa","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-11T13:27:10Z","modified":"2025-09-11T13:27:10Z","name":"Phishing domain: 4dbzg-3yaaa-aaaad-qet4a-cai.icp0.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating arbitrum. Report & evidence: https://phishdestroy.io/domain/4dbzg-3yaaa-aaaad-qet4a-cai.icp0.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4dbzg-3yaaa-aaaad-qet4a-cai.icp0.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-11T13:27:10Z","labels":["malicious-activity","phishing","brand:arbitrum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4dbzg-3yaaa-aaaad-qet4a-cai.icp0.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--117a54be-e9e9-561f-afcf-765989d57410","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-18T00:32:16Z","modified":"2025-12-18T00:32:16Z","name":"Phishing domain: 4dsv2-hiaaa-aaaad-ac4qq-cai.icp0.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Kamino. Report & evidence: https://phishdestroy.io/domain/4dsv2-hiaaa-aaaad-ac4qq-cai.icp0.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4dsv2-hiaaa-aaaad-ac4qq-cai.icp0.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-18T00:32:16Z","labels":["malicious-activity","phishing","brand:kamino"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4dsv2-hiaaa-aaaad-ac4qq-cai.icp0.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa12ec60-8c3a-5418-a17c-ef9b2e0fe079","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-24T16:41:51Z","modified":"2026-01-24T16:41:51Z","name":"Phishing domain: 4dsv2hiaaaaaaadac4qqcai.icp0.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/4dsv2hiaaaaaaadac4qqcai.icp0.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4dsv2hiaaaaaaadac4qqcai.icp0.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-24T16:41:51Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4dsv2hiaaaaaaadac4qqcai.icp0.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--22885ca4-f11e-5d78-9bf6-730eec01bc83","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-01T09:29:31Z","modified":"2025-08-01T09:29:31Z","name":"Phishing domain: 4e1rc.vip","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/4e1rc.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4e1rc.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-01T09:29:31Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4e1rc.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--51e71da0-de44-5c57-845e-d869b75e7198","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-12T11:15:34Z","modified":"2026-06-12T11:15:34Z","name":"Phishing domain: 4f3ce4ix422juab7zzdvfw53vxlt7qgh7o4s4x3z4i6lrrrxsbmq.turbo-gateway.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/4f3ce4ix422juab7zzdvfw53vxlt7qgh7o4s4x3z4i6lrrrxsbmq.turbo-gateway.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4f3ce4ix422juab7zzdvfw53vxlt7qgh7o4s4x3z4i6lrrrxsbmq.turbo-gateway.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-12T11:15:34Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4f3ce4ix422juab7zzdvfw53vxlt7qgh7o4s4x3z4i6lrrrxsbmq.turbo-gateway.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c129e333-55f6-534e-bcd3-2eec1b76e38f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-30T11:03:47Z","modified":"2025-10-30T11:03:47Z","name":"Phishing domain: 4f8d4eb6-c0c4-4029-8674-69587a7ee2a9.wpfeedback.co","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating amazon. Report & evidence: https://phishdestroy.io/domain/4f8d4eb6-c0c4-4029-8674-69587a7ee2a9.wpfeedback.co","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4f8d4eb6-c0c4-4029-8674-69587a7ee2a9.wpfeedback.co']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-30T11:03:47Z","labels":["malicious-activity","phishing","brand:amazon"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4f8d4eb6-c0c4-4029-8674-69587a7ee2a9.wpfeedback.co"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a433ab42-1916-5222-bba9-8eea93d7c77b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-13T19:55:58Z","modified":"2026-08-13T19:55:58Z","name":"Phishing domain: 4fb-x7jw1o-u69p-ctqzfi-dvsbds.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/4fb-x7jw1o-u69p-ctqzfi-dvsbds.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4fb-x7jw1o-u69p-ctqzfi-dvsbds.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-13T19:55:58Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4fb-x7jw1o-u69p-ctqzfi-dvsbds.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--238ee82b-73c7-5ae2-82a7-b19b71a8d3b8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-13T21:05:51Z","modified":"2026-08-13T21:05:51Z","name":"Phishing domain: 4fd09f.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/4fd09f.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4fd09f.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-13T21:05:51Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4fd09f.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eca39bb4-d0c0-57e6-85bc-87bc3601dd78","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2024-04-14T21:28:25Z","modified":"2024-04-14T21:28:25Z","name":"Phishing domain: 4fkvnzdkfitg.ru","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/4fkvnzdkfitg.ru","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4fkvnzdkfitg.ru']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2024-04-14T21:28:25Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4fkvnzdkfitg.ru"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b69481a1-11fc-5b65-8f5f-ebd5c6e61f91","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-04T15:04:49Z","modified":"2026-01-04T15:04:49Z","name":"Phishing domain: 4game.bet","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating foundation. Report & evidence: https://phishdestroy.io/domain/4game.bet","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4game.bet']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-04T15:04:49Z","labels":["malicious-activity","phishing","brand:foundation"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4game.bet"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0203c765-3da4-50ba-88a9-b58aa5ade1c4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-11T14:33:04Z","modified":"2026-06-11T14:33:04Z","name":"Phishing domain: 4jw.d29.mytemp.website","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating abnamro. Report & evidence: https://phishdestroy.io/domain/4jw.d29.mytemp.website","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4jw.d29.mytemp.website']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-11T14:33:04Z","labels":["malicious-activity","phishing","brand:abnamro"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4jw.d29.mytemp.website"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--01da3413-2deb-5fda-adde-fc1b41a13e20","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T11:55:01Z","modified":"2026-08-09T11:55:01Z","name":"Phishing domain: 4k7e.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating tiktok. Report & evidence: https://phishdestroy.io/domain/4k7e.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4k7e.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T11:55:01Z","labels":["malicious-activity","phishing","brand:tiktok"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4k7e.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--61248216-9fca-5f22-93f1-ebb2794f1d72","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-15T15:41:26Z","modified":"2026-03-15T15:41:26Z","name":"Phishing domain: 4mb1l-had14h.vornsixid.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating whatsapp. Report & evidence: https://phishdestroy.io/domain/4mb1l-had14h.vornsixid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4mb1l-had14h.vornsixid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-15T15:41:26Z","labels":["malicious-activity","phishing","brand:whatsapp"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4mb1l-had14h.vornsixid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--14be286c-6c95-5111-821c-d615e0f6961a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-20T15:12:21Z","modified":"2026-01-20T15:12:21Z","name":"Phishing domain: 4n.ue7.biz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/4n.ue7.biz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4n.ue7.biz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-20T15:12:21Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4n.ue7.biz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e656ce77-bbad-5b0f-be8f-2a29aec3bdec","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-17T19:00:32Z","modified":"2026-02-17T19:00:32Z","name":"Phishing domain: 4ny0ne.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/4ny0ne.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4ny0ne.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-17T19:00:32Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4ny0ne.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1834332-9119-5cb3-bd5a-8dd08809b417","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-27T05:31:11Z","modified":"2025-10-27T05:31:11Z","name":"Phishing domain: 4onbnb.world","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/4onbnb.world","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4onbnb.world']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-27T05:31:11Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4onbnb.world"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc1da67a-34c6-5db4-a287-a7d6653626f9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-09T03:30:50Z","modified":"2025-10-09T03:30:50Z","name":"Phishing domain: 4onbsc-allocation.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/4onbsc-allocation.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4onbsc-allocation.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-09T03:30:50Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4onbsc-allocation.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2349e632-4d0b-5133-a3bd-1dd2edc811ed","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:59Z","modified":"2026-02-26T23:23:59Z","name":"Phishing domain: 4onbsc.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/4onbsc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4onbsc.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:59Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4onbsc.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a579b739-3ab7-5a51-8ccb-7f0e6227af8f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-07T20:24:17Z","modified":"2025-10-07T20:24:17Z","name":"Phishing domain: 4onbsc.lol","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/4onbsc.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4onbsc.lol']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-07T20:24:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4onbsc.lol"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1079320a-078b-5838-973e-a63f880e6b30","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-11T18:01:41Z","modified":"2025-10-11T18:01:41Z","name":"Phishing domain: 4onbsc.world","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating binance. Report & evidence: https://phishdestroy.io/domain/4onbsc.world","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4onbsc.world']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-11T18:01:41Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4onbsc.world"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec115366-bf42-534f-a367-110d502c31f3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-19T01:15:21Z","modified":"2026-06-19T01:15:21Z","name":"Phishing domain: 4oxxbet.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/4oxxbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4oxxbet.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-19T01:15:21Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4oxxbet.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe9eb8d8-0917-5645-a637-e4055d7f0bdb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-02T16:07:23Z","modified":"2026-03-02T16:07:23Z","name":"Phishing domain: 4phase-crypto-select.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/4phase-crypto-select.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4phase-crypto-select.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-02T16:07:23Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4phase-crypto-select.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb3c77bf-e6da-59f9-b73a-4e6b65f4b829","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-30T18:43:30Z","modified":"2025-10-30T18:43:30Z","name":"Phishing domain: 4pthbm6b.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/4pthbm6b.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4pthbm6b.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-30T18:43:30Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4pthbm6b.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1937bb8d-4adc-50d0-b9a0-0ac3cd0ec9df","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-05T15:01:02Z","modified":"2025-12-05T15:01:02Z","name":"Phishing domain: 4pump.fun","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Pump.fun. Report & evidence: https://phishdestroy.io/domain/4pump.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4pump.fun']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-05T15:01:02Z","labels":["malicious-activity","phishing","brand:pump.fun"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4pump.fun"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--641bfc81-70e9-5847-8684-ff05c33815f0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-01T20:58:55Z","modified":"2026-08-01T20:58:55Z","name":"Phishing domain: 4rabet-india.plus","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating counter-strike. Report & evidence: https://phishdestroy.io/domain/4rabet-india.plus","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4rabet-india.plus']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-01T20:58:55Z","labels":["malicious-activity","phishing","brand:counter-strike"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4rabet-india.plus"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f18c157-2b20-5254-a2c2-2ed38d7d8d97","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-10T12:33:23Z","modified":"2026-07-10T12:33:23Z","name":"Phishing domain: 4rabet.plus","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/4rabet.plus","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4rabet.plus']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-10T12:33:23Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4rabet.plus"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--45907c7e-5a85-5b47-8c47-651bc3a17d81","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-26T10:42:33Z","modified":"2026-01-26T10:42:33Z","name":"Phishing domain: 4ralolg.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/4ralolg.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4ralolg.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-26T10:42:33Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4ralolg.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--37f763eb-aad3-58e3-941b-bbc061eb831b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-04T02:38:10Z","modified":"2025-11-04T02:38:10Z","name":"Phishing domain: 4rimehgfedcbasandbox.am.coinbase.cm","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/4rimehgfedcbasandbox.am.coinbase.cm","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4rimehgfedcbasandbox.am.coinbase.cm']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-04T02:38:10Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4rimehgfedcbasandbox.am.coinbase.cm"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9445f5a6-00fc-5951-a677-91a42fbc21bd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-23T16:12:28Z","modified":"2025-09-23T16:12:28Z","name":"Phishing domain: 4rsqymi.icu","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating PancakeSwap. Report & evidence: https://phishdestroy.io/domain/4rsqymi.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4rsqymi.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-23T16:12:28Z","labels":["malicious-activity","phishing","brand:pancakeswap"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4rsqymi.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1747fa5d-3130-5561-8891-2a11298f8ae4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-06T22:45:56Z","modified":"2026-07-06T22:45:56Z","name":"Phishing domain: 4rub.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/4rub.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4rub.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-06T22:45:56Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4rub.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--06c6c087-4a77-5ec8-a818-fd853d3f6846","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:12Z","modified":"2026-02-26T23:24:12Z","name":"Phishing domain: 4s63n-5iaaa-aaaaj-az5tq-cai.icp0.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/4s63n-5iaaa-aaaaj-az5tq-cai.icp0.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4s63n-5iaaa-aaaaj-az5tq-cai.icp0.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:12Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4s63n-5iaaa-aaaaj-az5tq-cai.icp0.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aff49565-1e39-59d9-9f70-872e5cd25de1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-16T19:28:34Z","modified":"2025-09-16T19:28:34Z","name":"Phishing domain: 4season.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/4season.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4season.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-16T19:28:34Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4season.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7496e72d-b8af-5295-a610-e9842478cf50","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-07T15:19:36Z","modified":"2026-08-07T15:19:36Z","name":"Phishing domain: 4sesor14d3cuenta.webcindario.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/4sesor14d3cuenta.webcindario.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4sesor14d3cuenta.webcindario.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-07T15:19:36Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4sesor14d3cuenta.webcindario.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9830b20d-ecb5-5843-a497-909a371d4d8b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: 4slon5-cc.ru","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/4slon5-cc.ru","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4slon5-cc.ru']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4slon5-cc.ru"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e11aea5d-54b8-5a5d-9e5a-34108ebeaa53","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-28T15:38:12Z","modified":"2026-06-28T15:38:12Z","name":"Phishing domain: 4slona.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/4slona.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4slona.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-28T15:38:12Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4slona.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9984814e-b371-5228-a54d-68e704ce66e4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-03T19:17:02Z","modified":"2026-07-03T19:17:02Z","name":"Phishing domain: 4upgrader.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/4upgrader.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4upgrader.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-03T19:17:02Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4upgrader.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e393ac3b-8659-5ced-919e-6ec6a6146860","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T13:07:51Z","modified":"2026-06-15T13:07:51Z","name":"Phishing domain: 4us93ii.vip","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating MetaMask. Report & evidence: https://phishdestroy.io/domain/4us93ii.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4us93ii.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T13:07:51Z","labels":["malicious-activity","phishing","brand:metamask"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4us93ii.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--31b4f1dc-67ba-5111-ba3f-e89461f0ab53","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-18T10:45:23Z","modified":"2025-09-18T10:45:23Z","name":"Phishing domain: 4way-mirror.new-hub-dashboard.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating metamask. Report & evidence: https://phishdestroy.io/domain/4way-mirror.new-hub-dashboard.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4way-mirror.new-hub-dashboard.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-18T10:45:23Z","labels":["malicious-activity","phishing","brand:metamask"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4way-mirror.new-hub-dashboard.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--180b1de1-b88f-54be-952f-ae08b2269df5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-30T14:28:59Z","modified":"2026-07-30T14:28:59Z","name":"Phishing domain: 4ww-umb.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/4ww-umb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4ww-umb.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-30T14:28:59Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4ww-umb.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--76fe9f3e-491e-507a-9ae5-d07c9312d319","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-03T05:59:14Z","modified":"2026-01-03T05:59:14Z","name":"Phishing domain: 4xexchange.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating GMX. Report & evidence: https://phishdestroy.io/domain/4xexchange.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4xexchange.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-03T05:59:14Z","labels":["malicious-activity","phishing","brand:gmx"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4xexchange.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9494b2e-cb26-559d-b939-f766cb8608e0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:59Z","modified":"2026-02-26T23:22:59Z","name":"Phishing domain: 4yougame.shop","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/4yougame.shop","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4yougame.shop']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:59Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4yougame.shop"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--da03cf3f-d29b-55c6-b97d-628fba498f97","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-07T09:29:00Z","modified":"2026-07-07T09:29:00Z","name":"Phishing domain: 4yqublzrzoo4nr54brmzvmgr5eftmn3fqx4dtvjdue23a47ii7sq.arweave.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/4yqublzrzoo4nr54brmzvmgr5eftmn3fqx4dtvjdue23a47ii7sq.arweave.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4yqublzrzoo4nr54brmzvmgr5eftmn3fqx4dtvjdue23a47ii7sq.arweave.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-07T09:29:00Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4yqublzrzoo4nr54brmzvmgr5eftmn3fqx4dtvjdue23a47ii7sq.arweave.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec03ea10-9f28-530e-bcb8-82b8cab816e2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-13T15:00:40Z","modified":"2025-12-13T15:00:40Z","name":"Phishing domain: 4z8.7bd.myftpupload.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating facebook. Report & evidence: https://phishdestroy.io/domain/4z8.7bd.myftpupload.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '4z8.7bd.myftpupload.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-13T15:00:40Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/4z8.7bd.myftpupload.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8e319c8-3bb5-5dc7-9753-fe1284a9ce48","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-01T03:45:50Z","modified":"2026-02-01T03:45:50Z","name":"Phishing domain: 5-binance.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Binance. Report & evidence: https://phishdestroy.io/domain/5-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5-binance.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-01T03:45:50Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5-binance.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9a1d459-692a-5943-a7fa-2ae775b193fb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-12T14:19:19Z","modified":"2026-07-12T14:19:19Z","name":"Phishing domain: 5-days.jp","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/5-days.jp","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5-days.jp']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-12T14:19:19Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5-days.jp"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e1c7103-c150-5810-8f6a-770a3cf8183b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-08T01:28:25Z","modified":"2026-08-08T01:28:25Z","name":"Phishing domain: 5-google.com.cn","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating gemini. Report & evidence: https://phishdestroy.io/domain/5-google.com.cn","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5-google.com.cn']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-08T01:28:25Z","labels":["malicious-activity","phishing","brand:gemini"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5-google.com.cn"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdc4394b-d701-5209-b5ff-6a984c8c8678","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-28T07:55:05Z","modified":"2026-03-28T07:55:05Z","name":"Phishing domain: 5-krab-cc.ru","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/5-krab-cc.ru","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5-krab-cc.ru']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-28T07:55:05Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5-krab-cc.ru"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--52450a68-4fe8-5fea-a73d-0e486a80bb03","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-28T07:53:10Z","modified":"2026-03-28T07:53:10Z","name":"Phishing domain: 5-slon5cc.ru","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating [\"telegram\"]. Report & evidence: https://phishdestroy.io/domain/5-slon5cc.ru","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5-slon5cc.ru']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-28T07:53:10Z","labels":["malicious-activity","phishing","brand:[\"telegram\"]"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5-slon5cc.ru"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--81cc1e33-9cde-5961-be50-26ffc7c23052","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-04T21:04:57Z","modified":"2025-09-04T21:04:57Z","name":"Phishing domain: 50050041.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/50050041.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '50050041.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-04T21:04:57Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/50050041.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6731cf35-7238-5f4a-b312-3347a380f884","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-19T01:12:57Z","modified":"2025-10-19T01:12:57Z","name":"Phishing domain: 500binkonutbasvuru.click","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Turkish Government. Report & evidence: https://phishdestroy.io/domain/500binkonutbasvuru.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '500binkonutbasvuru.click']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-19T01:12:57Z","labels":["malicious-activity","phishing","brand:turkish government"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/500binkonutbasvuru.click"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--af09c3d4-6673-5741-97cc-a3a1af52176a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: 500mg-metronidazole-flagyl.info","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/500mg-metronidazole-flagyl.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '500mg-metronidazole-flagyl.info']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/500mg-metronidazole-flagyl.info"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--63c6a5d2-cd7c-5437-a29b-73f6d56adebf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T06:46:05Z","modified":"2026-06-15T06:46:05Z","name":"Phishing domain: 500mg-metronidazoleflagyl.info","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/500mg-metronidazoleflagyl.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '500mg-metronidazoleflagyl.info']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T06:46:05Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/500mg-metronidazoleflagyl.info"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b71167b2-90e4-53e0-8c5e-a3653a91816b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-24T18:14:12Z","modified":"2026-06-24T18:14:12Z","name":"Phishing domain: 5015meritking.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/5015meritking.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5015meritking.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-24T18:14:12Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5015meritking.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--54ba37dc-897c-5a52-9ed5-e2160fb8a331","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-01T05:56:32Z","modified":"2026-07-01T05:56:32Z","name":"Phishing domain: 50298-icloud.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Apple. Report & evidence: https://phishdestroy.io/domain/50298-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '50298-icloud.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-01T05:56:32Z","labels":["malicious-activity","phishing","brand:apple"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/50298-icloud.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--019cf1a3-47e3-5e9b-a7a8-16913ddbf774","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-08T02:52:49Z","modified":"2026-08-08T02:52:49Z","name":"Phishing domain: 50495654-af51-4b1c-a019-dcd5d3b38761-00-w91u4wy40wb4.worf.replit.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/50495654-af51-4b1c-a019-dcd5d3b38761-00-w91u4wy40wb4.worf.replit.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '50495654-af51-4b1c-a019-dcd5d3b38761-00-w91u4wy40wb4.worf.replit.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-08T02:52:49Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/50495654-af51-4b1c-a019-dcd5d3b38761-00-w91u4wy40wb4.worf.replit.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8eb8b647-a808-51f2-83a3-ac8566ed03d3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-06T12:22:59Z","modified":"2025-12-06T12:22:59Z","name":"Phishing domain: 504e1ee0.host.njalla.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating PayPal. Report & evidence: https://phishdestroy.io/domain/504e1ee0.host.njalla.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '504e1ee0.host.njalla.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-06T12:22:59Z","labels":["malicious-activity","phishing","brand:paypal"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/504e1ee0.host.njalla.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfa5b8c9-ff27-532a-944e-615035c9157e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-24T00:13:09Z","modified":"2025-12-24T00:13:09Z","name":"Phishing domain: 505.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/505.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '505.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-24T00:13:09Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/505.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0db4acc-5daf-58dc-bbfc-1cecfa3e7928","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-07-08T11:54:12Z","modified":"2025-07-08T11:54:12Z","name":"Phishing domain: 5051x.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating argent. Report & evidence: https://phishdestroy.io/domain/5051x.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5051x.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-07-08T11:54:12Z","labels":["malicious-activity","phishing","brand:argent"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5051x.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fee0910-585e-5a72-bc37-dddbee80f8d8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-19T16:56:13Z","modified":"2026-02-19T16:56:13Z","name":"Phishing domain: 5064334288.dojiner.at","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Steam. Report & evidence: https://phishdestroy.io/domain/5064334288.dojiner.at","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5064334288.dojiner.at']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-19T16:56:13Z","labels":["malicious-activity","phishing","brand:steam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5064334288.dojiner.at"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6d84876-79af-5221-a422-6c56237248c1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:16Z","modified":"2026-07-27T06:02:16Z","name":"Phishing domain: 50691.pet","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/50691.pet","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '50691.pet']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:16Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/50691.pet"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1494c706-fa06-58fa-8f7a-4a0219dbfe72","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:17Z","modified":"2026-07-27T06:02:17Z","name":"Phishing domain: 50857.tw","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/50857.tw","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '50857.tw']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/50857.tw"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8fce304-6e76-5540-b29a-c7eb887abc29","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 5085meritking.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/5085meritking.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5085meritking.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5085meritking.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f8b8737-7ecb-5633-9843-ddaf05b35e11","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:41Z","modified":"2026-02-26T23:20:41Z","name":"Phishing domain: 5091-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/5091-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5091-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:41Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5091-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--934f86c0-fb6b-50cf-adcc-317c3ba2ada0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:16Z","modified":"2026-07-27T06:02:16Z","name":"Phishing domain: 50915.pet","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/50915.pet","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '50915.pet']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:16Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/50915.pet"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--602edb99-869f-564e-a8f7-1d333280ad34","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-05T13:11:52Z","modified":"2026-01-05T13:11:52Z","name":"Phishing domain: 50bet.us","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/50bet.us","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '50bet.us']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-05T13:11:52Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/50bet.us"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c877be0-6114-5f21-ad4d-85fb863e83e6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-31T16:22:45Z","modified":"2025-12-31T16:22:45Z","name":"Phishing domain: 50cas.us","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/50cas.us","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '50cas.us']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-31T16:22:45Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/50cas.us"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e30dc8f-d2da-558e-af73-2eb096dd03a5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-24T03:34:57Z","modified":"2026-05-24T03:34:57Z","name":"Phishing domain: 50caz.top","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/50caz.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '50caz.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-24T03:34:57Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/50caz.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--86f558d4-5df5-54f5-ae16-d8fbc010e2b0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-07T13:36:32Z","modified":"2026-08-07T13:36:32Z","name":"Phishing domain: 50cbet.us","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/50cbet.us","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '50cbet.us']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-07T13:36:32Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/50cbet.us"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--15b3f887-732c-5dfa-b718-0b69995b59b6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-21T12:34:19Z","modified":"2026-04-21T12:34:19Z","name":"Phishing domain: 50cent.lol","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/50cent.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '50cent.lol']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-21T12:34:19Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/50cent.lol"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecf3666f-c476-5fd1-8dd1-0b4438850e5b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-07T17:38:27Z","modified":"2026-02-07T17:38:27Z","name":"Phishing domain: 50cent.me","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/50cent.me","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '50cent.me']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-07T17:38:27Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/50cent.me"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4d79c15-778b-5ff7-8905-1477f5e97402","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-19T18:44:02Z","modified":"2026-01-19T18:44:02Z","name":"Phishing domain: 50centx.us","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/50centx.us","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '50centx.us']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-19T18:44:02Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/50centx.us"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--19d48954-c223-569a-a31d-e5ec27d3a127","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-17T19:03:14Z","modified":"2026-02-17T19:03:14Z","name":"Phishing domain: 50centxcas.icu","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/50centxcas.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '50centxcas.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-17T19:03:14Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/50centxcas.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fbf5c23-43da-5924-92b0-7d7e9d0af307","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-01T19:26:34Z","modified":"2025-11-01T19:26:34Z","name":"Phishing domain: 50coin.bet","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/50coin.bet","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '50coin.bet']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-01T19:26:34Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/50coin.bet"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--547070df-f963-566d-bc35-18f87e231c91","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-05T01:39:03Z","modified":"2025-12-05T01:39:03Z","name":"Phishing domain: 50eth.eu","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/50eth.eu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '50eth.eu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-05T01:39:03Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/50eth.eu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e9fbce3-1b59-5b8c-90d2-abc100f5e117","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-13T12:53:39Z","modified":"2025-09-13T12:53:39Z","name":"Phishing domain: 50eth.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/50eth.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '50eth.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-13T12:53:39Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/50eth.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6eca2e48-96df-57e5-88a6-54554e5d9514","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:04Z","modified":"2026-02-26T23:21:04Z","name":"Phishing domain: 50eth.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/50eth.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '50eth.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:04Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/50eth.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--23daf9d1-4782-5ea9-96a7-d9de66adde6e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-24T13:15:04Z","modified":"2026-01-24T13:15:04Z","name":"Phishing domain: 50game.us","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/50game.us","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '50game.us']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-24T13:15:04Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/50game.us"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--49014046-5d05-53b5-9df8-64cc4fb46131","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-05T13:09:05Z","modified":"2026-01-05T13:09:05Z","name":"Phishing domain: 50gg.us","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/50gg.us","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '50gg.us']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-05T13:09:05Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/50gg.us"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2f11be1-e960-51c8-a3ae-4bf3a481f7cd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-18T20:26:21Z","modified":"2026-02-18T20:26:21Z","name":"Phishing domain: 50playz.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/50playz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '50playz.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-18T20:26:21Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/50playz.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d07a0ed4-f713-5907-9f19-216a20348799","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-24T13:24:43Z","modified":"2026-01-24T13:24:43Z","name":"Phishing domain: 50spin.us","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/50spin.us","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '50spin.us']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-24T13:24:43Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/50spin.us"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--28273bff-e54f-50c4-9c4d-cee7936040f9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-07T17:30:28Z","modified":"2026-02-07T17:30:28Z","name":"Phishing domain: 50win.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/50win.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '50win.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-07T17:30:28Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/50win.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cee26faa-ebdd-5fe7-9bb5-db03261ec3dd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-26T12:16:14Z","modified":"2025-12-26T12:16:14Z","name":"Phishing domain: 51156.re","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/51156.re","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '51156.re']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-26T12:16:14Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/51156.re"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--25a0278a-ac45-5051-baf9-f0d3a4fabfa8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 5132.tw","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/5132.tw","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5132.tw']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5132.tw"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6906394f-046e-57e2-9944-222f356d0462","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-07T15:10:50Z","modified":"2025-12-07T15:10:50Z","name":"Phishing domain: 513671.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/513671.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '513671.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-07T15:10:50Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/513671.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--973ed0a8-92bd-5366-8965-c2dd29bac39c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-16T15:13:32Z","modified":"2026-03-16T15:13:32Z","name":"Phishing domain: 51570066.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/51570066.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '51570066.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-16T15:13:32Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/51570066.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--39964c67-fe8f-5149-819a-4b881daaff6b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-18T13:27:54Z","modified":"2026-06-18T13:27:54Z","name":"Phishing domain: 5157111.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/5157111.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5157111.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-18T13:27:54Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5157111.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--61e3062d-cad9-5d6a-a88f-fa2fe8796e97","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 51593050---61652.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/51593050---61652.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '51593050---61652.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/51593050---61652.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a543962-8ec0-53bf-87ee-2cb12a036b6b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-11T16:29:15Z","modified":"2026-07-11T16:29:15Z","name":"Phishing domain: 516starzbet.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/516starzbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '516starzbet.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-11T16:29:15Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/516starzbet.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--44e87701-00c8-5f1d-93e6-e8334f2a251b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-14T02:10:52Z","modified":"2026-08-14T02:10:52Z","name":"Phishing domain: 518869-binance.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Binance. Report & evidence: https://phishdestroy.io/domain/518869-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '518869-binance.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-14T02:10:52Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/518869-binance.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5409c22c-01a3-53b9-8e24-45f2342d5ba8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 519756.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/519756.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '519756.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/519756.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e7ada45-bd5f-5ebe-b557-51718dcc30a3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-02T17:16:33Z","modified":"2026-04-02T17:16:33Z","name":"Phishing domain: 519782coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/519782coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '519782coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-02T17:16:33Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/519782coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4317fde-57c6-5960-abbf-1a0d0ed0f460","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-15T01:47:49Z","modified":"2026-04-15T01:47:49Z","name":"Phishing domain: 51cc691c.opwl.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/51cc691c.opwl.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '51cc691c.opwl.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-15T01:47:49Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/51cc691c.opwl.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--17d803b2-8c12-5443-a433-9698d2962999","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-28T22:00:27Z","modified":"2026-04-28T22:00:27Z","name":"Phishing domain: 51game.biharbhumijankari.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/51game.biharbhumijankari.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '51game.biharbhumijankari.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-28T22:00:27Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/51game.biharbhumijankari.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d54656b5-98e5-5139-b3e5-b510140003b8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:44Z","modified":"2026-02-26T23:23:44Z","name":"Phishing domain: 51jx-q.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Facebook. Report & evidence: https://phishdestroy.io/domain/51jx-q.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '51jx-q.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:44Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/51jx-q.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d33cdc7-be49-5d0e-9a8c-bacf7fd03867","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-15T11:02:02Z","modified":"2025-11-15T11:02:02Z","name":"Phishing domain: 51tcar.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating binance. Report & evidence: https://phishdestroy.io/domain/51tcar.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '51tcar.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-15T11:02:02Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/51tcar.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--66036aa2-791e-5341-b389-7394e1574c1d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T17:37:21Z","modified":"2026-02-26T17:37:21Z","name":"Phishing domain: 51ynedu.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/51ynedu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '51ynedu.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T17:37:21Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/51ynedu.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f4a37b1-61b0-528f-9abb-ee01032cb859","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 520104066hd.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/520104066hd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '520104066hd.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/520104066hd.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cc35d0c-d425-5317-97a7-8244f0d02e06","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-20T19:30:56Z","modified":"2025-12-20T19:30:56Z","name":"Phishing domain: 52190fa5.pathsss.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/52190fa5.pathsss.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '52190fa5.pathsss.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-20T19:30:56Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/52190fa5.pathsss.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b458b463-bd4f-521d-bc47-f618527f2629","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-21T02:20:13Z","modified":"2026-06-21T02:20:13Z","name":"Phishing domain: 5237-mests.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Apple. Report & evidence: https://phishdestroy.io/domain/5237-mests.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5237-mests.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-21T02:20:13Z","labels":["malicious-activity","phishing","brand:apple"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5237-mests.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bca318f2-afa8-5ba9-ba6f-56462ca33ea3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-27T16:14:15Z","modified":"2025-12-27T16:14:15Z","name":"Phishing domain: 523daaa5.ngddguteetdy.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating trezor. Report & evidence: https://phishdestroy.io/domain/523daaa5.ngddguteetdy.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '523daaa5.ngddguteetdy.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-27T16:14:15Z","labels":["malicious-activity","phishing","brand:trezor"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/523daaa5.ngddguteetdy.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--923f62ac-bbd3-59de-9b61-ed957bae6f91","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-26T00:13:02Z","modified":"2025-11-26T00:13:02Z","name":"Phishing domain: 524fb8att0w2curr3ntly82view9ir58ios2.netlify.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating AT&T. Report & evidence: https://phishdestroy.io/domain/524fb8att0w2curr3ntly82view9ir58ios2.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '524fb8att0w2curr3ntly82view9ir58ios2.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-26T00:13:02Z","labels":["malicious-activity","phishing","brand:at&t"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/524fb8att0w2curr3ntly82view9ir58ios2.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1101ac00-cb23-559f-89df-0d1a0ae417da","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-22T15:15:59Z","modified":"2026-01-22T15:15:59Z","name":"Phishing domain: 52531972.swh.strato-hosting.eu","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/52531972.swh.strato-hosting.eu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '52531972.swh.strato-hosting.eu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-22T15:15:59Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/52531972.swh.strato-hosting.eu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bee65c65-a86f-5337-8f35-5718f966cce5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:52:06Z","modified":"2026-07-27T04:52:06Z","name":"Phishing domain: 52548139---61652.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/52548139---61652.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '52548139---61652.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:52:06Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/52548139---61652.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c12a140d-251d-58e2-b912-7825a969c687","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 526161.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/526161.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '526161.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/526161.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1c50b1c-6bf8-5ed7-9d89-156f304c378d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-24T06:02:36Z","modified":"2026-01-24T06:02:36Z","name":"Phishing domain: 52784.my","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/52784.my","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '52784.my']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-24T06:02:36Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/52784.my"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1951390-486e-557e-89cb-ddef616a3f85","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 52818765---61652.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/52818765---61652.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '52818765---61652.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/52818765---61652.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d2fd968-af5b-5f87-8700-2849c4879548","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-19T17:56:10Z","modified":"2026-01-19T17:56:10Z","name":"Phishing domain: 52846358xyz.imtoken1.bmxuij.cn","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating celer. Report & evidence: https://phishdestroy.io/domain/52846358xyz.imtoken1.bmxuij.cn","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '52846358xyz.imtoken1.bmxuij.cn']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-19T17:56:10Z","labels":["malicious-activity","phishing","brand:celer"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/52846358xyz.imtoken1.bmxuij.cn"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cdf5fd6-3546-5335-9a8d-4aa540215219","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-17T17:53:55Z","modified":"2026-02-17T17:53:55Z","name":"Phishing domain: 528kolaybet.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/528kolaybet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '528kolaybet.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-17T17:53:55Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/528kolaybet.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--78fe72c6-8708-52b4-870a-9dbfa3ef1207","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:25Z","modified":"2026-02-26T23:23:25Z","name":"Phishing domain: 52bwws.easypanel.host","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/52bwws.easypanel.host","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '52bwws.easypanel.host']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:25Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/52bwws.easypanel.host"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0b9a974-9250-5773-8bcf-9c4e681e404d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-24T13:35:52Z","modified":"2026-01-24T13:35:52Z","name":"Phishing domain: 52casino.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/52casino.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '52casino.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-24T13:35:52Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/52casino.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--02999ac4-ea8a-5f54-9a7f-4e283b1b8c79","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-19T13:35:07Z","modified":"2026-07-19T13:35:07Z","name":"Phishing domain: 52crs136.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/52crs136.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '52crs136.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-19T13:35:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/52crs136.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--39797ef4-df88-5bb8-9ff4-1e30e561821f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-22T19:15:49Z","modified":"2026-07-22T19:15:49Z","name":"Phishing domain: 52crs168.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/52crs168.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '52crs168.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-22T19:15:49Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/52crs168.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--972471b2-b61d-5dc0-8816-e75083effc30","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-05T06:14:29Z","modified":"2026-07-05T06:14:29Z","name":"Phishing domain: 52crs173.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/52crs173.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '52crs173.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-05T06:14:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/52crs173.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7776cba5-db97-5e9d-9b59-afaea024242c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:42Z","modified":"2026-02-26T23:19:42Z","name":"Phishing domain: 52f1hd.baollll2.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/52f1hd.baollll2.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '52f1hd.baollll2.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:42Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/52f1hd.baollll2.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdf4d5b1-5e88-5af5-9e8a-7dbd4eeedc5d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-05T02:39:17Z","modified":"2026-07-05T02:39:17Z","name":"Phishing domain: 5300samhouston.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating xfinity. Report & evidence: https://phishdestroy.io/domain/5300samhouston.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5300samhouston.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-05T02:39:17Z","labels":["malicious-activity","phishing","brand:xfinity"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5300samhouston.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--824d0ac0-786e-5c41-8f2b-c905f414eb36","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-03T09:55:57Z","modified":"2025-09-03T09:55:57Z","name":"Phishing domain: 53140.tax","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/53140.tax","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '53140.tax']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-03T09:55:57Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/53140.tax"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdbf1790-ef61-5f69-89aa-e2d9ccc10e25","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-10T12:11:51Z","modified":"2026-07-10T12:11:51Z","name":"Phishing domain: 534245google.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/534245google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '534245google.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-10T12:11:51Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/534245google.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2463dc24-8367-560f-b37b-535b8d1db4f4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:17Z","modified":"2026-07-27T06:02:17Z","name":"Phishing domain: 5349.win","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/5349.win","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5349.win']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5349.win"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--74f2182b-73d8-52d4-8668-862f6cdf8f8a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:17Z","modified":"2026-07-27T06:02:17Z","name":"Phishing domain: 53551.co","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/53551.co","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '53551.co']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/53551.co"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cd0ac33-3331-56a3-a201-54e59d5f27a1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:17Z","modified":"2026-07-27T06:02:17Z","name":"Phishing domain: 53552.co","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/53552.co","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '53552.co']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/53552.co"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c020ae15-4605-56f5-9e64-64661624006d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 5364138---6165.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/5364138---6165.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5364138---6165.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5364138---6165.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f57514c2-71c0-585e-8e3e-986a67556781","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:17Z","modified":"2026-07-27T06:02:17Z","name":"Phishing domain: 5377.win","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/5377.win","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5377.win']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5377.win"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf2dc946-3cc6-5f85-b5e5-c0c79a256aec","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-20T15:05:04Z","modified":"2026-07-20T15:05:04Z","name":"Phishing domain: 5391009619.dojiner.at","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating steam. Report & evidence: https://phishdestroy.io/domain/5391009619.dojiner.at","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5391009619.dojiner.at']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-20T15:05:04Z","labels":["malicious-activity","phishing","brand:steam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5391009619.dojiner.at"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec2380e4-7ed0-5dbf-80d0-96ebb0f6b86d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-12T03:22:28Z","modified":"2026-08-12T03:22:28Z","name":"Phishing domain: 53f86c.arcadejafet.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/53f86c.arcadejafet.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '53f86c.arcadejafet.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-12T03:22:28Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/53f86c.arcadejafet.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f628e71-608d-5ba5-a328-7f24cbfb9066","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-27T00:57:27Z","modified":"2026-02-27T00:57:27Z","name":"Phishing domain: 53livesupport.vip","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/53livesupport.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '53livesupport.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-27T00:57:27Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/53livesupport.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--19f683b7-87db-5655-8729-a828466bfa13","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-05T15:18:35Z","modified":"2026-02-05T15:18:35Z","name":"Phishing domain: 53support.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating ledger. Report & evidence: https://phishdestroy.io/domain/53support.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '53support.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-05T15:18:35Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/53support.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5184bda5-b3a6-5eee-b752-21acb1d9038d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-25T03:55:45Z","modified":"2026-02-25T03:55:45Z","name":"Phishing domain: 54-37-76-151.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/54-37-76-151.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '54-37-76-151.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-25T03:55:45Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/54-37-76-151.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--523ebd97-4d9d-59d5-98f4-0d319b368046","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:42:47Z","modified":"2026-07-27T04:42:47Z","name":"Phishing domain: 540382061653.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/540382061653.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '540382061653.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:42:47Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/540382061653.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--442558c0-d86d-5d42-849f-1ade48652d90","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 54161652.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/54161652.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '54161652.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/54161652.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e1a937a-d7b8-5dd3-90fd-c73e09558281","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-02T15:44:56Z","modified":"2026-02-02T15:44:56Z","name":"Phishing domain: 541admin.jiuzhouw.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating amazon. Report & evidence: https://phishdestroy.io/domain/541admin.jiuzhouw.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '541admin.jiuzhouw.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-02T15:44:56Z","labels":["malicious-activity","phishing","brand:amazon"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/541admin.jiuzhouw.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8784bcd-54d1-5748-b768-338231928aa9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-18T19:36:26Z","modified":"2026-07-18T19:36:26Z","name":"Phishing domain: 54313-ledger.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/54313-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '54313-ledger.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-18T19:36:26Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/54313-ledger.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d4bd807-953e-5e48-bc9c-8192fa0e5a3d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-08T14:26:40Z","modified":"2026-07-08T14:26:40Z","name":"Phishing domain: 54314-google.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/54314-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '54314-google.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-08T14:26:40Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/54314-google.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--88e738e7-0af5-5711-ba00-2f4bcf597083","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-18T15:34:56Z","modified":"2025-10-18T15:34:56Z","name":"Phishing domain: 54342342342.duckdns.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating binance. Report & evidence: https://phishdestroy.io/domain/54342342342.duckdns.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '54342342342.duckdns.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-18T15:34:56Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/54342342342.duckdns.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e9a86ac-89d6-564a-a67f-f74db7207d96","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T03:53:51Z","modified":"2026-08-10T03:53:51Z","name":"Phishing domain: 54529.id","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating google. Report & evidence: https://phishdestroy.io/domain/54529.id","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '54529.id']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T03:53:51Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/54529.id"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--90f6b061-3f74-5a2b-b95e-8a9ec4b6014a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-13T20:11:42Z","modified":"2026-08-13T20:11:42Z","name":"Phishing domain: 546235.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/546235.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '546235.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-13T20:11:42Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/546235.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1069e4eb-d4a9-53fe-a93d-0cebc074d262","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-02T14:47:26Z","modified":"2025-09-02T14:47:26Z","name":"Phishing domain: 54770.loan","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/54770.loan","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '54770.loan']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-02T14:47:26Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/54770.loan"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--806c5ffb-2576-5d7f-82f3-41683ca80e6c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:22Z","modified":"2026-02-26T23:21:22Z","name":"Phishing domain: 547gfdjn.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/547gfdjn.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '547gfdjn.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:22Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/547gfdjn.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--86169549-fcd7-513c-8681-17ce9b0bacc1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-17T13:26:03Z","modified":"2025-11-17T13:26:03Z","name":"Phishing domain: 548115coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/548115coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '548115coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-17T13:26:03Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/548115coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f88663c-7cf2-5893-b95e-8db58c91f0b2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-22T19:10:07Z","modified":"2025-12-22T19:10:07Z","name":"Phishing domain: 54d56f18.source-40r.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating trezor. Report & evidence: https://phishdestroy.io/domain/54d56f18.source-40r.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '54d56f18.source-40r.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-22T19:10:07Z","labels":["malicious-activity","phishing","brand:trezor"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/54d56f18.source-40r.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c441744c-54af-5b4f-a2d0-38c6eeb7ff29","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 55054.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/55054.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '55054.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/55054.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ed6f5ff-feb3-52b9-961c-10d1a35b018f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:44Z","modified":"2026-02-26T23:21:44Z","name":"Phishing domain: 550c321bf5.shoppe.com.in","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aave. Report & evidence: https://phishdestroy.io/domain/550c321bf5.shoppe.com.in","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '550c321bf5.shoppe.com.in']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:44Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/550c321bf5.shoppe.com.in"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4de097a2-8a3f-503b-a144-1e4684f63279","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:01Z","modified":"2026-02-26T23:20:01Z","name":"Phishing domain: 5511577.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/5511577.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5511577.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:01Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5511577.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--43e438ff-1f22-5566-a15d-e7141147eb6e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-16T12:28:06Z","modified":"2025-11-16T12:28:06Z","name":"Phishing domain: 55115n.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/55115n.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '55115n.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-16T12:28:06Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/55115n.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8964d741-fb36-51c4-96ac-4c1f2e6264a9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-14T14:53:10Z","modified":"2025-10-14T14:53:10Z","name":"Phishing domain: 552321-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/552321-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '552321-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-14T14:53:10Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/552321-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b34bedcb-2837-5605-89c1-770a19677f89","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:59Z","modified":"2026-02-26T23:23:59Z","name":"Phishing domain: 5523dde3.kjfdjfh.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/5523dde3.kjfdjfh.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5523dde3.kjfdjfh.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:59Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5523dde3.kjfdjfh.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f149711e-f2fe-5fbd-b91c-0c4809fc8d58","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-18T16:37:38Z","modified":"2026-06-18T16:37:38Z","name":"Phishing domain: 554478-zoom.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Zoom. Report & evidence: https://phishdestroy.io/domain/554478-zoom.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '554478-zoom.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-18T16:37:38Z","labels":["malicious-activity","phishing","brand:zoom"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/554478-zoom.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2b7621a-d40f-5250-a28a-adbc26e0deac","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-20T16:29:58Z","modified":"2026-02-20T16:29:58Z","name":"Phishing domain: 554793-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/554793-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '554793-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-20T16:29:58Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/554793-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8de5e1b-f80a-5216-b7f0-39a9fb7f78e9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-17T05:30:08Z","modified":"2025-09-17T05:30:08Z","name":"Phishing domain: 5555-test-55.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/5555-test-55.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5555-test-55.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-17T05:30:08Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5555-test-55.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce8ed3d4-8c90-5046-8309-c9003f66c773","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-17T05:30:44Z","modified":"2025-09-17T05:30:44Z","name":"Phishing domain: 5555-test-555.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/5555-test-555.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5555-test-555.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-17T05:30:44Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5555-test-555.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe092e7f-625a-5275-8636-c007b6c9345d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-21T23:50:44Z","modified":"2025-12-21T23:50:44Z","name":"Phishing domain: 556b6de6.pathsss.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/556b6de6.pathsss.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '556b6de6.pathsss.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-21T23:50:44Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/556b6de6.pathsss.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f600ade-93d3-5da5-80fd-c6cb3da143f4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-03T14:23:55Z","modified":"2026-07-03T14:23:55Z","name":"Phishing domain: 557891.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/557891.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '557891.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-03T14:23:55Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/557891.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--56102519-81f4-5b8f-bec3-6364bb88331d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:27Z","modified":"2026-02-26T23:19:27Z","name":"Phishing domain: 55aave.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/55aave.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '55aave.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:27Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/55aave.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb709826-a364-5feb-91c2-40198683be43","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-12T22:22:49Z","modified":"2025-12-12T22:22:49Z","name":"Phishing domain: 55embedilekitcdn.flazio.site","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/55embedilekitcdn.flazio.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '55embedilekitcdn.flazio.site']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-12T22:22:49Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/55embedilekitcdn.flazio.site"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f7e92c0-0bdd-5cc0-b58a-986851bfbd44","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-24T00:56:06Z","modified":"2025-11-24T00:56:06Z","name":"Phishing domain: 55ysb8.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/55ysb8.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '55ysb8.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-24T00:56:06Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/55ysb8.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6e10f32-f6ea-5f76-842a-992410c170d4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-13T20:53:46Z","modified":"2026-08-13T20:53:46Z","name":"Phishing domain: 560532.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/560532.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '560532.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-13T20:53:46Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/560532.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab1da7da-10e8-52d7-8ad8-50026c19d04c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T18:40:07Z","modified":"2026-08-09T18:40:07Z","name":"Phishing domain: 56092.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/56092.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '56092.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T18:40:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/56092.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d9df96e-353a-50df-a893-5dc4d5a3c871","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T15:55:46Z","modified":"2026-08-09T15:55:46Z","name":"Phishing domain: 56105c.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/56105c.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '56105c.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T15:55:46Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/56105c.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2effc2a-dd2a-52d3-928e-559223c83577","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T05:28:23Z","modified":"2026-07-27T05:28:23Z","name":"Phishing domain: 561650.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/561650.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '561650.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T05:28:23Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/561650.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--232b2975-a76e-5cee-80e5-b965dfd7cd89","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 5621885288.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/5621885288.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5621885288.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5621885288.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcee20fd-f624-53a3-b032-d3964572ca8c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-05T02:37:45Z","modified":"2026-07-05T02:37:45Z","name":"Phishing domain: 564194365756.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/564194365756.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '564194365756.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-05T02:37:45Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/564194365756.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b7db176-5e5d-5ea5-a5de-22a4e83272bd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-15T15:26:03Z","modified":"2025-10-15T15:26:03Z","name":"Phishing domain: 56546-mailbox-validating-209674.weebly.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/56546-mailbox-validating-209674.weebly.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '56546-mailbox-validating-209674.weebly.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-15T15:26:03Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/56546-mailbox-validating-209674.weebly.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d88ff4d-0cf5-5299-b7bb-d451d57d41d6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-17T01:21:31Z","modified":"2025-10-17T01:21:31Z","name":"Phishing domain: 5678016.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/5678016.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5678016.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-17T01:21:31Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5678016.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee34bb54-2898-5d27-80a7-3ef73dbf90e6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:50Z","modified":"2026-02-26T23:20:50Z","name":"Phishing domain: 56m.me","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/56m.me","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '56m.me']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:50Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/56m.me"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--522d3da0-df4a-5c9d-95a2-b94cf53e0b54","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-23T12:31:28Z","modified":"2025-12-23T12:31:28Z","name":"Phishing domain: 5710jj.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/5710jj.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5710jj.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-23T12:31:28Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5710jj.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9bda6ee-054e-5375-a68e-4ca1c29e72f6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-13T15:32:12Z","modified":"2026-03-13T15:32:12Z","name":"Phishing domain: 573.lol","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating discord. Report & evidence: https://phishdestroy.io/domain/573.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '573.lol']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-13T15:32:12Z","labels":["malicious-activity","phishing","brand:discord"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/573.lol"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--27fd0d5b-34ae-5e03-b346-c941df89d4c4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-14T14:28:38Z","modified":"2026-06-14T14:28:38Z","name":"Phishing domain: 57365h.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/57365h.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '57365h.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-14T14:28:38Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/57365h.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--75f893b1-d478-5f21-80a8-f866404f065d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T02:09:06Z","modified":"2026-07-27T02:09:06Z","name":"Phishing domain: 57365u.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/57365u.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '57365u.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T02:09:06Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/57365u.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e65e3f8a-e30d-51fa-84af-f7a73e5f0563","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-02T14:46:36Z","modified":"2026-07-02T14:46:36Z","name":"Phishing domain: 57365y.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/57365y.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '57365y.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-02T14:46:36Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/57365y.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b08e725d-ef07-5a3e-9a31-0a3f434cfc39","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-03T09:56:42Z","modified":"2025-09-03T09:56:42Z","name":"Phishing domain: 57429.my","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/57429.my","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '57429.my']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-03T09:56:42Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/57429.my"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bf70b28-a76d-56c6-9568-004fc33cd57c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 575786165hd.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/575786165hd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '575786165hd.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/575786165hd.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5702ace0-2924-5fc2-8048-e3bf35dcb215","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-12T07:00:51Z","modified":"2026-08-12T07:00:51Z","name":"Phishing domain: 5763685818.dojiner.at","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating steam. Report & evidence: https://phishdestroy.io/domain/5763685818.dojiner.at","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5763685818.dojiner.at']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-12T07:00:51Z","labels":["malicious-activity","phishing","brand:steam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5763685818.dojiner.at"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--50c2af7e-1038-5497-b1f1-83bf2b3ec5b0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T07:14:01Z","modified":"2026-02-13T07:14:01Z","name":"Phishing domain: 577betonlinebrasil.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/577betonlinebrasil.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '577betonlinebrasil.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T07:14:01Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/577betonlinebrasil.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--770014c5-24ef-52e7-9cb3-fdb20ae90365","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-22T18:16:55Z","modified":"2026-02-22T18:16:55Z","name":"Phishing domain: 578392-crypto.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Crypto.com. Report & evidence: https://phishdestroy.io/domain/578392-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '578392-crypto.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-22T18:16:55Z","labels":["malicious-activity","phishing","brand:crypto.com"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/578392-crypto.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4de0efc-84ed-5687-ac72-0c2ceb2b6e10","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 57861652.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/57861652.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '57861652.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/57861652.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b46900c3-2c82-5e0c-995f-15f84b8a9c4f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T19:19:41Z","modified":"2026-02-13T19:19:41Z","name":"Phishing domain: 578643robinhood.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Robinhood. Report & evidence: https://phishdestroy.io/domain/578643robinhood.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '578643robinhood.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T19:19:41Z","labels":["malicious-activity","phishing","brand:robinhood"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/578643robinhood.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--90fd9b94-688b-5ccd-bfd8-7377ddfa4ffe","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-22T18:10:33Z","modified":"2026-02-22T18:10:33Z","name":"Phishing domain: 578metrobahis.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating counter-strike. Report & evidence: https://phishdestroy.io/domain/578metrobahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '578metrobahis.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-22T18:10:33Z","labels":["malicious-activity","phishing","brand:counter-strike"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/578metrobahis.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6492844d-62ce-5b8d-a4ee-2973f1fbc999","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 57900e.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/57900e.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '57900e.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/57900e.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--12d0789e-ab88-5f5a-b85b-fbe050358a1f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-13T21:42:25Z","modified":"2026-08-13T21:42:25Z","name":"Phishing domain: 57bdb7.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/57bdb7.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '57bdb7.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-13T21:42:25Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/57bdb7.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--56502abd-03a4-5084-a72b-eb764dc95f2f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-13T20:13:47Z","modified":"2026-08-13T20:13:47Z","name":"Phishing domain: 57da70.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/57da70.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '57da70.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-13T20:13:47Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/57da70.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5476a501-9caf-5fa0-a930-9e8c5fbbeeef","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-03T09:53:41Z","modified":"2025-09-03T09:53:41Z","name":"Phishing domain: 58035.tax","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/58035.tax","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '58035.tax']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-03T09:53:41Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/58035.tax"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3ce9fa9-44f4-5c84-9f90-4eeedc602f2f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-03T15:27:50Z","modified":"2026-03-03T15:27:50Z","name":"Phishing domain: 58425eef-34d9-4648-8e00-c8d7b9452cc1-00-3lfmewycu9qwo.janeway.replit.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/58425eef-34d9-4648-8e00-c8d7b9452cc1-00-3lfmewycu9qwo.janeway.replit.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '58425eef-34d9-4648-8e00-c8d7b9452cc1-00-3lfmewycu9qwo.janeway.replit.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-03T15:27:50Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/58425eef-34d9-4648-8e00-c8d7b9452cc1-00-3lfmewycu9qwo.janeway.replit.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bf78d6e-7042-5c87-b51c-0c49545d4ebd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:34Z","modified":"2026-02-26T23:19:34Z","name":"Phishing domain: 584c6624-7531-4d50-b8f3-64f7e15cc1c5.team-coinbase.help","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/584c6624-7531-4d50-b8f3-64f7e15cc1c5.team-coinbase.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '584c6624-7531-4d50-b8f3-64f7e15cc1c5.team-coinbase.help']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:34Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/584c6624-7531-4d50-b8f3-64f7e15cc1c5.team-coinbase.help"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae413d74-b4e7-5d62-8889-0608e41540b1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-08T09:19:25Z","modified":"2026-08-08T09:19:25Z","name":"Phishing domain: 58527-binance.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Binance. Report & evidence: https://phishdestroy.io/domain/58527-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '58527-binance.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-08T09:19:25Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/58527-binance.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8bbdc89-98e0-5b04-8fae-ae6c788a0dc6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:33Z","modified":"2026-02-26T23:23:33Z","name":"Phishing domain: 5862873.swh.strato-hosting.eu","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/5862873.swh.strato-hosting.eu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5862873.swh.strato-hosting.eu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:33Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5862873.swh.strato-hosting.eu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7501fbe-3903-5a7a-a4a3-484912aaf974","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-19T15:05:44Z","modified":"2026-02-19T15:05:44Z","name":"Phishing domain: 587291-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/587291-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '587291-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-19T15:05:44Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/587291-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--49f6c0d2-86f7-582e-81f7-3dd7ddb4adb0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-30T10:09:28Z","modified":"2026-06-30T10:09:28Z","name":"Phishing domain: 587betjogos.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/587betjogos.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '587betjogos.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-30T10:09:28Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/587betjogos.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc306c25-6fee-5b60-b192-e0085920d005","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-14T01:38:13Z","modified":"2025-12-14T01:38:13Z","name":"Phishing domain: 5885d885-9b14-470d-b3d6-400df9169dca.mahealthconnextor.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating connext. Report & evidence: https://phishdestroy.io/domain/5885d885-9b14-470d-b3d6-400df9169dca.mahealthconnextor.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5885d885-9b14-470d-b3d6-400df9169dca.mahealthconnextor.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-14T01:38:13Z","labels":["malicious-activity","phishing","brand:connext"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5885d885-9b14-470d-b3d6-400df9169dca.mahealthconnextor.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--46ddd068-03e5-5948-9b95-cb06b57b5a2b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-22T23:34:06Z","modified":"2026-06-22T23:34:06Z","name":"Phishing domain: 588gjakt3uax.shop","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/588gjakt3uax.shop","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '588gjakt3uax.shop']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-22T23:34:06Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/588gjakt3uax.shop"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--75516e63-5fcd-54a8-9451-d885af9ac0e1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-22T23:34:04Z","modified":"2026-06-22T23:34:04Z","name":"Phishing domain: 588gjaoytnjax.shop","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/588gjaoytnjax.shop","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '588gjaoytnjax.shop']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-22T23:34:04Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/588gjaoytnjax.shop"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--78405e5f-f794-5e41-9695-32dcf87f06ef","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-22T23:34:01Z","modified":"2026-06-22T23:34:01Z","name":"Phishing domain: 588gjas2aaxx.shop","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/588gjas2aaxx.shop","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '588gjas2aaxx.shop']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-22T23:34:01Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/588gjas2aaxx.shop"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--571ff508-c0ed-59b2-ae57-c270525a2faa","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-22T23:34:02Z","modified":"2026-06-22T23:34:02Z","name":"Phishing domain: 588gjas2vax.shop","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/588gjas2vax.shop","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '588gjas2vax.shop']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-22T23:34:02Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/588gjas2vax.shop"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad3d3e87-a071-56a1-a344-d1d93a71cf76","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-22T23:33:59Z","modified":"2026-06-22T23:33:59Z","name":"Phishing domain: 588gjasaaxax.shop","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/588gjasaaxax.shop","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '588gjasaaxax.shop']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-22T23:33:59Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/588gjasaaxax.shop"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--808e22c6-69e3-5784-8d55-eefac4690a6b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-22T23:34:00Z","modified":"2026-06-22T23:34:00Z","name":"Phishing domain: 588gjasayux.shop","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/588gjasayux.shop","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '588gjasayux.shop']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-22T23:34:00Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/588gjasayux.shop"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--76f5e1c4-f658-5394-b4ba-f11fbbe740b8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-22T23:34:05Z","modified":"2026-06-22T23:34:05Z","name":"Phishing domain: 588gjjg2k.shop","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/588gjjg2k.shop","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '588gjjg2k.shop']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-22T23:34:05Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/588gjjg2k.shop"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--090557ce-e97f-5218-a1ef-63670a4b096e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-02T15:44:56Z","modified":"2026-02-02T15:44:56Z","name":"Phishing domain: 589adminapi.jiuzhouw.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating amazon. Report & evidence: https://phishdestroy.io/domain/589adminapi.jiuzhouw.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '589adminapi.jiuzhouw.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-02T15:44:56Z","labels":["malicious-activity","phishing","brand:amazon"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/589adminapi.jiuzhouw.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a604f64-ac28-5666-a256-46bb5350fced","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T02:35:30Z","modified":"2026-02-13T02:35:30Z","name":"Phishing domain: 589onxrpl.info","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating XRP. Report & evidence: https://phishdestroy.io/domain/589onxrpl.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '589onxrpl.info']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T02:35:30Z","labels":["malicious-activity","phishing","brand:xrp"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/589onxrpl.info"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--81ca5e82-3413-53a4-ba9c-2546b5422252","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-11T20:49:03Z","modified":"2026-04-11T20:49:03Z","name":"Phishing domain: 589xrpl.info","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coingecko. Report & evidence: https://phishdestroy.io/domain/589xrpl.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '589xrpl.info']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-11T20:49:03Z","labels":["malicious-activity","phishing","brand:coingecko"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/589xrpl.info"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--31fe84e3-b8bc-57ac-918b-ad193f697a4e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T01:40:38Z","modified":"2026-02-13T01:40:38Z","name":"Phishing domain: 58h0wzk70k8d.icu","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/58h0wzk70k8d.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '58h0wzk70k8d.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T01:40:38Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/58h0wzk70k8d.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--310ad63b-da04-5c9f-85dc-2d971a206d8a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-12T12:41:18Z","modified":"2025-11-12T12:41:18Z","name":"Phishing domain: 58hde.vip","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/58hde.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '58hde.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-12T12:41:18Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/58hde.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c95d07d-a4ca-53be-a289-39e302a18046","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-14T14:19:22Z","modified":"2026-07-14T14:19:22Z","name":"Phishing domain: 58hpi8cz7gg1.id.wasmer.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating xfinity. Report & evidence: https://phishdestroy.io/domain/58hpi8cz7gg1.id.wasmer.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '58hpi8cz7gg1.id.wasmer.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-14T14:19:22Z","labels":["malicious-activity","phishing","brand:xfinity"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/58hpi8cz7gg1.id.wasmer.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7272eff7-abdd-5df1-97c5-8e39355e85cd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-04T19:19:55Z","modified":"2026-03-04T19:19:55Z","name":"Phishing domain: 591237coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/591237coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '591237coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-04T19:19:55Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/591237coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--80e7006d-ccbd-50e8-bda7-f13ebecc156b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-31T17:44:52Z","modified":"2026-01-31T17:44:52Z","name":"Phishing domain: 5929589-ledger.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/5929589-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5929589-ledger.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-31T17:44:52Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5929589-ledger.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab8cd375-fc60-5835-a611-8031aaab8706","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-02T15:57:25Z","modified":"2026-02-02T15:57:25Z","name":"Phishing domain: 592admin.jiuzhouw.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating amazon. Report & evidence: https://phishdestroy.io/domain/592admin.jiuzhouw.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '592admin.jiuzhouw.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-02T15:57:25Z","labels":["malicious-activity","phishing","brand:amazon"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/592admin.jiuzhouw.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e508c31d-7832-5831-8ef9-67ab873da80e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:05Z","modified":"2026-02-26T23:24:05Z","name":"Phishing domain: 592cc92d.race-bxj.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/592cc92d.race-bxj.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '592cc92d.race-bxj.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:05Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/592cc92d.race-bxj.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1505a866-9b91-5923-af95-b4a5db5bb3d4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-18T02:36:58Z","modified":"2025-12-18T02:36:58Z","name":"Phishing domain: 593251-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/593251-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '593251-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-18T02:36:58Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/593251-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae85eae2-288b-5ce9-b0e1-138efe35086f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-16T17:58:02Z","modified":"2026-02-16T17:58:02Z","name":"Phishing domain: 59381-crypto.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Crypto.com. Report & evidence: https://phishdestroy.io/domain/59381-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '59381-crypto.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-16T17:58:02Z","labels":["malicious-activity","phishing","brand:crypto.com"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/59381-crypto.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--60b7bc8f-cf72-5aed-a5bf-e15a259beb43","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:22Z","modified":"2026-02-26T23:19:22Z","name":"Phishing domain: 593872-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/593872-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '593872-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:22Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/593872-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f7cd703-d3dc-5a0d-8f4d-3a10faf3433b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-06T14:11:14Z","modified":"2026-07-06T14:11:14Z","name":"Phishing domain: 594939.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/594939.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '594939.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-06T14:11:14Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/594939.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--787524eb-f87e-5d65-8a8e-6e3a18398694","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-11T18:16:20Z","modified":"2026-08-11T18:16:20Z","name":"Phishing domain: 595627-binance.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Binance. Report & evidence: https://phishdestroy.io/domain/595627-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '595627-binance.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-11T18:16:20Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/595627-binance.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c5ef42d-7de9-5bb3-99ed-7e294e208785","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-03T03:34:11Z","modified":"2026-03-03T03:34:11Z","name":"Phishing domain: 595b2566.rsetw.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/595b2566.rsetw.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '595b2566.rsetw.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-03T03:34:11Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/595b2566.rsetw.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f248fe73-029a-5c3c-bde2-0cba13fc13c1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-01T02:19:50Z","modified":"2026-07-01T02:19:50Z","name":"Phishing domain: 5960.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/5960.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5960.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-01T02:19:50Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5960.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb376d30-a374-52c7-a956-a3c8a019ff10","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T23:48:53Z","modified":"2026-08-09T23:48:53Z","name":"Phishing domain: 59762b.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/59762b.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '59762b.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T23:48:53Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/59762b.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--29d22b5f-0664-5660-9ee4-e514b3c10cad","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:42:29Z","modified":"2026-07-27T04:42:29Z","name":"Phishing domain: 598188.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/598188.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '598188.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:42:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/598188.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--054742ca-b4e1-513b-b56a-1e601a5bd963","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-31T17:45:26Z","modified":"2026-01-31T17:45:26Z","name":"Phishing domain: 5991932-ledger.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating x.com. Report & evidence: https://phishdestroy.io/domain/5991932-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5991932-ledger.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-31T17:45:26Z","labels":["malicious-activity","phishing","brand:x.com"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5991932-ledger.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2cdac60-1dcb-5771-9fd4-ae56b5bce3c5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-03T18:25:35Z","modified":"2026-08-03T18:25:35Z","name":"Phishing domain: 5a-evmcheck.lol","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating MetaMask. Report & evidence: https://phishdestroy.io/domain/5a-evmcheck.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5a-evmcheck.lol']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-03T18:25:35Z","labels":["malicious-activity","phishing","brand:metamask"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5a-evmcheck.lol"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7273f57-d2c8-5242-8291-de82021c3dde","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-20T19:06:33Z","modified":"2025-12-20T19:06:33Z","name":"Phishing domain: 5aa6563b.trezo-d82.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/5aa6563b.trezo-d82.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5aa6563b.trezo-d82.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-20T19:06:33Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5aa6563b.trezo-d82.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--398396fe-edce-5eaf-adfc-c6b7793bf4c2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-29T05:32:51Z","modified":"2026-07-29T05:32:51Z","name":"Phishing domain: 5afepa1s.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating SafePal. Report & evidence: https://phishdestroy.io/domain/5afepa1s.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5afepa1s.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-29T05:32:51Z","labels":["malicious-activity","phishing","brand:safepal"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5afepa1s.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1a236fb-0625-50b9-a6ca-83cb981630fa","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-11T18:33:07Z","modified":"2026-08-11T18:33:07Z","name":"Phishing domain: 5b0307.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/5b0307.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5b0307.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-11T18:33:07Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5b0307.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--11800130-f678-5d9e-ad9b-187632c25079","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-01T10:49:17Z","modified":"2026-06-01T10:49:17Z","name":"Phishing domain: 5base.cfd","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Base. Report & evidence: https://phishdestroy.io/domain/5base.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5base.cfd']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-01T10:49:17Z","labels":["malicious-activity","phishing","brand:base"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5base.cfd"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dec21980-3205-5a2e-98ae-6b9dadec1d4e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-17T13:20:51Z","modified":"2025-11-17T13:20:51Z","name":"Phishing domain: 5birweb.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating google. Report & evidence: https://phishdestroy.io/domain/5birweb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5birweb.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-17T13:20:51Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5birweb.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5af09998-2241-502a-9b6c-72916f821c95","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-16T19:01:52Z","modified":"2025-12-16T19:01:52Z","name":"Phishing domain: 5cas.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/5cas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5cas.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-16T19:01:52Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5cas.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--25216d24-f4a6-5648-8a1b-e0e7915e32a3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-03T14:24:55Z","modified":"2026-07-03T14:24:55Z","name":"Phishing domain: 5cc01d07.pinme.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Netflix. Report & evidence: https://phishdestroy.io/domain/5cc01d07.pinme.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5cc01d07.pinme.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-03T14:24:55Z","labels":["malicious-activity","phishing","brand:netflix"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5cc01d07.pinme.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--907026b7-7a1f-5659-9d67-585733999e22","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:17Z","modified":"2026-02-26T23:23:17Z","name":"Phishing domain: 5coins.bet","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/5coins.bet","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5coins.bet']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5coins.bet"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--38fceb8d-1e11-5f55-abcf-b43851d3b17c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: 5cra.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/5cra.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5cra.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5cra.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5156add-490a-544e-96a4-e794dfcea330","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T07:54:19Z","modified":"2026-08-10T07:54:19Z","name":"Phishing domain: 5cs.fail","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating cs2. Report & evidence: https://phishdestroy.io/domain/5cs.fail","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5cs.fail']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T07:54:19Z","labels":["malicious-activity","phishing","brand:cs2"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5cs.fail"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--09196f7d-eb95-5217-9dad-f81eeabcf621","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-02T17:05:24Z","modified":"2026-06-02T17:05:24Z","name":"Phishing domain: 5d14vnfb.space","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/5d14vnfb.space","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5d14vnfb.space']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-02T17:05:24Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5d14vnfb.space"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e01d3097-87db-5b7f-b631-be3a0d7d5e15","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T15:49:24Z","modified":"2026-08-09T15:49:24Z","name":"Phishing domain: 5dab8a.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/5dab8a.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5dab8a.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T15:49:24Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5dab8a.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8663f4c-7bdf-5d2e-8576-cc6a9f7b7c73","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: 5e-play.at","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/5e-play.at","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5e-play.at']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5e-play.at"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0492c4a-b3ba-55e7-8bdd-a11ffbfdbb12","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-27T14:24:08Z","modified":"2026-03-27T14:24:08Z","name":"Phishing domain: 5e-play.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating cs2. Report & evidence: https://phishdestroy.io/domain/5e-play.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5e-play.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-27T14:24:08Z","labels":["malicious-activity","phishing","brand:cs2"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5e-play.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f5227d6-6445-5366-8f29-2c54737822f7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-19T15:19:37Z","modified":"2026-02-19T15:19:37Z","name":"Phishing domain: 5e0f.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/5e0f.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5e0f.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-19T15:19:37Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5e0f.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ba105ff-a040-52d7-a881-d92b352d0d48","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-11T18:23:17Z","modified":"2026-08-11T18:23:17Z","name":"Phishing domain: 5e20c6.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/5e20c6.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5e20c6.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-11T18:23:17Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5e20c6.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4844e3c7-cbf5-534e-af30-5d753f3474e1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-12T22:12:06Z","modified":"2025-12-12T22:12:06Z","name":"Phishing domain: 5eeaj-fiaaa-aaaam-qd27q-cai.icp0.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/5eeaj-fiaaa-aaaam-qd27q-cai.icp0.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5eeaj-fiaaa-aaaam-qd27q-cai.icp0.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-12T22:12:06Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5eeaj-fiaaa-aaaam-qd27q-cai.icp0.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fee5514-7268-58c2-8249-a8b5e75a1991","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-07-22T11:43:27Z","modified":"2025-07-22T11:43:27Z","name":"Phishing domain: 5eplay-accept.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating steam. Report & evidence: https://phishdestroy.io/domain/5eplay-accept.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5eplay-accept.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-07-22T11:43:27Z","labels":["malicious-activity","phishing","brand:steam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5eplay-accept.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--17d9c395-f41b-545a-b447-afb050229488","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-27T14:24:07Z","modified":"2026-03-27T14:24:07Z","name":"Phishing domain: 5eplay.at","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/5eplay.at","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5eplay.at']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-27T14:24:07Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5eplay.at"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--78798273-53ba-5ec1-b8ac-fb347c4e1255","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-27T14:24:07Z","modified":"2026-03-27T14:24:07Z","name":"Phishing domain: 5eplay.co.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating cs2. Report & evidence: https://phishdestroy.io/domain/5eplay.co.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5eplay.co.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-27T14:24:07Z","labels":["malicious-activity","phishing","brand:cs2"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5eplay.co.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f413e71-58d9-5e90-b21c-0c6b3f0e29c6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-27T14:24:07Z","modified":"2026-03-27T14:24:07Z","name":"Phishing domain: 5eplays.co.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating cs2. Report & evidence: https://phishdestroy.io/domain/5eplays.co.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5eplays.co.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-27T14:24:07Z","labels":["malicious-activity","phishing","brand:cs2"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5eplays.co.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d56ca633-4e3b-555e-b3f3-5fd9aeb2240f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-27T14:24:07Z","modified":"2026-03-27T14:24:07Z","name":"Phishing domain: 5eplays.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating cs2. Report & evidence: https://phishdestroy.io/domain/5eplays.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5eplays.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-27T14:24:07Z","labels":["malicious-activity","phishing","brand:cs2"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5eplays.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fdcf348-d4b6-5bac-8802-533be970167e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-18T16:16:05Z","modified":"2026-04-18T16:16:05Z","name":"Phishing domain: 5epolay.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/5epolay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5epolay.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-18T16:16:05Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5epolay.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--53802c15-2843-5e12-a6d9-8d4e3de05360","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2024-05-11T07:17:11Z","modified":"2024-05-11T07:17:11Z","name":"Phishing domain: 5eth.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating ethereum. Report & evidence: https://phishdestroy.io/domain/5eth.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5eth.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2024-05-11T07:17:11Z","labels":["malicious-activity","phishing","brand:ethereum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5eth.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--921fd130-f5a8-5189-b02a-96a9264a0260","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-11T18:27:14Z","modified":"2026-08-11T18:27:14Z","name":"Phishing domain: 5f98ad.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/5f98ad.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5f98ad.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-11T18:27:14Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5f98ad.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e014c66d-c9ae-5df1-9d61-46cbe15b9ebc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-08T16:35:35Z","modified":"2026-06-08T16:35:35Z","name":"Phishing domain: 5fptrd4shebpfevicuwi3t2zw3spo64lzeohgscxye5t6cm67dvq.arweave.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/5fptrd4shebpfevicuwi3t2zw3spo64lzeohgscxye5t6cm67dvq.arweave.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5fptrd4shebpfevicuwi3t2zw3spo64lzeohgscxye5t6cm67dvq.arweave.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-08T16:35:35Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5fptrd4shebpfevicuwi3t2zw3spo64lzeohgscxye5t6cm67dvq.arweave.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1196fccd-2478-59b3-93d3-ba3327640b24","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:22Z","modified":"2026-02-26T23:22:22Z","name":"Phishing domain: 5gf1d.baollll2.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/5gf1d.baollll2.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5gf1d.baollll2.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:22Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5gf1d.baollll2.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c77c1185-71be-5296-a666-b0115cf24668","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-05T00:19:54Z","modified":"2026-04-05T00:19:54Z","name":"Phishing domain: 5gringos.casino","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/5gringos.casino","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5gringos.casino']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-05T00:19:54Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5gringos.casino"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--52881d05-12d0-5839-b7b3-3637ab55ae2b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-02T20:45:44Z","modified":"2026-07-02T20:45:44Z","name":"Phishing domain: 5ijrza5j7lbxhvkjbt2cokoiqybix4kc4qeu2do6ro5ercez75la.turbo-gateway.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/5ijrza5j7lbxhvkjbt2cokoiqybix4kc4qeu2do6ro5ercez75la.turbo-gateway.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5ijrza5j7lbxhvkjbt2cokoiqybix4kc4qeu2do6ro5ercez75la.turbo-gateway.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-02T20:45:44Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5ijrza5j7lbxhvkjbt2cokoiqybix4kc4qeu2do6ro5ercez75la.turbo-gateway.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--739ae72a-261b-5b92-aad2-871f177d03b2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-11T15:12:07Z","modified":"2026-02-11T15:12:07Z","name":"Phishing domain: 5jkl8ae8ph.ucarecd.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/5jkl8ae8ph.ucarecd.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5jkl8ae8ph.ucarecd.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-11T15:12:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5jkl8ae8ph.ucarecd.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a0a384a-8ab8-5bc0-bcde-6a9d4a3a585e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T12:01:29Z","modified":"2026-02-13T12:01:29Z","name":"Phishing domain: 5kbm66kdabg.icu","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/5kbm66kdabg.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5kbm66kdabg.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T12:01:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5kbm66kdabg.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--88c33095-45b2-58ed-a1ad-dd0bfe18835b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-11T18:30:02Z","modified":"2026-03-11T18:30:02Z","name":"Phishing domain: 5kvisionhub.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating outlook. Report & evidence: https://phishdestroy.io/domain/5kvisionhub.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5kvisionhub.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-11T18:30:02Z","labels":["malicious-activity","phishing","brand:outlook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5kvisionhub.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cedcf9a-88a8-5b1f-81a6-957b1b22f1c8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T18:40:07Z","modified":"2026-08-09T18:40:07Z","name":"Phishing domain: 5lvo.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/5lvo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5lvo.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T18:40:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5lvo.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--411e71b3-7a4a-5a3f-a44c-c8aff023f6c6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-21T20:45:17Z","modified":"2026-07-21T20:45:17Z","name":"Phishing domain: 5minpod.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating trustwallet. Report & evidence: https://phishdestroy.io/domain/5minpod.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5minpod.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-21T20:45:17Z","labels":["malicious-activity","phishing","brand:trustwallet"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5minpod.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--806a67b4-6cf3-5020-b63b-b9867ff3bdf8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-07T12:37:24Z","modified":"2025-11-07T12:37:24Z","name":"Phishing domain: 5nt.d00.mytemp.website","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/5nt.d00.mytemp.website","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5nt.d00.mytemp.website']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-07T12:37:24Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5nt.d00.mytemp.website"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9a711e6-8bc4-54dd-be97-8d9ffc88a2f0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-08T16:36:21Z","modified":"2026-06-08T16:36:21Z","name":"Phishing domain: 5nx5rijeqtddbfzmvt5cevyyoitodrzqtzjwu7zk6elszyl4j62a.arweave.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/5nx5rijeqtddbfzmvt5cevyyoitodrzqtzjwu7zk6elszyl4j62a.arweave.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5nx5rijeqtddbfzmvt5cevyyoitodrzqtzjwu7zk6elszyl4j62a.arweave.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-08T16:36:21Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5nx5rijeqtddbfzmvt5cevyyoitodrzqtzjwu7zk6elszyl4j62a.arweave.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--385ef621-f18a-558f-bb97-dce334da0f1e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-08T16:36:30Z","modified":"2026-06-08T16:36:30Z","name":"Phishing domain: 5pejwv4s7bbb4w5gcfnpnuyvtr4qgwxl6rhyms6rlrahtdalrctq.arweave.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/5pejwv4s7bbb4w5gcfnpnuyvtr4qgwxl6rhyms6rlrahtdalrctq.arweave.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5pejwv4s7bbb4w5gcfnpnuyvtr4qgwxl6rhyms6rlrahtdalrctq.arweave.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-08T16:36:30Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5pejwv4s7bbb4w5gcfnpnuyvtr4qgwxl6rhyms6rlrahtdalrctq.arweave.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--28c9723c-055c-53e6-a5f2-9de03b17bb7b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-07T01:09:50Z","modified":"2026-06-07T01:09:50Z","name":"Phishing domain: 5pfusdjeqipucmpyqcd4p6tv576idbsqkkyo4kc52s6d6fhjwqua.arweave.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/5pfusdjeqipucmpyqcd4p6tv576idbsqkkyo4kc52s6d6fhjwqua.arweave.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5pfusdjeqipucmpyqcd4p6tv576idbsqkkyo4kc52s6d6fhjwqua.arweave.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-07T01:09:50Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5pfusdjeqipucmpyqcd4p6tv576idbsqkkyo4kc52s6d6fhjwqua.arweave.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9033a51-75ef-5c8f-8bdd-ea3118b98bbc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-19T18:26:53Z","modified":"2026-01-19T18:26:53Z","name":"Phishing domain: 5pump.fun","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating curve. Report & evidence: https://phishdestroy.io/domain/5pump.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5pump.fun']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-19T18:26:53Z","labels":["malicious-activity","phishing","brand:curve"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5pump.fun"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--93655ee2-dd8b-5946-a26d-05fa34e507e8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T01:52:06Z","modified":"2026-02-13T01:52:06Z","name":"Phishing domain: 5qh3mq0gexai.icu","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/5qh3mq0gexai.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5qh3mq0gexai.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T01:52:06Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5qh3mq0gexai.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f291249-de67-52dc-af3b-f34b55f63be5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-17T03:04:43Z","modified":"2026-02-17T03:04:43Z","name":"Phishing domain: 5r2ew1674037825681.s-meta.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/5r2ew1674037825681.s-meta.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5r2ew1674037825681.s-meta.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-17T03:04:43Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5r2ew1674037825681.s-meta.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--533fab86-e348-5b84-badf-cb7e221a7417","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-02T00:27:02Z","modified":"2026-05-02T00:27:02Z","name":"Phishing domain: 5sim.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/5sim.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5sim.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-02T00:27:02Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5sim.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a5ac6ee-c02a-5f62-aa4d-41623814dea9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-28T07:53:09Z","modified":"2026-03-28T07:53:09Z","name":"Phishing domain: 5slon-5cc.ru","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating [\"telegram\"]. Report & evidence: https://phishdestroy.io/domain/5slon-5cc.ru","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5slon-5cc.ru']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-28T07:53:09Z","labels":["malicious-activity","phishing","brand:[\"telegram\"]"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5slon-5cc.ru"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--36e05e1a-ee5a-5dbc-b857-b902af072eda","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-28T07:53:09Z","modified":"2026-03-28T07:53:09Z","name":"Phishing domain: 5slon5-cc.ru","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating [\"telegram\"]. Report & evidence: https://phishdestroy.io/domain/5slon5-cc.ru","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5slon5-cc.ru']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-28T07:53:09Z","labels":["malicious-activity","phishing","brand:[\"telegram\"]"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5slon5-cc.ru"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5f2d347-f18a-5614-bcc9-7f353919afc4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-28T07:53:07Z","modified":"2026-03-28T07:53:07Z","name":"Phishing domain: 5slon5cc.ru","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating [\"telegram\"]. Report & evidence: https://phishdestroy.io/domain/5slon5cc.ru","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5slon5cc.ru']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-28T07:53:07Z","labels":["malicious-activity","phishing","brand:[\"telegram\"]"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5slon5cc.ru"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--35ccdec3-a283-5d2d-951d-e177a3e59477","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-19T12:43:13Z","modified":"2025-11-19T12:43:13Z","name":"Phishing domain: 5smdr2nw.at-the-lake.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Telegram. Report & evidence: https://phishdestroy.io/domain/5smdr2nw.at-the-lake.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5smdr2nw.at-the-lake.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-19T12:43:13Z","labels":["malicious-activity","phishing","brand:telegram"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5smdr2nw.at-the-lake.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a86dd5e1-641b-5b8a-8ac1-0bd79c0daa1d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-24T05:58:04Z","modified":"2026-03-24T05:58:04Z","name":"Phishing domain: 5sol.pro","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating MetaMask. Report & evidence: https://phishdestroy.io/domain/5sol.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5sol.pro']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-24T05:58:04Z","labels":["malicious-activity","phishing","brand:metamask"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5sol.pro"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--21e3d9a4-53fd-5fa3-a633-526c6efb917a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-05T15:05:40Z","modified":"2026-01-05T15:05:40Z","name":"Phishing domain: 5starz.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating cryptoscam. Report & evidence: https://phishdestroy.io/domain/5starz.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5starz.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-05T15:05:40Z","labels":["malicious-activity","phishing","brand:cryptoscam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5starz.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--66e675c9-a389-5056-a4d4-917e0a3d2ff0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-14T12:06:13Z","modified":"2026-06-14T12:06:13Z","name":"Phishing domain: 5th-scape-token.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating OKX. Report & evidence: https://phishdestroy.io/domain/5th-scape-token.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5th-scape-token.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-14T12:06:13Z","labels":["malicious-activity","phishing","brand:okx"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5th-scape-token.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--57c9c77d-2508-5f9b-89eb-fc9737ec6b88","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:01Z","modified":"2026-02-26T23:21:01Z","name":"Phishing domain: 5thscape-live.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/5thscape-live.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5thscape-live.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:01Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5thscape-live.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4e1d3e5-6d5b-53e4-9bb2-35c972158576","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-17T06:26:52Z","modified":"2026-05-17T06:26:52Z","name":"Phishing domain: 5thscapedapp.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/5thscapedapp.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5thscapedapp.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-17T06:26:52Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5thscapedapp.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9389c84-07a8-53d5-ba7b-9527ddaa7e87","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:07Z","modified":"2026-02-26T23:24:07Z","name":"Phishing domain: 5thsscape.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating discord. Report & evidence: https://phishdestroy.io/domain/5thsscape.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5thsscape.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:07Z","labels":["malicious-activity","phishing","brand:discord"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5thsscape.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c295990b-8b04-59ca-8f00-d2a910660967","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:55Z","modified":"2026-02-26T23:20:55Z","name":"Phishing domain: 5umb-casefb120383.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/5umb-casefb120383.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5umb-casefb120383.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:55Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5umb-casefb120383.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9b01b81-7338-55e1-bf3e-e6cd3e1b9407","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-07T21:55:46Z","modified":"2026-07-07T21:55:46Z","name":"Phishing domain: 5upgrader.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/5upgrader.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5upgrader.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-07T21:55:46Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5upgrader.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ce50fab-5f15-57e5-a376-6861f934510e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T13:31:32Z","modified":"2026-02-13T13:31:32Z","name":"Phishing domain: 5vero.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/5vero.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5vero.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T13:31:32Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5vero.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9cd5747-f24d-539e-8378-9d8dc0c35cd6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-07T02:04:58Z","modified":"2026-06-07T02:04:58Z","name":"Phishing domain: 5vrzr4lgncn5ethb7pigdepkwpb427mxkwab5fgvrmkc75j7psdq.arweave.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/5vrzr4lgncn5ethb7pigdepkwpb427mxkwab5fgvrmkc75j7psdq.arweave.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5vrzr4lgncn5ethb7pigdepkwpb427mxkwab5fgvrmkc75j7psdq.arweave.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-07T02:04:58Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5vrzr4lgncn5ethb7pigdepkwpb427mxkwab5fgvrmkc75j7psdq.arweave.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--76df4f0e-6aa7-58c7-9209-387fdab6b4d1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-24T12:37:18Z","modified":"2026-06-24T12:37:18Z","name":"Phishing domain: 5web.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/5web.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5web.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-24T12:37:18Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5web.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a78770a-f328-521e-a687-a606b78aad15","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-06T12:44:04Z","modified":"2025-08-06T12:44:04Z","name":"Phishing domain: 5win.games","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating cryptoscam. Report & evidence: https://phishdestroy.io/domain/5win.games","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5win.games']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-06T12:44:04Z","labels":["malicious-activity","phishing","brand:cryptoscam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5win.games"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--729ddcdd-e2b6-52c9-b0cf-1446549653ec","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-31T02:10:49Z","modified":"2026-07-31T02:10:49Z","name":"Phishing domain: 5ww-umb.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating umbfc. Report & evidence: https://phishdestroy.io/domain/5ww-umb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5ww-umb.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-31T02:10:49Z","labels":["malicious-activity","phishing","brand:umbfc"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5ww-umb.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--edc8a0b2-1726-5df9-aea7-659d26c087e7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-21T14:09:33Z","modified":"2026-06-21T14:09:33Z","name":"Phishing domain: 5x30pm.github.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/5x30pm.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5x30pm.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-21T14:09:33Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5x30pm.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d943dc80-3e96-5cf1-90c2-1d40e5f7639e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-17T17:57:51Z","modified":"2026-02-17T17:57:51Z","name":"Phishing domain: 5x555.icu","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/5x555.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5x555.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-17T17:57:51Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5x555.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--52a04926-1df8-5972-aa19-a652f8e763da","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T04:50:03Z","modified":"2026-02-13T04:50:03Z","name":"Phishing domain: 5x555.vip","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/5x555.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5x555.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T04:50:03Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5x555.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9d8203d-2904-55d0-96ff-ccd6aa2cb17a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-27T01:02:50Z","modified":"2026-02-27T01:02:50Z","name":"Phishing domain: 5xcas.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/5xcas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5xcas.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-27T01:02:50Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5xcas.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa15cc98-ed67-50a2-a159-89ca0e82d49d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-17T21:00:30Z","modified":"2025-12-17T21:00:30Z","name":"Phishing domain: 5xdashboardoffical.us","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/5xdashboardoffical.us","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5xdashboardoffical.us']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-17T21:00:30Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5xdashboardoffical.us"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--91ab67e0-3f27-5e47-ac78-18faee36561b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-20T14:41:45Z","modified":"2026-04-20T14:41:45Z","name":"Phishing domain: 5xwin.ru","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/5xwin.ru","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5xwin.ru']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-20T14:41:45Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5xwin.ru"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6413f35-53a8-5f16-bd78-13143b4d2dff","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-06T04:01:30Z","modified":"2025-09-06T04:01:30Z","name":"Phishing domain: 5y7vh-naaaa-aaaad-qeufa-cai.icp0.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ethereum. Report & evidence: https://phishdestroy.io/domain/5y7vh-naaaa-aaaad-qeufa-cai.icp0.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5y7vh-naaaa-aaaad-qeufa-cai.icp0.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-06T04:01:30Z","labels":["malicious-activity","phishing","brand:ethereum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5y7vh-naaaa-aaaad-qeufa-cai.icp0.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa18932a-f0e5-5e2a-99c4-583a9bcaa374","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-07T01:10:02Z","modified":"2026-06-07T01:10:02Z","name":"Phishing domain: 5zamnsyszvl6w5qeypjey737v355mdbd5pbao7wybkttbmgisbea.arweave.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/5zamnsyszvl6w5qeypjey737v355mdbd5pbao7wybkttbmgisbea.arweave.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5zamnsyszvl6w5qeypjey737v355mdbd5pbao7wybkttbmgisbea.arweave.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-07T01:10:02Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5zamnsyszvl6w5qeypjey737v355mdbd5pbao7wybkttbmgisbea.arweave.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--858f695f-a64e-5d1e-bffb-39f24aed76b3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-05T11:37:01Z","modified":"2026-08-05T11:37:01Z","name":"Phishing domain: 5zrt3zrrzr.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/5zrt3zrrzr.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '5zrt3zrrzr.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-05T11:37:01Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/5zrt3zrrzr.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--090032ef-af7c-5b03-88bb-e5cbe27c8dda","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-24T15:04:19Z","modified":"2025-11-24T15:04:19Z","name":"Phishing domain: 60039.fduyixjy.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating tiktok. Report & evidence: https://phishdestroy.io/domain/60039.fduyixjy.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '60039.fduyixjy.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-24T15:04:19Z","labels":["malicious-activity","phishing","brand:tiktok"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/60039.fduyixjy.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d674756-648e-5db5-8bec-49ce4747dd76","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 6026545---6165.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6026545---6165.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6026545---6165.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6026545---6165.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0b8dba5-52ce-5231-8adb-9df95adf6874","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 60291ee.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/60291ee.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '60291ee.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/60291ee.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--337e1308-1c45-5b23-a5e2-c59788d92c20","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 60293ii.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/60293ii.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '60293ii.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/60293ii.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--30d12e98-c0a8-5b70-9a82-87b77edaa9f4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 60549981---61652.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/60549981---61652.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '60549981---61652.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/60549981---61652.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ba7f36d-f593-5e88-ae55-7b909e121aaa","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-13T15:11:52Z","modified":"2025-12-13T15:11:52Z","name":"Phishing domain: 606.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/606.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '606.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-13T15:11:52Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/606.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddfd505e-2d74-55d2-b672-84529ca1b7e2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-28T15:13:15Z","modified":"2026-02-28T15:13:15Z","name":"Phishing domain: 60676.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/60676.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '60676.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-28T15:13:15Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/60676.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--afb8d60b-d1da-55ed-9166-9b3eaa934e77","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-03T14:31:48Z","modified":"2026-07-03T14:31:48Z","name":"Phishing domain: 60718.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/60718.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '60718.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-03T14:31:48Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/60718.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6844411-3105-555b-a639-e272232113d0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T15:58:21Z","modified":"2026-08-09T15:58:21Z","name":"Phishing domain: 60829.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating gmail. Report & evidence: https://phishdestroy.io/domain/60829.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '60829.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T15:58:21Z","labels":["malicious-activity","phishing","brand:gmail"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/60829.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7575a458-a7e9-5ee7-b52e-727af5ec3ed9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-18T15:17:01Z","modified":"2026-03-18T15:17:01Z","name":"Phishing domain: 6093.greenfrienndlypaint.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6093.greenfrienndlypaint.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6093.greenfrienndlypaint.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-18T15:17:01Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6093.greenfrienndlypaint.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--88feebee-aae7-58e3-b944-ce3ffe7040d6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T12:02:03Z","modified":"2026-07-27T12:02:03Z","name":"Phishing domain: 60sfire.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/60sfire.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '60sfire.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T12:02:03Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/60sfire.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d597d81-e8ee-5952-9bfe-dc2ec898576d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 6108518---6165.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6108518---6165.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6108518---6165.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6108518---6165.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec350048-5322-5606-bc22-c0722fe57de1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:17Z","modified":"2026-07-27T06:02:17Z","name":"Phishing domain: 6111.win","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6111.win","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6111.win']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6111.win"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--76f81979-55b9-55c7-915f-ec7257ed4112","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-20T15:01:57Z","modified":"2026-07-20T15:01:57Z","name":"Phishing domain: 6127576648.dojiner.at","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating steam. Report & evidence: https://phishdestroy.io/domain/6127576648.dojiner.at","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6127576648.dojiner.at']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-20T15:01:57Z","labels":["malicious-activity","phishing","brand:steam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6127576648.dojiner.at"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ae46e64-1b43-5b38-91dd-07f73a4fc5b0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 6133975---6165.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6133975---6165.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6133975---6165.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6133975---6165.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--59511686-646a-5fce-af02-e059598ca7c7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-08T14:44:50Z","modified":"2026-07-08T14:44:50Z","name":"Phishing domain: 613823.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/613823.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '613823.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-08T14:44:50Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/613823.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d9aee2d-ad91-5c70-8cf7-5375ca780957","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-13T03:00:07Z","modified":"2026-07-13T03:00:07Z","name":"Phishing domain: 61477.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/61477.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '61477.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-13T03:00:07Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/61477.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--80d761d5-c74f-5efa-bb60-10a5c38fda04","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-13T03:00:07Z","modified":"2026-07-13T03:00:07Z","name":"Phishing domain: 61491.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/61491.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '61491.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-13T03:00:07Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/61491.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eecdef0e-a5c7-52f8-8073-0415587c2813","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:17Z","modified":"2026-07-27T06:02:17Z","name":"Phishing domain: 61608.tw","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/61608.tw","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '61608.tw']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/61608.tw"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f192fdc5-c62c-59c2-85fa-8731343c7be9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:51:10Z","modified":"2026-07-27T04:51:10Z","name":"Phishing domain: 61650a.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/61650a.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '61650a.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:51:10Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/61650a.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e1824d4-72fc-55f7-856e-c79b5de6035a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 61650app.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/61650app.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '61650app.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/61650app.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3168678a-9113-580d-8860-e501771120b4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:42:33Z","modified":"2026-07-27T04:42:33Z","name":"Phishing domain: 61650app.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/61650app.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '61650app.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:42:33Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/61650app.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--22e2c6da-34a1-5d65-96ce-a1b0c2f9ca9e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 61650b.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/61650b.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '61650b.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/61650b.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd282539-0d3a-596b-a410-5e1768adc31c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:45:05Z","modified":"2026-07-27T04:45:05Z","name":"Phishing domain: 61650h.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/61650h.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '61650h.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:45:05Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/61650h.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6d5a00f-e95c-57eb-9a46-6fe96d3aa10b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 61650j.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/61650j.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '61650j.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/61650j.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dc44e71-12ab-5fc3-b0b8-31d6e27231c0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 61650n.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/61650n.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '61650n.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/61650n.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf2472b2-12c1-5dee-8987-3c9fde4197e3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 61650p.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/61650p.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '61650p.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/61650p.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7caa4d1d-8ba1-5974-a405-87a7babdae53","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 61650t.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/61650t.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '61650t.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/61650t.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a2cb1ab-bbe9-5f1b-97a3-de7b250e3104","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 61650u.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/61650u.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '61650u.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/61650u.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--98842716-750c-591c-a5ea-7ea7a7d12025","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 61652j.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/61652j.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '61652j.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/61652j.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--40a7d7ee-662a-5298-bfa0-8740976b73de","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 61652k.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/61652k.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '61652k.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/61652k.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b39607a-8831-5a26-b4cd-46a0cbea7a50","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 61652n.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/61652n.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '61652n.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/61652n.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a52c4b49-dda7-55d2-8e5c-640c1d85e9b1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 61652yh.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/61652yh.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '61652yh.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/61652yh.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0212b11d-cd9c-530d-8ce7-8d883c805ec1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 61653amxpj.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/61653amxpj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '61653amxpj.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/61653amxpj.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1dadf971-d2a2-58f5-b7bf-617bb8ba8b4c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 61653e.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/61653e.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '61653e.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/61653e.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a55b2efb-7637-5cc5-9401-53ffdedc11c6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 61653f.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/61653f.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '61653f.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/61653f.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--06f43d7b-47ad-5077-8db1-202966ee1d78","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:44:06Z","modified":"2026-07-27T04:44:06Z","name":"Phishing domain: 61653h.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/61653h.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '61653h.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:44:06Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/61653h.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4b8bf79-ca3b-573b-8544-00238f4007fa","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 61653l.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/61653l.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '61653l.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/61653l.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e52c526c-1e0e-5279-91cc-7731a0836958","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 61653m.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/61653m.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '61653m.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/61653m.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a992829-e875-51b1-842f-573b4eb61a52","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 61653r.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/61653r.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '61653r.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/61653r.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a387d619-ec05-5c11-a689-1630a100274a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 61653z.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/61653z.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '61653z.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/61653z.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e601bc1b-e750-5433-9ba8-cef3268ccf56","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 61654app.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/61654app.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '61654app.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/61654app.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0914541-6faf-5f46-88d1-28d98d7fbed8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 61654c.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/61654c.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '61654c.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/61654c.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce82b5c4-d55d-5068-8169-65e275089afc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 61654m.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/61654m.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '61654m.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/61654m.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d330c3d5-afc5-582c-b6b6-f20593139c98","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 61654s.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/61654s.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '61654s.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/61654s.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fbe6a76-7e95-5553-a520-029e93de4ad7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 61654u.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/61654u.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '61654u.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/61654u.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--302a20cf-3559-539f-87b2-f6b63f84ed2f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 61654zxd.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/61654zxd.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '61654zxd.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/61654zxd.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4dc1354e-2fb6-5408-9fc0-b8dd766bdce8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 6165dianzi.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6165dianzi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6165dianzi.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6165dianzi.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fa44b0a-1fd2-5c9e-bf42-e453effe1165","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 6165e.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6165e.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6165e.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6165e.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d43b3b7b-5705-5ced-9815-7be583d8ac97","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:45:08Z","modified":"2026-07-27T04:45:08Z","name":"Phishing domain: 6165ff.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6165ff.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6165ff.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:45:08Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6165ff.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--87e244b2-b46a-51fa-ad1f-bc5ab35f8e25","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:42:39Z","modified":"2026-07-27T04:42:39Z","name":"Phishing domain: 6165l.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6165l.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6165l.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:42:39Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6165l.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c40550d5-c168-5706-934f-626c89a6cfee","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 6165m.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6165m.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6165m.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6165m.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--adaaf12b-6e60-5a48-847f-36646b1e6a85","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:42:36Z","modified":"2026-07-27T04:42:36Z","name":"Phishing domain: 6165n.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6165n.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6165n.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:42:36Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6165n.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8c7a71c-58da-5d35-89d3-9ebbfb6d91c4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 6165pay.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6165pay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6165pay.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6165pay.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--59df6c80-cd0c-5e54-bf49-ca35cacfe777","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 6165sands.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6165sands.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6165sands.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6165sands.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7186b6d5-1a10-5b98-a75c-9b99ddae568a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:45:14Z","modified":"2026-07-27T04:45:14Z","name":"Phishing domain: 6165touzhu.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6165touzhu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6165touzhu.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:45:14Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6165touzhu.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ce60072-5231-5a9d-a29a-1d9c6df13bcd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:51:41Z","modified":"2026-07-27T04:51:41Z","name":"Phishing domain: 6165xianshang.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6165xianshang.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6165xianshang.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:51:41Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6165xianshang.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed28e198-af37-56f1-9a62-93ed0ddc1309","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T05:28:23Z","modified":"2026-07-27T05:28:23Z","name":"Phishing domain: 6165xinyu.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6165xinyu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6165xinyu.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T05:28:23Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6165xinyu.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c134a747-e8e2-5f9d-99f4-02d6a0a49258","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:42:52Z","modified":"2026-07-27T04:42:52Z","name":"Phishing domain: 6165yh.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6165yh.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6165yh.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:42:52Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6165yh.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e98dad4-f4b1-5fed-adb2-70e939612240","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-13T03:00:07Z","modified":"2026-07-13T03:00:07Z","name":"Phishing domain: 61681.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/61681.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '61681.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-13T03:00:07Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/61681.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a281d8be-af79-5a1e-93fe-98c407b79147","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:16Z","modified":"2026-07-27T06:02:16Z","name":"Phishing domain: 61744.pet","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/61744.pet","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '61744.pet']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:16Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/61744.pet"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a213c973-7bdc-57c2-9bc3-f8fc7bb5a370","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-13T02:25:31Z","modified":"2026-07-13T02:25:31Z","name":"Phishing domain: 61809.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/61809.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '61809.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-13T02:25:31Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/61809.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b1cb933-28ca-555d-877e-e6f3fda0dbb0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 618416348159.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/618416348159.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '618416348159.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/618416348159.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--65c91bf4-440b-5b58-b6cb-4355760452c9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-22T16:53:50Z","modified":"2026-02-22T16:53:50Z","name":"Phishing domain: 61874.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/61874.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '61874.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-22T16:53:50Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/61874.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--98843af1-9580-5750-8766-dc041b38bfd9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-22T16:58:25Z","modified":"2026-02-22T16:58:25Z","name":"Phishing domain: 61876.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/61876.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '61876.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-22T16:58:25Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/61876.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--efe132b7-2915-5ade-b6da-f9286bac9327","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-22T16:53:59Z","modified":"2026-02-22T16:53:59Z","name":"Phishing domain: 61882.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/61882.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '61882.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-22T16:53:59Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/61882.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--61719963-7105-5250-a574-6b20f8b99b79","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-23T15:35:05Z","modified":"2026-02-23T15:35:05Z","name":"Phishing domain: 61942.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/61942.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '61942.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-23T15:35:05Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/61942.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e955472-5f71-5283-8cef-08c990e7715d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-23T15:30:20Z","modified":"2026-02-23T15:30:20Z","name":"Phishing domain: 61955.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/61955.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '61955.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-23T15:30:20Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/61955.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec267db2-a359-5e97-b5c5-899f22c88213","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-13T03:00:07Z","modified":"2026-07-13T03:00:07Z","name":"Phishing domain: 61971.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/61971.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '61971.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-13T03:00:07Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/61971.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4dff756c-afa8-5508-8b98-76c3e254eca1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:45:09Z","modified":"2026-07-27T04:45:09Z","name":"Phishing domain: 61974.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/61974.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '61974.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:45:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/61974.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d584f40-4854-5296-ab56-12ec9bd5e210","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-10T14:30:12Z","modified":"2026-07-10T14:30:12Z","name":"Phishing domain: 61oursectionalert-4a77a9.alpha-ai.page","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating microsoft. Report & evidence: https://phishdestroy.io/domain/61oursectionalert-4a77a9.alpha-ai.page","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '61oursectionalert-4a77a9.alpha-ai.page']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-10T14:30:12Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/61oursectionalert-4a77a9.alpha-ai.page"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3821ca73-443d-5601-9540-0db7e3566242","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-05T15:15:58Z","modified":"2026-07-05T15:15:58Z","name":"Phishing domain: 62069gautam.github.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/62069gautam.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '62069gautam.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-05T15:15:58Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/62069gautam.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0eca9966-4264-51d2-ae28-d283bc7e7f25","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-19T03:14:02Z","modified":"2026-02-19T03:14:02Z","name":"Phishing domain: 62240.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/62240.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '62240.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-19T03:14:02Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/62240.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8858905-8198-5632-9d56-08e2c4f25dec","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-23T12:17:41Z","modified":"2025-12-23T12:17:41Z","name":"Phishing domain: 622bahiscasino.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/622bahiscasino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '622bahiscasino.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-23T12:17:41Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/622bahiscasino.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b502fc8-64d5-5b23-a07a-6f7ecb04f338","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-07T03:26:03Z","modified":"2026-02-07T03:26:03Z","name":"Phishing domain: 623026594302.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Microsoft. Report & evidence: https://phishdestroy.io/domain/623026594302.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '623026594302.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-07T03:26:03Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/623026594302.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a76ca441-e6f7-57b0-8ca8-6a717ed9416f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 62361652.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/62361652.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '62361652.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/62361652.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1973bfb5-7d01-5ea1-acec-2134f6c4e266","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-19T15:12:27Z","modified":"2026-02-19T15:12:27Z","name":"Phishing domain: 62366.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/62366.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '62366.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-19T15:12:27Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/62366.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--521868e9-706f-53f1-bbb3-f47383f49823","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-19T15:14:29Z","modified":"2026-02-19T15:14:29Z","name":"Phishing domain: 62371.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/62371.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '62371.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-19T15:14:29Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/62371.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a7b237b-fb12-59d4-bca1-2774b2a84782","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:45:25Z","modified":"2026-07-27T04:45:25Z","name":"Phishing domain: 623h.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/623h.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '623h.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:45:25Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/623h.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--da201578-0ddc-5663-a71a-56631d10d4ec","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-14T14:26:49Z","modified":"2026-07-14T14:26:49Z","name":"Phishing domain: 62420.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/62420.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '62420.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-14T14:26:49Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/62420.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--adbdf74d-4cea-534d-84fc-b7e3a6389b1d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-14T14:22:10Z","modified":"2026-07-14T14:22:10Z","name":"Phishing domain: 62447.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/62447.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '62447.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-14T14:22:10Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/62447.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9bbd471-ea4c-5dd0-a11f-ba504c2fcfee","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-14T14:20:46Z","modified":"2026-07-14T14:20:46Z","name":"Phishing domain: 62474.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/62474.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '62474.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-14T14:20:46Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/62474.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--37966ad2-0c94-5f7f-8bfb-88c9f4cd3882","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-17T03:06:54Z","modified":"2026-02-17T03:06:54Z","name":"Phishing domain: 62494.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/62494.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '62494.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-17T03:06:54Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/62494.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a311c11-29aa-571f-b7ab-371eb52f5e52","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-10T18:01:22Z","modified":"2026-03-10T18:01:22Z","name":"Phishing domain: 6251.ink","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating discord. Report & evidence: https://phishdestroy.io/domain/6251.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6251.ink']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-10T18:01:22Z","labels":["malicious-activity","phishing","brand:discord"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6251.ink"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bb3087e-6d7f-5267-95c0-4ad60df53841","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-12T14:30:02Z","modified":"2026-03-12T14:30:02Z","name":"Phishing domain: 6251.lol","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6251.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6251.lol']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-12T14:30:02Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6251.lol"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--859083d2-2848-57af-b4a3-ca02ab1383f7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-22T19:52:48Z","modified":"2026-07-22T19:52:48Z","name":"Phishing domain: 62594.vip","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/62594.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '62594.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-22T19:52:48Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/62594.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d2d3ce7-dc9c-541c-8c82-61ab1a032ab6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-05T15:08:06Z","modified":"2025-12-05T15:08:06Z","name":"Phishing domain: 6261122.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Facebook. Report & evidence: https://phishdestroy.io/domain/6261122.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6261122.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-05T15:08:06Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6261122.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9871ed26-e160-5a06-94d8-6633fb115a05","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-12T15:33:30Z","modified":"2026-08-12T15:33:30Z","name":"Phishing domain: 626945.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/626945.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '626945.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-12T15:33:30Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/626945.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0717e749-9194-5e5c-91d1-248f9850d12e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-12T15:27:38Z","modified":"2026-08-12T15:27:38Z","name":"Phishing domain: 626948.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/626948.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '626948.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-12T15:27:38Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/626948.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--90e2ec24-afd8-5673-a206-d3e9d570c867","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-02T14:52:32Z","modified":"2026-07-02T14:52:32Z","name":"Phishing domain: 627382-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/627382-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '627382-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-02T14:52:32Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/627382-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bf57579-665b-5d9f-80bd-6e476ce894f3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-31T16:39:00Z","modified":"2026-01-31T16:39:00Z","name":"Phishing domain: 627web.whatsapwcox.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating whatsapp. Report & evidence: https://phishdestroy.io/domain/627web.whatsapwcox.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '627web.whatsapwcox.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-31T16:39:00Z","labels":["malicious-activity","phishing","brand:whatsapp"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/627web.whatsapwcox.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f6b9cab-1729-5fd2-9b97-b9db381eecf5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-03T09:52:12Z","modified":"2025-09-03T09:52:12Z","name":"Phishing domain: 62988.one","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/62988.one","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '62988.one']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-03T09:52:12Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/62988.one"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a11afc47-6bfb-5e61-95b6-49d6e35bba78","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:17Z","modified":"2026-07-27T06:02:17Z","name":"Phishing domain: 6299.win","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6299.win","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6299.win']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6299.win"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc1394e5-f52f-5813-ad2e-ce4b45bad2d9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-28T14:39:29Z","modified":"2026-06-28T14:39:29Z","name":"Phishing domain: 6299betoi.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6299betoi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6299betoi.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-28T14:39:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6299betoi.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3e21063-b35b-58be-a3c3-69c0ec89ed08","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-17T02:17:42Z","modified":"2026-06-17T02:17:42Z","name":"Phishing domain: 62c58598-56ec-e3b9-a530-docviewer3.reynoldsjace5.workers.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating microsoft. Report & evidence: https://phishdestroy.io/domain/62c58598-56ec-e3b9-a530-docviewer3.reynoldsjace5.workers.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '62c58598-56ec-e3b9-a530-docviewer3.reynoldsjace5.workers.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-17T02:17:42Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/62c58598-56ec-e3b9-a530-docviewer3.reynoldsjace5.workers.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--401f0ef9-bfec-582d-b3d6-78d3875fd9ac","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-27T16:50:55Z","modified":"2025-11-27T16:50:55Z","name":"Phishing domain: 62ec8a796e.nxcli.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/62ec8a796e.nxcli.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '62ec8a796e.nxcli.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-27T16:50:55Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/62ec8a796e.nxcli.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b06af0bb-233d-539b-ae55-de808135c7a4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:19Z","modified":"2026-02-26T23:21:19Z","name":"Phishing domain: 62lb-casefb329499.vercel.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/62lb-casefb329499.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '62lb-casefb329499.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:19Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/62lb-casefb329499.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e72a04db-4324-560d-bcf4-cf34a83e598e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:43Z","modified":"2026-02-26T23:21:43Z","name":"Phishing domain: 631333-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/631333-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '631333-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:43Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/631333-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f62b709-8c36-5044-82bc-ecbb6cdd02f7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-15T15:53:08Z","modified":"2026-03-15T15:53:08Z","name":"Phishing domain: 63390.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/63390.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '63390.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-15T15:53:08Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/63390.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9f2dea5-d26b-5b10-be38-b03525990084","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-13T03:19:56Z","modified":"2026-03-13T03:19:56Z","name":"Phishing domain: 63393.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/63393.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '63393.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-13T03:19:56Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/63393.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a65ea05-64dd-5d34-9483-db3d64efca89","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-09T03:26:53Z","modified":"2026-03-09T03:26:53Z","name":"Phishing domain: 63442.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/63442.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '63442.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-09T03:26:53Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/63442.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d064d345-0f01-596b-b320-bc5b450c0cba","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-30T18:44:21Z","modified":"2025-10-30T18:44:21Z","name":"Phishing domain: 63513205.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/63513205.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '63513205.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-30T18:44:21Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/63513205.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d00d1f4-319e-5f1a-a896-c2e58d5ece47","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T13:16:17Z","modified":"2026-01-02T13:16:17Z","name":"Phishing domain: 63585.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/63585.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '63585.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T13:16:17Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/63585.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7893e1d-83f2-54a5-a9f3-f56226b23dda","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-16T12:32:19Z","modified":"2025-11-16T12:32:19Z","name":"Phishing domain: 6365-56.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/6365-56.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6365-56.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-16T12:32:19Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6365-56.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--017beaf5-1f26-5277-ac82-97032906affb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-20T19:39:33Z","modified":"2025-12-20T19:39:33Z","name":"Phishing domain: 6366uu.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/6366uu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6366uu.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-20T19:39:33Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6366uu.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0df784c4-2a35-54bb-8944-a0741c9e78c5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-06T10:15:32Z","modified":"2026-07-06T10:15:32Z","name":"Phishing domain: 636cp.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/636cp.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '636cp.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-06T10:15:32Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/636cp.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f46f1d34-9b9c-5467-8a32-6751f7bdfb9c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 637v.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/637v.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '637v.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/637v.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--87211c04-203d-50c4-b7eb-1064623bf269","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T08:03:22Z","modified":"2026-02-13T08:03:22Z","name":"Phishing domain: 639624google.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/639624google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '639624google.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T08:03:22Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/639624google.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba6a2e54-3588-5137-94f2-bbd1affd6d3d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-13T02:23:59Z","modified":"2026-07-13T02:23:59Z","name":"Phishing domain: 6399232.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6399232.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6399232.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-13T02:23:59Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6399232.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4dc3e16-dd94-5c08-aff2-aafd9a3ba041","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-10T10:50:27Z","modified":"2026-07-10T10:50:27Z","name":"Phishing domain: 63bf44ecf25442fe.xbtscrypto.vip","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/63bf44ecf25442fe.xbtscrypto.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '63bf44ecf25442fe.xbtscrypto.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-10T10:50:27Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/63bf44ecf25442fe.xbtscrypto.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b566dba8-d5f6-5ccc-a371-ad80fa302992","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-22T15:18:54Z","modified":"2026-01-22T15:18:54Z","name":"Phishing domain: 64-226-108-107.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/64-226-108-107.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '64-226-108-107.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-22T15:18:54Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/64-226-108-107.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c60234dc-74b2-511a-b9fe-e52ffe1955a3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-07T15:42:40Z","modified":"2026-03-07T15:42:40Z","name":"Phishing domain: 64057.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/64057.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '64057.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-07T15:42:40Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/64057.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0df57dd-524e-5033-a594-08fe73dd8558","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-20T15:03:29Z","modified":"2026-07-20T15:03:29Z","name":"Phishing domain: 6424172528.dojiner.at","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating steam. Report & evidence: https://phishdestroy.io/domain/6424172528.dojiner.at","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6424172528.dojiner.at']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-20T15:03:29Z","labels":["malicious-activity","phishing","brand:steam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6424172528.dojiner.at"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eca308cc-2078-5568-b3cc-85a7f529b7b5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-23T12:25:14Z","modified":"2025-12-23T12:25:14Z","name":"Phishing domain: 64378f02cb08b.site123.me","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/64378f02cb08b.site123.me","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '64378f02cb08b.site123.me']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-23T12:25:14Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/64378f02cb08b.site123.me"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e68922c2-8ac8-5742-b8b1-e76b9ecfa2d8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:17Z","modified":"2026-07-27T06:02:17Z","name":"Phishing domain: 6442.win","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6442.win","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6442.win']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6442.win"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--671faafb-3ea3-5637-99b5-a36d400d0144","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-12T15:36:04Z","modified":"2026-08-12T15:36:04Z","name":"Phishing domain: 64618654-checkout.renewplan.click","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/64618654-checkout.renewplan.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '64618654-checkout.renewplan.click']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-12T15:36:04Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/64618654-checkout.renewplan.click"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8b36b37-7503-5d91-9628-a75fb4260054","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-07T01:42:53Z","modified":"2026-06-07T01:42:53Z","name":"Phishing domain: 6465.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating sfrfr. Report & evidence: https://phishdestroy.io/domain/6465.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6465.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-07T01:42:53Z","labels":["malicious-activity","phishing","brand:sfrfr"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6465.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f53b89f-fa76-5811-8aa9-18c1a2d7b9ec","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-03T04:33:20Z","modified":"2026-02-03T04:33:20Z","name":"Phishing domain: 647-101410.weeblysite.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/647-101410.weeblysite.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '647-101410.weeblysite.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-03T04:33:20Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/647-101410.weeblysite.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--23ef0c93-d8fd-5ec5-bce4-c91f238bded8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-20T15:01:56Z","modified":"2026-07-20T15:01:56Z","name":"Phishing domain: 647623577.dojiner.at","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating steam. Report & evidence: https://phishdestroy.io/domain/647623577.dojiner.at","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '647623577.dojiner.at']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-20T15:01:56Z","labels":["malicious-activity","phishing","brand:steam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/647623577.dojiner.at"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--172a399f-34fd-53af-95d8-e519f550ef62","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-25T09:38:16Z","modified":"2025-12-25T09:38:16Z","name":"Phishing domain: 648aa6b9e132c.site123.me","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating MetaMask. Report & evidence: https://phishdestroy.io/domain/648aa6b9e132c.site123.me","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '648aa6b9e132c.site123.me']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-25T09:38:16Z","labels":["malicious-activity","phishing","brand:metamask"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/648aa6b9e132c.site123.me"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c54f258-97c2-53f4-8441-6077b342b833","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-31T08:06:04Z","modified":"2026-07-31T08:06:04Z","name":"Phishing domain: 649715-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/649715-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '649715-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-31T08:06:04Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/649715-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3896d9b3-2708-59f2-b424-4ee907dd1e33","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-23T02:26:31Z","modified":"2026-07-23T02:26:31Z","name":"Phishing domain: 65.jj37731.vip","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/65.jj37731.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '65.jj37731.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-23T02:26:31Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/65.jj37731.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--da2cdffc-c2af-5e9b-b119-1bee271f8a88","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-30T14:28:42Z","modified":"2026-07-30T14:28:42Z","name":"Phishing domain: 65.jj37799.vip","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/65.jj37799.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '65.jj37799.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-30T14:28:42Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/65.jj37799.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--92a0b76c-c355-5d1b-85c4-a93dda7063f9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T02:12:45Z","modified":"2026-07-27T02:12:45Z","name":"Phishing domain: 65.jj37899.vip","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/65.jj37899.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '65.jj37899.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T02:12:45Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/65.jj37899.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6373b60-b72e-5924-bcfe-734a99747860","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-28T18:50:29Z","modified":"2026-07-28T18:50:29Z","name":"Phishing domain: 65.jj37922.vip","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/65.jj37922.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '65.jj37922.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-28T18:50:29Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/65.jj37922.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--09a8f36e-d03c-5f55-bde2-7c6694f90700","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T02:10:46Z","modified":"2026-07-27T02:10:46Z","name":"Phishing domain: 65.jj38127.vip","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/65.jj38127.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '65.jj38127.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T02:10:46Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/65.jj38127.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--21ffc15d-5a47-5d78-b0ba-f9e06cfba6c6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-30T14:20:26Z","modified":"2026-07-30T14:20:26Z","name":"Phishing domain: 65.jj38336.vip","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/65.jj38336.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '65.jj38336.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-30T14:20:26Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/65.jj38336.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3d04197-2fb6-53e1-966d-74cb4cf84df2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-30T14:21:17Z","modified":"2026-07-30T14:21:17Z","name":"Phishing domain: 65.jj38390.vip","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/65.jj38390.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '65.jj38390.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-30T14:21:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/65.jj38390.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5958621-d0f3-5eb0-a4ac-c4c6a181adf5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-29T15:02:53Z","modified":"2026-07-29T15:02:53Z","name":"Phishing domain: 65.jj38446.vip","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/65.jj38446.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '65.jj38446.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-29T15:02:53Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/65.jj38446.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9106b9e7-4fdd-5d8e-9ca7-ea04fabe0c8b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-29T02:36:07Z","modified":"2026-07-29T02:36:07Z","name":"Phishing domain: 65.jj38460.vip","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/65.jj38460.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '65.jj38460.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-29T02:36:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/65.jj38460.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ae56e70-ec45-5dde-ae5b-5b2fb8d57b3b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-29T14:49:35Z","modified":"2026-07-29T14:49:35Z","name":"Phishing domain: 65.jj38501.vip","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/65.jj38501.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '65.jj38501.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-29T14:49:35Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/65.jj38501.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7e95421-c563-5e7b-8e97-21576ed89c7c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-06T02:29:03Z","modified":"2026-08-06T02:29:03Z","name":"Phishing domain: 65.jj38638.vip","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/65.jj38638.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '65.jj38638.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-06T02:29:03Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/65.jj38638.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3ed7f78-3c15-5483-9f0a-b6ddd1a4ef57","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 6508786---6165.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6508786---6165.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6508786---6165.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6508786---6165.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d03cc893-025d-5a8a-ac14-d8e996aa7954","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-01T19:56:57Z","modified":"2026-08-01T19:56:57Z","name":"Phishing domain: 65254.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating gmail. Report & evidence: https://phishdestroy.io/domain/65254.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '65254.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-01T19:56:57Z","labels":["malicious-activity","phishing","brand:gmail"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/65254.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8ad8904-4c71-5778-858f-fbea1d460c79","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-29T11:23:18Z","modified":"2025-12-29T11:23:18Z","name":"Phishing domain: 65298.vip","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating tiktok. Report & evidence: https://phishdestroy.io/domain/65298.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '65298.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-29T11:23:18Z","labels":["malicious-activity","phishing","brand:tiktok"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/65298.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--db36f0e5-ec3a-51d9-9bb3-2b4acd9f452e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-01T19:57:57Z","modified":"2026-08-01T19:57:57Z","name":"Phishing domain: 65441.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating gmail. Report & evidence: https://phishdestroy.io/domain/65441.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '65441.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-01T19:57:57Z","labels":["malicious-activity","phishing","brand:gmail"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/65441.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b203c4dd-216b-5e6b-a5f4-2b088a894396","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-01T20:01:26Z","modified":"2026-08-01T20:01:26Z","name":"Phishing domain: 65443.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating gmail. Report & evidence: https://phishdestroy.io/domain/65443.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '65443.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-01T20:01:26Z","labels":["malicious-activity","phishing","brand:gmail"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/65443.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3cef7f5-f441-5016-83e7-f6c84638ce18","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-22T11:04:01Z","modified":"2025-10-22T11:04:01Z","name":"Phishing domain: 6568bdfa15f2f206de383621--elegant-dango-fe59cb.netlify.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/6568bdfa15f2f206de383621--elegant-dango-fe59cb.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6568bdfa15f2f206de383621--elegant-dango-fe59cb.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-22T11:04:01Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6568bdfa15f2f206de383621--elegant-dango-fe59cb.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1be7a3a-4c9f-54d3-9914-42960c10e33d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-09T17:14:57Z","modified":"2026-06-09T17:14:57Z","name":"Phishing domain: 6578167816n.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6578167816n.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6578167816n.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-09T17:14:57Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6578167816n.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--df05d33e-059a-50d7-ad75-1f81760acf64","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-13T15:43:30Z","modified":"2025-11-13T15:43:30Z","name":"Phishing domain: 65b7d3757c56390008a2d84a--ods-android.netlify.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Orange. Report & evidence: https://phishdestroy.io/domain/65b7d3757c56390008a2d84a--ods-android.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '65b7d3757c56390008a2d84a--ods-android.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-13T15:43:30Z","labels":["malicious-activity","phishing","brand:orange"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/65b7d3757c56390008a2d84a--ods-android.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2834a08a-0f18-5db2-aca3-794ca67b2249","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-31T09:36:45Z","modified":"2025-12-31T09:36:45Z","name":"Phishing domain: 65e69a23857e6.site123.me","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating MetaMask. Report & evidence: https://phishdestroy.io/domain/65e69a23857e6.site123.me","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '65e69a23857e6.site123.me']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-31T09:36:45Z","labels":["malicious-activity","phishing","brand:metamask"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/65e69a23857e6.site123.me"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a179de0d-5901-585c-bb64-f3366422714c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-02T04:52:46Z","modified":"2025-08-02T04:52:46Z","name":"Phishing domain: 65pensionvalue.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating base. Report & evidence: https://phishdestroy.io/domain/65pensionvalue.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '65pensionvalue.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-02T04:52:46Z","labels":["malicious-activity","phishing","brand:base"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/65pensionvalue.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--30897e78-e66e-5626-a498-8ee7f8ab9a01","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 6610261652.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6610261652.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6610261652.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6610261652.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--32f7ebd2-7a8f-53d7-9ac0-e308ce06c2c8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-03T14:29:39Z","modified":"2026-07-03T14:29:39Z","name":"Phishing domain: 66176.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/66176.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '66176.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-03T14:29:39Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/66176.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--04dd15fe-e74c-5759-a05a-9fe411d444b6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-04T12:35:49Z","modified":"2026-07-04T12:35:49Z","name":"Phishing domain: 661815.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/661815.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '661815.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-04T12:35:49Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/661815.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5a448cf-947c-5d66-8f2a-9053aca0a2d4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-03T14:24:47Z","modified":"2026-07-03T14:24:47Z","name":"Phishing domain: 66184.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/66184.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '66184.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-03T14:24:47Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/66184.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3561d1f3-ab5e-5574-adb5-0e51d17a905b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-03T14:21:38Z","modified":"2026-07-03T14:21:38Z","name":"Phishing domain: 66210.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/66210.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '66210.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-03T14:21:38Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/66210.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2874f629-cc95-5a31-af99-36ec16ca6b57","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-03T14:21:19Z","modified":"2026-07-03T14:21:19Z","name":"Phishing domain: 66269.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/66269.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '66269.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-03T14:21:19Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/66269.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4e069e9-cd8b-5275-8118-500832a75637","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-22T15:20:33Z","modified":"2026-01-22T15:20:33Z","name":"Phishing domain: 6628.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/6628.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6628.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-22T15:20:33Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6628.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cffb706e-99b0-54bf-b36d-162874961ffb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-03T09:55:52Z","modified":"2025-09-03T09:55:52Z","name":"Phishing domain: 66362.tax","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/66362.tax","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '66362.tax']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-03T09:55:52Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/66362.tax"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--89da31e0-6fdf-5e8f-a0e0-0b2eacde7d90","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-03T14:22:31Z","modified":"2026-07-03T14:22:31Z","name":"Phishing domain: 66378.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/66378.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '66378.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-03T14:22:31Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/66378.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--60ff4c45-ee41-5c25-b990-d4d8668559e0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 6652285288.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6652285288.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6652285288.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6652285288.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8a078c3-ef3c-541c-8129-cbab1ebbe483","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-03T14:22:48Z","modified":"2026-07-03T14:22:48Z","name":"Phishing domain: 66549.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/66549.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '66549.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-03T14:22:48Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/66549.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7901a07-3f9b-50b8-b0bd-170e00ff08f4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 665535mg.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/665535mg.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '665535mg.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/665535mg.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--13470368-79ad-5294-a004-f681b3846770","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 665537dh.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/665537dh.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '665537dh.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/665537dh.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a9e5996-0527-56a4-b663-5b5edd31d086","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 665539pp.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/665539pp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '665539pp.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/665539pp.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fb23b98-bec4-5266-8fe1-20c84b36def6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-28T14:38:43Z","modified":"2026-06-28T14:38:43Z","name":"Phishing domain: 6655betapp3.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6655betapp3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6655betapp3.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-28T14:38:43Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6655betapp3.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee87379e-471e-55a5-9840-60042fdd2a94","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-03T14:17:45Z","modified":"2026-07-03T14:17:45Z","name":"Phishing domain: 66585.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/66585.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '66585.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-03T14:17:45Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/66585.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6807ba9d-2766-534e-8d5f-e7030c70da5a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-03T14:22:27Z","modified":"2026-07-03T14:22:27Z","name":"Phishing domain: 66614.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/66614.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '66614.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-03T14:22:27Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/66614.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--479f5d0b-fe0b-524d-a88f-f001130fe1ea","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-11T02:38:42Z","modified":"2026-03-11T02:38:42Z","name":"Phishing domain: 666777228.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/666777228.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '666777228.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-11T02:38:42Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/666777228.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--afd57abb-10ed-5799-9c4f-c80bd3b2a371","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-11T18:28:06Z","modified":"2026-06-11T18:28:06Z","name":"Phishing domain: 666ffshopeepay.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating ShopeePay. Report & evidence: https://phishdestroy.io/domain/666ffshopeepay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '666ffshopeepay.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-11T18:28:06Z","labels":["malicious-activity","phishing","brand:shopeepay"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/666ffshopeepay.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--de0b08bc-6aaf-5e8c-8992-a4512f2fa4e4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-11T18:28:08Z","modified":"2026-06-11T18:28:08Z","name":"Phishing domain: 666fshopeepay.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating ShopeePay. Report & evidence: https://phishdestroy.io/domain/666fshopeepay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '666fshopeepay.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-11T18:28:08Z","labels":["malicious-activity","phishing","brand:shopeepay"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/666fshopeepay.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--10107463-e4e0-55bb-94a2-b01da3756c9d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-17T16:29:11Z","modified":"2026-06-17T16:29:11Z","name":"Phishing domain: 666memecoin.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/666memecoin.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '666memecoin.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-17T16:29:11Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/666memecoin.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5681ebeb-a989-5147-836e-923ef0312b30","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-24T22:56:23Z","modified":"2026-06-24T22:56:23Z","name":"Phishing domain: 666xrpl.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/666xrpl.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '666xrpl.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-24T22:56:23Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/666xrpl.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--92abf37a-2c71-5a38-9ceb-efc40e5922de","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-06T23:54:45Z","modified":"2026-02-06T23:54:45Z","name":"Phishing domain: 668ef.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/668ef.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '668ef.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-06T23:54:45Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/668ef.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e71437a-0ca0-5abb-b29d-8e428b8e2545","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-24T17:19:39Z","modified":"2026-02-24T17:19:39Z","name":"Phishing domain: 66b9fe38-185b-4128-8333-3e163d7bb69c-00-3atbroxnaa5zc.spock.replit.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bancopichincha. Report & evidence: https://phishdestroy.io/domain/66b9fe38-185b-4128-8333-3e163d7bb69c-00-3atbroxnaa5zc.spock.replit.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '66b9fe38-185b-4128-8333-3e163d7bb69c-00-3atbroxnaa5zc.spock.replit.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-24T17:19:39Z","labels":["malicious-activity","phishing","brand:bancopichincha"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/66b9fe38-185b-4128-8333-3e163d7bb69c-00-3atbroxnaa5zc.spock.replit.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6204a16c-1049-54ee-bc89-29960352b800","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-05T11:37:12Z","modified":"2026-08-05T11:37:12Z","name":"Phishing domain: 66fdku-xrmnc-rlom-l2x-1rt4k.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/66fdku-xrmnc-rlom-l2x-1rt4k.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '66fdku-xrmnc-rlom-l2x-1rt4k.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-05T11:37:12Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/66fdku-xrmnc-rlom-l2x-1rt4k.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2e51823-2bc2-5057-b61e-2f404edffa3c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:46:57Z","modified":"2026-07-27T04:46:57Z","name":"Phishing domain: 66qp006.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/66qp006.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '66qp006.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:46:57Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/66qp006.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fa8b251-4779-534d-9379-fa41929f251c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-13T14:27:29Z","modified":"2026-06-13T14:27:29Z","name":"Phishing domain: 66xingji.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/66xingji.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '66xingji.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-13T14:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/66xingji.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5dd9cd5-924f-5473-b46d-56652917f1b1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-03T14:34:16Z","modified":"2026-07-03T14:34:16Z","name":"Phishing domain: 67233.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/67233.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '67233.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-03T14:34:16Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/67233.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2692b14-a0f3-51ed-9472-35c01c8c80b8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-18T17:30:18Z","modified":"2026-06-18T17:30:18Z","name":"Phishing domain: 672361.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/672361.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '672361.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-18T17:30:18Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/672361.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--56f736ed-d0f3-5081-8811-bcec72a2a965","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-03T14:31:50Z","modified":"2026-07-03T14:31:50Z","name":"Phishing domain: 67289.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/67289.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '67289.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-03T14:31:50Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/67289.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4493f83-56f3-5912-921e-391cbb02e815","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:35Z","modified":"2026-02-26T23:23:35Z","name":"Phishing domain: 673920-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/673920-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '673920-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:35Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/673920-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f88691ba-901f-5b50-81fe-ac1eb8843c38","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-22T16:21:50Z","modified":"2026-03-22T16:21:50Z","name":"Phishing domain: 676938nexo.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/676938nexo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '676938nexo.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-22T16:21:50Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/676938nexo.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4706bdd1-30c2-52ed-86ea-b889cb8bd8cb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 6790080.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6790080.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6790080.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6790080.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d6a6e41-5fc8-53b6-bf38-e336d9473b72","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-02T20:47:53Z","modified":"2026-07-02T20:47:53Z","name":"Phishing domain: 67acfam3k6jgtr3b4fwe73k7bko7ocbqohxtx5e2ok2uyuz3g7xa.turbo-gateway.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/67acfam3k6jgtr3b4fwe73k7bko7ocbqohxtx5e2ok2uyuz3g7xa.turbo-gateway.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '67acfam3k6jgtr3b4fwe73k7bko7ocbqohxtx5e2ok2uyuz3g7xa.turbo-gateway.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-02T20:47:53Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/67acfam3k6jgtr3b4fwe73k7bko7ocbqohxtx5e2ok2uyuz3g7xa.turbo-gateway.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9527fb4a-5449-59b4-8b39-88157406b571","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-12T03:21:44Z","modified":"2026-08-12T03:21:44Z","name":"Phishing domain: 67cb53.arcadejafet.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/67cb53.arcadejafet.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '67cb53.arcadejafet.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-12T03:21:44Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/67cb53.arcadejafet.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a5f2371-e2c6-573e-8a30-a12500975b7f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-17T10:43:33Z","modified":"2025-09-17T10:43:33Z","name":"Phishing domain: 67coin-sol.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/67coin-sol.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '67coin-sol.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-17T10:43:33Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/67coin-sol.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a47fd11-eef0-52e6-bfe9-de3f22e8f300","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-20T11:26:40Z","modified":"2025-09-20T11:26:40Z","name":"Phishing domain: 67coinsol.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/67coinsol.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '67coinsol.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-20T11:26:40Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/67coinsol.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e28208c1-a69f-58be-bd22-caf730d581fa","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-28T15:15:55Z","modified":"2026-02-28T15:15:55Z","name":"Phishing domain: 67e33600-6007-41f8-90d4-3c5d46f7eed6-00-o62024mg898.picard.replit.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/67e33600-6007-41f8-90d4-3c5d46f7eed6-00-o62024mg898.picard.replit.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '67e33600-6007-41f8-90d4-3c5d46f7eed6-00-o62024mg898.picard.replit.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-28T15:15:55Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/67e33600-6007-41f8-90d4-3c5d46f7eed6-00-o62024mg898.picard.replit.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--104020ac-3196-5427-847d-18ea597cad2c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-24T21:20:26Z","modified":"2026-01-24T21:20:26Z","name":"Phishing domain: 67evav55.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/67evav55.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '67evav55.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-24T21:20:26Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/67evav55.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc3d8659-bfd0-5bdb-9627-415a12290a17","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-20T15:23:27Z","modified":"2025-11-20T15:23:27Z","name":"Phishing domain: 67to67billion.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating revolut. Report & evidence: https://phishdestroy.io/domain/67to67billion.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '67to67billion.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-20T15:23:27Z","labels":["malicious-activity","phishing","brand:revolut"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/67to67billion.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--030a1574-2ec7-51c0-9949-15f0269266a4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-20T16:58:00Z","modified":"2025-12-20T16:58:00Z","name":"Phishing domain: 67to67billions.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Phantom. Report & evidence: https://phishdestroy.io/domain/67to67billions.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '67to67billions.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-20T16:58:00Z","labels":["malicious-activity","phishing","brand:phantom"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/67to67billions.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fc74e93-41cf-50ac-9bfd-9ad5e9ae8b92","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-17T02:13:28Z","modified":"2026-06-17T02:13:28Z","name":"Phishing domain: 68-210-101-96.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating dpd. Report & evidence: https://phishdestroy.io/domain/68-210-101-96.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '68-210-101-96.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-17T02:13:28Z","labels":["malicious-activity","phishing","brand:dpd"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/68-210-101-96.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7741a4b9-fd78-5bcf-83c7-5e3150e53627","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-18T19:12:42Z","modified":"2026-07-18T19:12:42Z","name":"Phishing domain: 68-210-102-85.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating dpd. Report & evidence: https://phishdestroy.io/domain/68-210-102-85.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '68-210-102-85.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-18T19:12:42Z","labels":["malicious-activity","phishing","brand:dpd"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/68-210-102-85.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0318875-e607-5e14-a549-685c09d4dd09","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-18T19:05:45Z","modified":"2026-07-18T19:05:45Z","name":"Phishing domain: 68-210-103-164.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating dpd. Report & evidence: https://phishdestroy.io/domain/68-210-103-164.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '68-210-103-164.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-18T19:05:45Z","labels":["malicious-activity","phishing","brand:dpd"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/68-210-103-164.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8edd7628-06ad-5b1c-8f2d-73f504bb292b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-14T14:25:19Z","modified":"2026-06-14T14:25:19Z","name":"Phishing domain: 68-210-200-182.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating dpd. Report & evidence: https://phishdestroy.io/domain/68-210-200-182.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '68-210-200-182.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-14T14:25:19Z","labels":["malicious-activity","phishing","brand:dpd"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/68-210-200-182.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a88483dd-37d3-5904-9f79-7476d2f3fb1c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-19T02:42:59Z","modified":"2026-06-19T02:42:59Z","name":"Phishing domain: 68-210-98-112.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Microsoft. Report & evidence: https://phishdestroy.io/domain/68-210-98-112.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '68-210-98-112.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-19T02:42:59Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/68-210-98-112.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--78ce4f36-b7d2-59ed-9d60-87948dbc3b64","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-02T14:53:37Z","modified":"2026-08-02T14:53:37Z","name":"Phishing domain: 68-210-98-247.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating dpd. Report & evidence: https://phishdestroy.io/domain/68-210-98-247.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '68-210-98-247.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-02T14:53:37Z","labels":["malicious-activity","phishing","brand:dpd"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/68-210-98-247.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e6ebad1-f655-577b-8822-c28aa7605f41","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-23T14:35:42Z","modified":"2026-06-23T14:35:42Z","name":"Phishing domain: 68-221-169-7.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating dpd. Report & evidence: https://phishdestroy.io/domain/68-221-169-7.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '68-221-169-7.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-23T14:35:42Z","labels":["malicious-activity","phishing","brand:dpd"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/68-221-169-7.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa65464c-925a-599f-b304-8f9afbe695d1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-10T14:20:03Z","modified":"2026-06-10T14:20:03Z","name":"Phishing domain: 68-221-27-73.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/68-221-27-73.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '68-221-27-73.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-10T14:20:03Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/68-221-27-73.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--be55b1bf-50f7-52b1-a5fb-2458c73e0679","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-15T15:52:32Z","modified":"2026-03-15T15:52:32Z","name":"Phishing domain: 68065.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/68065.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '68065.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-15T15:52:32Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/68065.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--86f7fab7-35b8-5371-becb-9e1b16de4fbd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-15T15:43:30Z","modified":"2026-03-15T15:43:30Z","name":"Phishing domain: 68147.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/68147.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '68147.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-15T15:43:30Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/68147.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0c3ca01-7c4f-5246-b266-3e6245e4b74f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T15:45:13Z","modified":"2026-08-09T15:45:13Z","name":"Phishing domain: 681ecc.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/681ecc.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '681ecc.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T15:45:13Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/681ecc.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfb59569-44b7-5d33-80c6-e5f641d861f9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-05T18:40:10Z","modified":"2026-08-05T18:40:10Z","name":"Phishing domain: 68249.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/68249.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '68249.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-05T18:40:10Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/68249.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--07249187-1072-5102-ac76-6c230132dd0c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-03T00:11:28Z","modified":"2026-01-03T00:11:28Z","name":"Phishing domain: 682597.win","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating tiktok. Report & evidence: https://phishdestroy.io/domain/682597.win","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '682597.win']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-03T00:11:28Z","labels":["malicious-activity","phishing","brand:tiktok"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/682597.win"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3d3f65b-9100-52ae-a5f6-39132b292057","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 684846165tyj.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/684846165tyj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '684846165tyj.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/684846165tyj.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffe11192-0dc7-58cc-a3c9-a33b7e93811c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T05:11:43Z","modified":"2026-07-27T05:11:43Z","name":"Phishing domain: 68665.me","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/68665.me","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '68665.me']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T05:11:43Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/68665.me"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5c33da6-2120-5596-a967-c4f5d29d03bf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:42Z","modified":"2026-02-26T23:19:42Z","name":"Phishing domain: 6870ec47bda2da78bd7ebe26--opnocn.netlify.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6870ec47bda2da78bd7ebe26--opnocn.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6870ec47bda2da78bd7ebe26--opnocn.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:42Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6870ec47bda2da78bd7ebe26--opnocn.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--60a6c4e1-9385-5b66-b043-24243d7e65dc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-19T15:05:55Z","modified":"2026-02-19T15:05:55Z","name":"Phishing domain: 687941coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/687941coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '687941coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-19T15:05:55Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/687941coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f6c47c2-9853-5bae-9896-f1fe474154fb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-02T16:52:28Z","modified":"2026-03-02T16:52:28Z","name":"Phishing domain: 687942coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/687942coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '687942coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-02T16:52:28Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/687942coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f798e09-2277-5a19-af6e-c336d876b64f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:00Z","modified":"2026-02-26T23:24:00Z","name":"Phishing domain: 687f6bc9c59737b82c2b8a05--ldzrwlt.netlify.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/687f6bc9c59737b82c2b8a05--ldzrwlt.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '687f6bc9c59737b82c2b8a05--ldzrwlt.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:00Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/687f6bc9c59737b82c2b8a05--ldzrwlt.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ca607a4-a446-59bd-97d5-eba28009f027","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:12Z","modified":"2026-02-26T23:22:12Z","name":"Phishing domain: 68858886.kjfdjfh.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/68858886.kjfdjfh.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '68858886.kjfdjfh.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:12Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/68858886.kjfdjfh.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ffd715c-eb42-5414-aac7-3b5cdd88e8c0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-27T12:28:40Z","modified":"2025-12-27T12:28:40Z","name":"Phishing domain: 68cba1ecd56cb.site123.me","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/68cba1ecd56cb.site123.me","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '68cba1ecd56cb.site123.me']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-27T12:28:40Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/68cba1ecd56cb.site123.me"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a205603-ad18-526d-b837-022dae62e611","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-19T13:36:48Z","modified":"2025-10-19T13:36:48Z","name":"Phishing domain: 68f2290df0c7a26a15006df7--xxqnrc744.netlify.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/68f2290df0c7a26a15006df7--xxqnrc744.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '68f2290df0c7a26a15006df7--xxqnrc744.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-19T13:36:48Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/68f2290df0c7a26a15006df7--xxqnrc744.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b04a55b-945d-5f38-8963-ee5249a1ae5c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-18T15:44:15Z","modified":"2025-10-18T15:44:15Z","name":"Phishing domain: 68u003.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/68u003.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '68u003.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-18T15:44:15Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/68u003.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d23887b-0039-56a3-a977-e605a81a4a34","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-18T15:44:57Z","modified":"2025-10-18T15:44:57Z","name":"Phishing domain: 68u011.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/68u011.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '68u011.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-18T15:44:57Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/68u011.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--86ae2db9-a6d6-5de1-bc43-0a198a907f39","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-18T15:44:51Z","modified":"2025-10-18T15:44:51Z","name":"Phishing domain: 68u012.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/68u012.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '68u012.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-18T15:44:51Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/68u012.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ae979de-847d-5499-9aae-9078f5ad8b76","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-18T15:45:07Z","modified":"2025-10-18T15:45:07Z","name":"Phishing domain: 68u026.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/68u026.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '68u026.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-18T15:45:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/68u026.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--191d5f90-52cc-5ac5-a31a-2ae35bcce8de","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-18T15:46:40Z","modified":"2025-10-18T15:46:40Z","name":"Phishing domain: 68u027.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/68u027.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '68u027.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-18T15:46:40Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/68u027.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--87158c71-307e-5dd7-8cd1-74a7b57e6a57","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-31T04:32:06Z","modified":"2025-08-31T04:32:06Z","name":"Phishing domain: 68uv.pilot45.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating imToken. Report & evidence: https://phishdestroy.io/domain/68uv.pilot45.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '68uv.pilot45.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-31T04:32:06Z","labels":["malicious-activity","phishing","brand:imtoken"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/68uv.pilot45.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--af1c220b-18fb-53d0-9532-9f8539538bea","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-28T00:55:32Z","modified":"2026-03-28T00:55:32Z","name":"Phishing domain: 68ygd.vip","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/68ygd.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '68ygd.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-28T00:55:32Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/68ygd.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c9850cb-0245-5392-a3b4-e3b5e7b94d9e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-23T18:41:37Z","modified":"2026-02-23T18:41:37Z","name":"Phishing domain: 69-drugs.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/69-drugs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '69-drugs.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-23T18:41:37Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/69-drugs.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7341989e-47a8-5dac-b1e4-a0729851f7b5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-11T03:07:30Z","modified":"2026-04-11T03:07:30Z","name":"Phishing domain: 69-minutes.entry-cryptolist.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/69-minutes.entry-cryptolist.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '69-minutes.entry-cryptolist.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-11T03:07:30Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/69-minutes.entry-cryptolist.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee269599-8c02-5268-aca9-33264d70d98d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:11Z","modified":"2026-02-26T23:20:11Z","name":"Phishing domain: 691648coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/691648coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '691648coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:11Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/691648coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--60e6cd6c-d0e4-5e42-8c94-190ec5c6b54e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-29T14:58:09Z","modified":"2026-07-29T14:58:09Z","name":"Phishing domain: 69176.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/69176.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '69176.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-29T14:58:09Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/69176.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e317884-e5cd-5f5d-b8c7-1ae7091c36f6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-27T17:05:48Z","modified":"2025-11-27T17:05:48Z","name":"Phishing domain: 692799de4101b667ac2c.appwrite.network","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/692799de4101b667ac2c.appwrite.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '692799de4101b667ac2c.appwrite.network']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-27T17:05:48Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/692799de4101b667ac2c.appwrite.network"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5a6d083-2179-551b-829b-dab5ac784f3b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-01T12:09:12Z","modified":"2025-12-01T12:09:12Z","name":"Phishing domain: 692be5d5cb9a363c891035ac--eclectic-alpaca-4b5116.netlify.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Naver. Report & evidence: https://phishdestroy.io/domain/692be5d5cb9a363c891035ac--eclectic-alpaca-4b5116.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '692be5d5cb9a363c891035ac--eclectic-alpaca-4b5116.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-01T12:09:12Z","labels":["malicious-activity","phishing","brand:naver"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/692be5d5cb9a363c891035ac--eclectic-alpaca-4b5116.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d79fd0bf-6c45-58d6-8b63-2cf3215d4c92","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-01T12:10:23Z","modified":"2025-12-01T12:10:23Z","name":"Phishing domain: 692be628274f42344e6efa03--spontaneous-mermaid-05e205.netlify.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Naver. Report & evidence: https://phishdestroy.io/domain/692be628274f42344e6efa03--spontaneous-mermaid-05e205.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '692be628274f42344e6efa03--spontaneous-mermaid-05e205.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-01T12:10:23Z","labels":["malicious-activity","phishing","brand:naver"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/692be628274f42344e6efa03--spontaneous-mermaid-05e205.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e2b1137-38b2-53ce-88f3-bbfee05b59d2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-03T13:21:47Z","modified":"2025-12-03T13:21:47Z","name":"Phishing domain: 692e63c6e33d1db827f89d21--thunderous-sorbet-780abf.netlify.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Naver. Report & evidence: https://phishdestroy.io/domain/692e63c6e33d1db827f89d21--thunderous-sorbet-780abf.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '692e63c6e33d1db827f89d21--thunderous-sorbet-780abf.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-03T13:21:47Z","labels":["malicious-activity","phishing","brand:naver"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/692e63c6e33d1db827f89d21--thunderous-sorbet-780abf.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1aad6796-ed8d-5b84-9ac8-3fafcf6a45ff","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-03T13:21:00Z","modified":"2025-12-03T13:21:00Z","name":"Phishing domain: 692e6414c3ffb2b12624b6fd--thunderous-sorbet-780abf.netlify.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Naver. Report & evidence: https://phishdestroy.io/domain/692e6414c3ffb2b12624b6fd--thunderous-sorbet-780abf.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '692e6414c3ffb2b12624b6fd--thunderous-sorbet-780abf.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-03T13:21:00Z","labels":["malicious-activity","phishing","brand:naver"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/692e6414c3ffb2b12624b6fd--thunderous-sorbet-780abf.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--283cbfad-9ceb-5404-a29d-e23c8d782e22","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 6952061652hd.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6952061652hd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6952061652hd.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6952061652hd.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0a322ff-25c7-55bb-bf47-b3b7ab460ca1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-08T14:56:45Z","modified":"2026-03-08T14:56:45Z","name":"Phishing domain: 695274coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/695274coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '695274coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-08T14:56:45Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/695274coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0b97945-cb64-56de-9c81-8671abfa2683","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-30T07:46:38Z","modified":"2025-12-30T07:46:38Z","name":"Phishing domain: 698064da.lvcshgchydcguahha.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/698064da.lvcshgchydcguahha.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '698064da.lvcshgchydcguahha.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-30T07:46:38Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/698064da.lvcshgchydcguahha.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--022a38f6-37b8-5c94-b5f3-be6bf247088d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-10T16:22:10Z","modified":"2026-02-10T16:22:10Z","name":"Phishing domain: 6981dab3f81073450d7ecd75--reliable-pothos-cdc876.netlify.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Dropbox. Report & evidence: https://phishdestroy.io/domain/6981dab3f81073450d7ecd75--reliable-pothos-cdc876.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6981dab3f81073450d7ecd75--reliable-pothos-cdc876.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-10T16:22:10Z","labels":["malicious-activity","phishing","brand:dropbox"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6981dab3f81073450d7ecd75--reliable-pothos-cdc876.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--49f2b579-7a79-56b8-b4ed-7971219fe8c1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-04T16:19:48Z","modified":"2026-03-04T16:19:48Z","name":"Phishing domain: 6981f042ccad4d00a690b068--wonderful-puppy-834e9a.netlify.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6981f042ccad4d00a690b068--wonderful-puppy-834e9a.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6981f042ccad4d00a690b068--wonderful-puppy-834e9a.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-04T16:19:48Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6981f042ccad4d00a690b068--wonderful-puppy-834e9a.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--92e3c52d-7eed-5727-bbff-ea6df7d88585","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-01T15:15:55Z","modified":"2026-03-01T15:15:55Z","name":"Phishing domain: 699326coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/699326coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '699326coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-01T15:15:55Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/699326coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--67040d98-041a-5e40-bea9-6d3f1e0bd1eb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-05T03:59:07Z","modified":"2026-03-05T03:59:07Z","name":"Phishing domain: 69944e21b720f4bece44ad1d--astounding-manatee-da098c.netlify.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating wetransfer. Report & evidence: https://phishdestroy.io/domain/69944e21b720f4bece44ad1d--astounding-manatee-da098c.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '69944e21b720f4bece44ad1d--astounding-manatee-da098c.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-05T03:59:07Z","labels":["malicious-activity","phishing","brand:wetransfer"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/69944e21b720f4bece44ad1d--astounding-manatee-da098c.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--203285ad-eaaf-592f-ab28-3340b94ddde5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-31T16:53:58Z","modified":"2026-01-31T16:53:58Z","name":"Phishing domain: 69985-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/69985-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '69985-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-31T16:53:58Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/69985-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc513447-d788-5de6-aadb-7d3da7b2460a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-23T15:30:34Z","modified":"2026-02-23T15:30:34Z","name":"Phishing domain: 699a26ca1eae9cec8700576e--glistening-platypus-505378.netlify.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Impots Gouv. Report & evidence: https://phishdestroy.io/domain/699a26ca1eae9cec8700576e--glistening-platypus-505378.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '699a26ca1eae9cec8700576e--glistening-platypus-505378.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-23T15:30:34Z","labels":["malicious-activity","phishing","brand:impots gouv"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/699a26ca1eae9cec8700576e--glistening-platypus-505378.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e94d7745-6020-5822-8091-28db90ad9366","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-10T15:06:01Z","modified":"2026-03-10T15:06:01Z","name":"Phishing domain: 69aef5d35723ce18449962c9--coinbase-clone-demo.netlify.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/69aef5d35723ce18449962c9--coinbase-clone-demo.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '69aef5d35723ce18449962c9--coinbase-clone-demo.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-10T15:06:01Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/69aef5d35723ce18449962c9--coinbase-clone-demo.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f2796be-1f21-5a11-a35f-e645fa8f8c65","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-11T02:37:13Z","modified":"2026-03-11T02:37:13Z","name":"Phishing domain: 69af3948775684b2f053ee65--sensational-salmiakki-0285cb.netlify.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/69af3948775684b2f053ee65--sensational-salmiakki-0285cb.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '69af3948775684b2f053ee65--sensational-salmiakki-0285cb.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-11T02:37:13Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/69af3948775684b2f053ee65--sensational-salmiakki-0285cb.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc0b04be-6e5a-5dd7-86cb-b7c7fb92baa5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-10T15:06:42Z","modified":"2026-03-10T15:06:42Z","name":"Phishing domain: 69af513e79d93a0cbd310dad--coinbase-clone-g4joey.netlify.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/69af513e79d93a0cbd310dad--coinbase-clone-g4joey.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '69af513e79d93a0cbd310dad--coinbase-clone-g4joey.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-10T15:06:42Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/69af513e79d93a0cbd310dad--coinbase-clone-g4joey.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--039a203e-970f-5470-88a5-374b619800a6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-16T15:32:08Z","modified":"2026-03-16T15:32:08Z","name":"Phishing domain: 69b748087a8bf729468127d5--elegant-smakager-fca8d0.netlify.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating naver. Report & evidence: https://phishdestroy.io/domain/69b748087a8bf729468127d5--elegant-smakager-fca8d0.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '69b748087a8bf729468127d5--elegant-smakager-fca8d0.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-16T15:32:08Z","labels":["malicious-activity","phishing","brand:naver"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/69b748087a8bf729468127d5--elegant-smakager-fca8d0.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8c8c5c0-744d-5bfb-946c-96ebf830fe17","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-17T15:18:47Z","modified":"2026-03-17T15:18:47Z","name":"Phishing domain: 69b879190aad566a6c550065--gleaming-halva-45b548.netlify.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating facebook. Report & evidence: https://phishdestroy.io/domain/69b879190aad566a6c550065--gleaming-halva-45b548.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '69b879190aad566a6c550065--gleaming-halva-45b548.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-17T15:18:47Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/69b879190aad566a6c550065--gleaming-halva-45b548.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--39fd7c2e-138d-5e89-9b0e-a97f91e8bdf8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-17T15:19:23Z","modified":"2026-03-17T15:19:23Z","name":"Phishing domain: 69b879a2ec38ee743fc33043--timely-marigold-8ac378.netlify.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating facebook. Report & evidence: https://phishdestroy.io/domain/69b879a2ec38ee743fc33043--timely-marigold-8ac378.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '69b879a2ec38ee743fc33043--timely-marigold-8ac378.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-17T15:19:23Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/69b879a2ec38ee743fc33043--timely-marigold-8ac378.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f814f976-7458-5fd3-8dbd-0ea458d69590","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-17T15:17:02Z","modified":"2026-03-17T15:17:02Z","name":"Phishing domain: 69b87a36a3cfa57c2311062f--marvelous-sorbet-904c8f.netlify.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating facebook. Report & evidence: https://phishdestroy.io/domain/69b87a36a3cfa57c2311062f--marvelous-sorbet-904c8f.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '69b87a36a3cfa57c2311062f--marvelous-sorbet-904c8f.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-17T15:17:02Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/69b87a36a3cfa57c2311062f--marvelous-sorbet-904c8f.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e35d1d6a-9dc5-5e04-bba2-ffe3b304a131","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-10T14:34:38Z","modified":"2026-06-10T14:34:38Z","name":"Phishing domain: 6a018e4588b9f91c8adf0a0b--velvety-churros-49cd43.netlify.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6a018e4588b9f91c8adf0a0b--velvety-churros-49cd43.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6a018e4588b9f91c8adf0a0b--velvety-churros-49cd43.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-10T14:34:38Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6a018e4588b9f91c8adf0a0b--velvety-churros-49cd43.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d94f87c8-c6ba-59f5-ba76-91430bd6cb42","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-16T13:01:10Z","modified":"2026-07-16T13:01:10Z","name":"Phishing domain: 6a1ce002c7e3970008520769--allora-claimdrop.netlify.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6a1ce002c7e3970008520769--allora-claimdrop.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6a1ce002c7e3970008520769--allora-claimdrop.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-16T13:01:10Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6a1ce002c7e3970008520769--allora-claimdrop.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd8b06d4-50ac-5829-b154-50c7d369dcc7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-16T12:59:44Z","modified":"2026-07-16T12:59:44Z","name":"Phishing domain: 6a1e57c25c550900080f2971--allora-claimdrop.netlify.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6a1e57c25c550900080f2971--allora-claimdrop.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6a1e57c25c550900080f2971--allora-claimdrop.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-16T12:59:44Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6a1e57c25c550900080f2971--allora-claimdrop.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4447caa5-1480-57ac-9456-53eefc07ed25","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-16T08:50:16Z","modified":"2026-06-16T08:50:16Z","name":"Phishing domain: 6a2d92a9d242d7b5e453154c--sweet-tarsier-be1a2a.netlify.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating att. Report & evidence: https://phishdestroy.io/domain/6a2d92a9d242d7b5e453154c--sweet-tarsier-be1a2a.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6a2d92a9d242d7b5e453154c--sweet-tarsier-be1a2a.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-16T08:50:16Z","labels":["malicious-activity","phishing","brand:att"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6a2d92a9d242d7b5e453154c--sweet-tarsier-be1a2a.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--99bec917-4c5c-5359-82bf-150db1b410d8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-23T02:27:16Z","modified":"2026-06-23T02:27:16Z","name":"Phishing domain: 6a2d930d1db5f3344b65a808--gleeful-mermaid-933ec5.netlify.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating att. Report & evidence: https://phishdestroy.io/domain/6a2d930d1db5f3344b65a808--gleeful-mermaid-933ec5.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6a2d930d1db5f3344b65a808--gleeful-mermaid-933ec5.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-23T02:27:16Z","labels":["malicious-activity","phishing","brand:att"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6a2d930d1db5f3344b65a808--gleeful-mermaid-933ec5.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--29c45de1-cac8-574d-b879-1c19027f597f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-16T08:50:20Z","modified":"2026-06-16T08:50:20Z","name":"Phishing domain: 6a305c5c175de3338b2a1ff0--gleaming-pastelito-3dbfc9.netlify.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6a305c5c175de3338b2a1ff0--gleaming-pastelito-3dbfc9.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6a305c5c175de3338b2a1ff0--gleaming-pastelito-3dbfc9.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-16T08:50:20Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6a305c5c175de3338b2a1ff0--gleaming-pastelito-3dbfc9.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f82b659-d28d-54d9-9764-81be78a79712","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-16T08:58:05Z","modified":"2026-06-16T08:58:05Z","name":"Phishing domain: 6a305e2813dfbd3fb78810c4--ubiquitous-gingersnap-809853.netlify.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating att. Report & evidence: https://phishdestroy.io/domain/6a305e2813dfbd3fb78810c4--ubiquitous-gingersnap-809853.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6a305e2813dfbd3fb78810c4--ubiquitous-gingersnap-809853.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-16T08:58:05Z","labels":["malicious-activity","phishing","brand:att"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6a305e2813dfbd3fb78810c4--ubiquitous-gingersnap-809853.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d83292a9-d314-5912-90fe-513b10e1ba9a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-30T20:16:54Z","modified":"2026-06-30T20:16:54Z","name":"Phishing domain: 6a433220cb3be96e4624dfd5--tranquil-douhua-203562.netlify.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating ledger. Report & evidence: https://phishdestroy.io/domain/6a433220cb3be96e4624dfd5--tranquil-douhua-203562.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6a433220cb3be96e4624dfd5--tranquil-douhua-203562.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-30T20:16:54Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6a433220cb3be96e4624dfd5--tranquil-douhua-203562.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--42bbb26d-5e1f-5e54-9171-9d54e0aae305","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-06T17:57:07Z","modified":"2026-07-06T17:57:07Z","name":"Phishing domain: 6a499f79d547c8239ac87696--mellow-cannoli-13fca9.netlify.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6a499f79d547c8239ac87696--mellow-cannoli-13fca9.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6a499f79d547c8239ac87696--mellow-cannoli-13fca9.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-06T17:57:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6a499f79d547c8239ac87696--mellow-cannoli-13fca9.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--459ec728-7ffa-5f8d-9f1a-3429ad9de303","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-07T10:40:43Z","modified":"2026-08-07T10:40:43Z","name":"Phishing domain: 6a71c0b8a1b80432d7053a3b--melodic-cendol-596259.netlify.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating apple. Report & evidence: https://phishdestroy.io/domain/6a71c0b8a1b80432d7053a3b--melodic-cendol-596259.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6a71c0b8a1b80432d7053a3b--melodic-cendol-596259.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-07T10:40:43Z","labels":["malicious-activity","phishing","brand:apple"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6a71c0b8a1b80432d7053a3b--melodic-cendol-596259.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b844b8c-6575-5837-a584-bda4d9a21dd8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-14T19:36:01Z","modified":"2026-02-14T19:36:01Z","name":"Phishing domain: 6aaac910.wcconn.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/6aaac910.wcconn.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6aaac910.wcconn.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-14T19:36:01Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6aaac910.wcconn.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--195f40aa-b6ac-5ef2-9e33-cf61537bb509","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-02T20:57:14Z","modified":"2026-07-02T20:57:14Z","name":"Phishing domain: 6aevvukutn3hpwv3qq5nrx6bgixy37ncijy4ra4vtx3p7d56ymoq.turbo-gateway.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6aevvukutn3hpwv3qq5nrx6bgixy37ncijy4ra4vtx3p7d56ymoq.turbo-gateway.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6aevvukutn3hpwv3qq5nrx6bgixy37ncijy4ra4vtx3p7d56ymoq.turbo-gateway.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-02T20:57:14Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6aevvukutn3hpwv3qq5nrx6bgixy37ncijy4ra4vtx3p7d56ymoq.turbo-gateway.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c121b08f-e440-5f8a-9f00-0e17db70e4c1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-12T03:54:50Z","modified":"2026-08-12T03:54:50Z","name":"Phishing domain: 6b0e8e.arcadejafet.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/6b0e8e.arcadejafet.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6b0e8e.arcadejafet.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-12T03:54:50Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6b0e8e.arcadejafet.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--43819b6c-18c6-5f34-bff7-acf0cb2d234a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-13T20:37:10Z","modified":"2026-08-13T20:37:10Z","name":"Phishing domain: 6b48e8.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6b48e8.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6b48e8.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-13T20:37:10Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6b48e8.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8c2e395-78f8-5392-b674-41fd9b522d82","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-13T14:12:49Z","modified":"2026-07-13T14:12:49Z","name":"Phishing domain: 6b6ij-4d0-zyk3b-ps98f-dutz.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/6b6ij-4d0-zyk3b-ps98f-dutz.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6b6ij-4d0-zyk3b-ps98f-dutz.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-13T14:12:49Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6b6ij-4d0-zyk3b-ps98f-dutz.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--80ae7677-c478-5e89-a7c1-a9f06a622215","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-18T16:20:40Z","modified":"2025-10-18T16:20:40Z","name":"Phishing domain: 6bf50c04bdd64f3c.raydiumpro-web.shop","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Raydium. Report & evidence: https://phishdestroy.io/domain/6bf50c04bdd64f3c.raydiumpro-web.shop","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6bf50c04bdd64f3c.raydiumpro-web.shop']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-18T16:20:40Z","labels":["malicious-activity","phishing","brand:raydium"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6bf50c04bdd64f3c.raydiumpro-web.shop"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--db30ec70-652c-5055-8eec-40077f3ba608","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-23T16:00:13Z","modified":"2026-04-23T16:00:13Z","name":"Phishing domain: 6blsp-at.ru","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6blsp-at.ru","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6blsp-at.ru']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-23T16:00:13Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6blsp-at.ru"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7919b7dc-f0ae-596d-908a-bcfe7e7ffda2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-13T20:41:05Z","modified":"2026-08-13T20:41:05Z","name":"Phishing domain: 6c0fd9.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6c0fd9.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6c0fd9.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-13T20:41:05Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6c0fd9.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f31f681d-d36b-55bb-bb5a-db13a1f5edc2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-13T21:15:34Z","modified":"2026-08-13T21:15:34Z","name":"Phishing domain: 6c21d1.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6c21d1.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6c21d1.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-13T21:15:34Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6c21d1.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6db7f9c-92bd-5450-9dcf-28f848c7560a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T01:51:38Z","modified":"2026-02-13T01:51:38Z","name":"Phishing domain: 6c78ijanyf0l.icu","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6c78ijanyf0l.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6c78ijanyf0l.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T01:51:38Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6c78ijanyf0l.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8233e409-40ee-5faa-a3a3-7846d7e76d42","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-12T03:30:39Z","modified":"2026-08-12T03:30:39Z","name":"Phishing domain: 6cc8b8.arcadejafet.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/6cc8b8.arcadejafet.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6cc8b8.arcadejafet.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-12T03:30:39Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6cc8b8.arcadejafet.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e7663dc-e1c4-537b-b301-f10fc3253d01","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T23:46:16Z","modified":"2026-08-09T23:46:16Z","name":"Phishing domain: 6cd5ca.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/6cd5ca.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6cd5ca.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T23:46:16Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6cd5ca.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--98ba246a-e695-5ddd-9e5c-16077a218277","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-07T09:15:16Z","modified":"2026-01-07T09:15:16Z","name":"Phishing domain: 6chicken9.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating [\"solana\"]. Report & evidence: https://phishdestroy.io/domain/6chicken9.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6chicken9.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-07T09:15:16Z","labels":["malicious-activity","phishing","brand:[\"solana\"]"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6chicken9.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--37385c4f-e4a1-5d21-9899-fdc05697a646","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-17T06:42:03Z","modified":"2026-02-17T06:42:03Z","name":"Phishing domain: 6chickenpop9.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating solana. Report & evidence: https://phishdestroy.io/domain/6chickenpop9.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6chickenpop9.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-17T06:42:03Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6chickenpop9.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e31d594d-4980-5e76-9076-96613d18389e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T07:45:01Z","modified":"2026-08-10T07:45:01Z","name":"Phishing domain: 6cs.fail","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating cs2. Report & evidence: https://phishdestroy.io/domain/6cs.fail","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6cs.fail']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T07:45:01Z","labels":["malicious-activity","phishing","brand:cs2"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6cs.fail"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c625deec-ad97-5a55-a0f6-2af3b2d8a9d5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-13T20:55:59Z","modified":"2026-08-13T20:55:59Z","name":"Phishing domain: 6d4bb2.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/6d4bb2.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6d4bb2.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-13T20:55:59Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6d4bb2.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc21c7fe-aba2-57a0-8869-463e7f4e38d2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T15:57:12Z","modified":"2026-08-09T15:57:12Z","name":"Phishing domain: 6e207b.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/6e207b.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6e207b.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T15:57:12Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6e207b.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d33eaafb-9634-5e85-932e-2ef869ed5125","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-27T10:20:32Z","modified":"2025-12-27T10:20:32Z","name":"Phishing domain: 6e97cb34.ngddguteetdy.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/6e97cb34.ngddguteetdy.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6e97cb34.ngddguteetdy.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-27T10:20:32Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6e97cb34.ngddguteetdy.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d03bb4ea-3972-59c2-9c8d-73b0a9011348","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-20T19:30:26Z","modified":"2025-12-20T19:30:26Z","name":"Phishing domain: 6eeb1fc6.trezo-d82.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/6eeb1fc6.trezo-d82.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6eeb1fc6.trezo-d82.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-20T19:30:26Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6eeb1fc6.trezo-d82.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbd378cf-ab5a-5166-bc4e-3b43af7bc642","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-12T03:18:38Z","modified":"2026-08-12T03:18:38Z","name":"Phishing domain: 6efc9f.arcadejafet.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/6efc9f.arcadejafet.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6efc9f.arcadejafet.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-12T03:18:38Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6efc9f.arcadejafet.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba27b2e5-7f77-56db-bec2-3b935ace369f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-20T22:02:24Z","modified":"2025-10-20T22:02:24Z","name":"Phishing domain: 6f26b83547ab4fe0.raydiumpro-web.shop","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Raydium. Report & evidence: https://phishdestroy.io/domain/6f26b83547ab4fe0.raydiumpro-web.shop","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6f26b83547ab4fe0.raydiumpro-web.shop']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-20T22:02:24Z","labels":["malicious-activity","phishing","brand:raydium"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6f26b83547ab4fe0.raydiumpro-web.shop"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fcc9bb9-011b-50d7-95ec-07108881d5e7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:54Z","modified":"2026-02-26T23:19:54Z","name":"Phishing domain: 6fuz1yno.alliegro.shop","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Apple. Report & evidence: https://phishdestroy.io/domain/6fuz1yno.alliegro.shop","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6fuz1yno.alliegro.shop']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:54Z","labels":["malicious-activity","phishing","brand:apple"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6fuz1yno.alliegro.shop"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6924569-84a8-5847-94ce-dfd51e3974b1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-15T21:57:57Z","modified":"2025-11-15T21:57:57Z","name":"Phishing domain: 6gods.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/6gods.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6gods.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-15T21:57:57Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6gods.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--59ff4b0a-630f-5846-92d9-7673b9aef7bb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-13T14:59:58Z","modified":"2025-12-13T14:59:58Z","name":"Phishing domain: 6h061.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/6h061.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6h061.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-13T14:59:58Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6h061.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a9948e7-7dee-54e2-b9ae-889a321be56e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-13T15:06:24Z","modified":"2025-12-13T15:06:24Z","name":"Phishing domain: 6h073.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6h073.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6h073.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-13T15:06:24Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6h073.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fd1b1d4-a3c6-5fca-9ce0-f3f3c9f61195","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-13T15:13:20Z","modified":"2025-12-13T15:13:20Z","name":"Phishing domain: 6h076.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/6h076.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6h076.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-13T15:13:20Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6h076.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--274ef1b9-b0a5-520b-b928-b15128f25819","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-13T15:06:48Z","modified":"2025-12-13T15:06:48Z","name":"Phishing domain: 6h301.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/6h301.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6h301.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-13T15:06:48Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6h301.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f25fe270-b97d-5ed8-9b40-53e036435715","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-13T15:00:45Z","modified":"2025-12-13T15:00:45Z","name":"Phishing domain: 6h321.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6h321.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6h321.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-13T15:00:45Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6h321.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--92aa2041-036f-5f1b-8906-a2f232caf0e4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-13T14:59:58Z","modified":"2025-12-13T14:59:58Z","name":"Phishing domain: 6h335.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/6h335.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6h335.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-13T14:59:58Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6h335.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--55a9cf5d-052c-5792-84b6-fb0a8d073653","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-13T15:01:14Z","modified":"2025-12-13T15:01:14Z","name":"Phishing domain: 6h336.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/6h336.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6h336.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-13T15:01:14Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6h336.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--63c1390c-3da8-5909-9ad9-bf32351a5661","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-13T15:11:19Z","modified":"2025-12-13T15:11:19Z","name":"Phishing domain: 6h337.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6h337.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6h337.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-13T15:11:19Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6h337.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--18c26173-450c-53ae-832e-1841fd2ada4f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:33Z","modified":"2026-02-26T23:19:33Z","name":"Phishing domain: 6h338.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/6h338.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6h338.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:33Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6h338.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9204adb2-ee25-52d8-96f4-70603e5ce228","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-13T14:59:56Z","modified":"2025-12-13T14:59:56Z","name":"Phishing domain: 6h339.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/6h339.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6h339.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-13T14:59:56Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6h339.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--67c71cb9-ae9c-5fa0-b680-93ce8c400fa1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-13T14:59:12Z","modified":"2025-12-13T14:59:12Z","name":"Phishing domain: 6h361.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/6h361.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6h361.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-13T14:59:12Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6h361.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--29d193d3-ea36-54ca-ad05-fb79701af2d4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:23Z","modified":"2026-02-26T23:24:23Z","name":"Phishing domain: 6h501.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6h501.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6h501.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:23Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6h501.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--485d01f8-c7ae-5511-855e-0c69a34443c3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:37Z","modified":"2026-02-26T23:24:37Z","name":"Phishing domain: 6h505.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6h505.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6h505.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:37Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6h505.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--139ba022-7328-5d28-94fb-7b718561a0ca","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-13T15:00:26Z","modified":"2025-12-13T15:00:26Z","name":"Phishing domain: 6h603.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/6h603.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6h603.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-13T15:00:26Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6h603.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6b353fc-0bfd-5a83-8a85-44524f775567","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:34Z","modified":"2026-02-26T23:20:34Z","name":"Phishing domain: 6h605.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/6h605.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6h605.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:34Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6h605.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--99eab719-8a21-5af3-a4c1-2a312afb1a6d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:36Z","modified":"2026-02-26T23:21:36Z","name":"Phishing domain: 6h644.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/6h644.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6h644.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:36Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6h644.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f02edd08-68f0-5588-a141-68de331e36ff","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:30Z","modified":"2026-02-26T23:24:30Z","name":"Phishing domain: 6h660.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/6h660.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6h660.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:30Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6h660.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6a2c211-da9e-5f41-999a-a341d6e2993b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:30Z","modified":"2026-02-26T23:22:30Z","name":"Phishing domain: 6h665.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/6h665.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6h665.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:30Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6h665.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d76ff0b-8740-58ff-9131-4fe665eaff47","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-05T00:49:58Z","modified":"2026-01-05T00:49:58Z","name":"Phishing domain: 6h667.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/6h667.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6h667.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-05T00:49:58Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6h667.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--844a06c3-ce7e-5e33-a218-2f7bb2c7eacb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-13T14:59:06Z","modified":"2025-12-13T14:59:06Z","name":"Phishing domain: 6h692.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/6h692.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6h692.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-13T14:59:06Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6h692.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a7ba7ed-eb33-5806-b98a-6b19e85ab85d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-13T15:03:00Z","modified":"2025-12-13T15:03:00Z","name":"Phishing domain: 6h693.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/6h693.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6h693.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-13T15:03:00Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6h693.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cea82042-4c54-54e3-995d-34a9859aef1e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-13T14:59:29Z","modified":"2025-12-13T14:59:29Z","name":"Phishing domain: 6h816.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/6h816.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6h816.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-13T14:59:29Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6h816.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4170a416-4d02-5004-855b-1e1f9f9df9f1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-25T00:13:20Z","modified":"2025-10-25T00:13:20Z","name":"Phishing domain: 6h882.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/6h882.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6h882.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-25T00:13:20Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6h882.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--29bdfd6b-f496-5fe0-8d04-30735d6cf249","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:25Z","modified":"2026-02-26T23:22:25Z","name":"Phishing domain: 6h939.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6h939.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6h939.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:25Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6h939.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--654f8d48-c313-5c13-8638-e027d6a0cd05","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:01Z","modified":"2026-02-26T23:24:01Z","name":"Phishing domain: 6hcp11.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6hcp11.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6hcp11.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:01Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6hcp11.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--833cc9fa-64d9-5d0b-8739-eeb7cbfa90d0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-05T00:17:21Z","modified":"2026-01-05T00:17:21Z","name":"Phishing domain: 6hcp33.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/6hcp33.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6hcp33.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-05T00:17:21Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6hcp33.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--efe2db1f-6f33-5e52-afed-f494c725f95a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:13Z","modified":"2026-02-26T23:20:13Z","name":"Phishing domain: 6hcp99.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/6hcp99.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6hcp99.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:13Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6hcp99.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c449177-d82c-5643-ace2-1827255f413a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-05T00:16:38Z","modified":"2026-01-05T00:16:38Z","name":"Phishing domain: 6hcp99.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6hcp99.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6hcp99.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-05T00:16:38Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6hcp99.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--73b8f39f-83ca-5450-b42a-c53b592fdfaf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:30Z","modified":"2026-02-26T23:23:30Z","name":"Phishing domain: 6jtn-casefb173408.vercel.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6jtn-casefb173408.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6jtn-casefb173408.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:30Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6jtn-casefb173408.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bcf837e-8c50-5a79-869b-db63fc31642c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-30T19:27:51Z","modified":"2026-06-30T19:27:51Z","name":"Phishing domain: 6jw7mfi5.cfd","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6jw7mfi5.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6jw7mfi5.cfd']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-30T19:27:51Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6jw7mfi5.cfd"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--40d4b748-da07-50e0-8799-06ba4bcc68ba","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-01T12:13:18Z","modified":"2025-12-01T12:13:18Z","name":"Phishing domain: 6k6.icu","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6k6.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6k6.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-01T12:13:18Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6k6.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6dca201-c22f-52a3-8708-681f994bfe05","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-30T19:49:13Z","modified":"2026-06-30T19:49:13Z","name":"Phishing domain: 6k7mxd-pxdu7-7gfsl-yois-2uspfd.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/6k7mxd-pxdu7-7gfsl-yois-2uspfd.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6k7mxd-pxdu7-7gfsl-yois-2uspfd.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-30T19:49:13Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6k7mxd-pxdu7-7gfsl-yois-2uspfd.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c1b28e9-c6c5-5743-bd0b-d2d684a0516b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-28T12:01:52Z","modified":"2026-06-28T12:01:52Z","name":"Phishing domain: 6kbet1l.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6kbet1l.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6kbet1l.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-28T12:01:52Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6kbet1l.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e92afd87-641c-5790-b0f9-663827f6e1b8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-28T11:53:50Z","modified":"2026-06-28T11:53:50Z","name":"Phishing domain: 6kbet1x.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/6kbet1x.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6kbet1x.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-28T11:53:50Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6kbet1x.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9025ff4-9b9a-5b26-b1dc-05253df0d644","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-28T15:24:09Z","modified":"2026-06-28T15:24:09Z","name":"Phishing domain: 6kbetpt.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6kbetpt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6kbetpt.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-28T15:24:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6kbetpt.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--44fb62e0-9eea-55b3-bea6-2cf9c410118e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-22T20:22:26Z","modified":"2026-07-22T20:22:26Z","name":"Phishing domain: 6new.shop","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6new.shop","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6new.shop']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-22T20:22:26Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6new.shop"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b9c2223-7338-5e82-b256-c82e771e348c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-07-27T06:56:13Z","modified":"2025-07-27T06:56:13Z","name":"Phishing domain: 6npool9s.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating binance. Report & evidence: https://phishdestroy.io/domain/6npool9s.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6npool9s.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-07-27T06:56:13Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6npool9s.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3928543e-b3be-50a4-ab52-643089cf25df","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-16T12:23:54Z","modified":"2025-11-16T12:23:54Z","name":"Phishing domain: 6pm1.pilot45.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6pm1.pilot45.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6pm1.pilot45.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-16T12:23:54Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6pm1.pilot45.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5faf8d06-8f30-578b-af5c-1089cc7307b8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-11T02:25:27Z","modified":"2026-07-11T02:25:27Z","name":"Phishing domain: 6ps7dukt.wsamoeesth.wefronetma4ms.ink","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Microsoft. Report & evidence: https://phishdestroy.io/domain/6ps7dukt.wsamoeesth.wefronetma4ms.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6ps7dukt.wsamoeesth.wefronetma4ms.ink']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-11T02:25:27Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6ps7dukt.wsamoeesth.wefronetma4ms.ink"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c98de68-591f-5881-ba01-ec6766c80f41","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T01:52:55Z","modified":"2026-02-13T01:52:55Z","name":"Phishing domain: 6pvc38y5izw3.icu","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6pvc38y5izw3.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6pvc38y5izw3.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T01:52:55Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6pvc38y5izw3.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--65003ee9-f67b-5f0c-9532-0edcdf66a919","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:42Z","modified":"2026-02-26T23:24:42Z","name":"Phishing domain: 6rbcc.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6rbcc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6rbcc.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:42Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6rbcc.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c9cc16a-977c-54ea-8f00-13d116ae9ae8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-17T17:17:35Z","modified":"2026-03-17T17:17:35Z","name":"Phishing domain: 6rdkr.mssg.me","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Facebook. Report & evidence: https://phishdestroy.io/domain/6rdkr.mssg.me","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6rdkr.mssg.me']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-17T17:17:35Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6rdkr.mssg.me"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9269c14c-4c1d-5ea4-91bb-a768ce1ddeeb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-10T03:06:00Z","modified":"2025-11-10T03:06:00Z","name":"Phishing domain: 6s825bs8.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating TrustWallet. Report & evidence: https://phishdestroy.io/domain/6s825bs8.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6s825bs8.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-10T03:06:00Z","labels":["malicious-activity","phishing","brand:trustwallet"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6s825bs8.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1a7c419-82eb-5947-9615-941f7a5947c4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-29T21:10:40Z","modified":"2026-05-29T21:10:40Z","name":"Phishing domain: 6slon--cc.ru","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6slon--cc.ru","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6slon--cc.ru']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-29T21:10:40Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6slon--cc.ru"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8573c2cb-c8c7-52a8-8c63-92c117da0b6c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-08T16:36:23Z","modified":"2026-06-08T16:36:23Z","name":"Phishing domain: 6t2yzu65nxg5bk2nzlopvoxo2ucb6vrhsq4brqd2nhu4ymw3blca.arweave.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6t2yzu65nxg5bk2nzlopvoxo2ucb6vrhsq4brqd2nhu4ymw3blca.arweave.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6t2yzu65nxg5bk2nzlopvoxo2ucb6vrhsq4brqd2nhu4ymw3blca.arweave.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-08T16:36:23Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6t2yzu65nxg5bk2nzlopvoxo2ucb6vrhsq4brqd2nhu4ymw3blca.arweave.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--78f99367-fc17-5a48-ba41-4b6292bf76cc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-24T15:17:30Z","modified":"2025-12-24T15:17:30Z","name":"Phishing domain: 6teen.network","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6teen.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6teen.network']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-24T15:17:30Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6teen.network"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8a53de4-ec8f-55c4-91b8-cac6f12b41e7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-10T10:48:39Z","modified":"2026-07-10T10:48:39Z","name":"Phishing domain: 6to2l2iw5rxpg36fjz5x7ggtprari5ltsihf4vxsj6zi4q6n4uha.arweave.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/6to2l2iw5rxpg36fjz5x7ggtprari5ltsihf4vxsj6zi4q6n4uha.arweave.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6to2l2iw5rxpg36fjz5x7ggtprari5ltsihf4vxsj6zi4q6n4uha.arweave.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-10T10:48:39Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6to2l2iw5rxpg36fjz5x7ggtprari5ltsihf4vxsj6zi4q6n4uha.arweave.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd8853be-1059-5308-a6ce-f137b5f94036","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-19T01:13:20Z","modified":"2025-10-19T01:13:20Z","name":"Phishing domain: 6tyu2.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating argent. Report & evidence: https://phishdestroy.io/domain/6tyu2.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6tyu2.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-19T01:13:20Z","labels":["malicious-activity","phishing","brand:argent"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6tyu2.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c4af0b3-5ea2-576f-aa14-29b773ddb3a2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-18T19:35:07Z","modified":"2026-07-18T19:35:07Z","name":"Phishing domain: 6u366kqdmf6txidtr3iqqvfv7pbdvsgdvpdytopkpzxlrniihztq.arweave.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6u366kqdmf6txidtr3iqqvfv7pbdvsgdvpdytopkpzxlrniihztq.arweave.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6u366kqdmf6txidtr3iqqvfv7pbdvsgdvpdytopkpzxlrniihztq.arweave.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-18T19:35:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6u366kqdmf6txidtr3iqqvfv7pbdvsgdvpdytopkpzxlrniihztq.arweave.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cfff050-4ec5-5c06-acdb-f1bbb3243383","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-26T13:40:44Z","modified":"2025-10-26T13:40:44Z","name":"Phishing domain: 6uiiii.weebly.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6uiiii.weebly.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6uiiii.weebly.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-26T13:40:44Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6uiiii.weebly.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bf89fd6-8b19-57ae-9f4c-dabef897e7f8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:07Z","modified":"2026-02-26T23:23:07Z","name":"Phishing domain: 6utc-casefb982567.vercel.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/6utc-casefb982567.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6utc-casefb982567.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6utc-casefb982567.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd05e43a-2452-52d3-b982-e62383a78609","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-31T16:41:38Z","modified":"2026-01-31T16:41:38Z","name":"Phishing domain: 6web.whatsapwcso.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating whatsapp. Report & evidence: https://phishdestroy.io/domain/6web.whatsapwcso.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6web.whatsapwcso.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-31T16:41:38Z","labels":["malicious-activity","phishing","brand:whatsapp"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6web.whatsapwcso.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3149393d-6b77-5f5f-88ef-f0bb7bcf2aa1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-15T13:55:59Z","modified":"2025-11-15T13:55:59Z","name":"Phishing domain: 6xcas.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/6xcas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6xcas.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-15T13:55:59Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6xcas.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3ea7ff5-5552-5586-947d-e84a53155d6b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-05T13:01:24Z","modified":"2026-01-05T13:01:24Z","name":"Phishing domain: 6xwin.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating foundation. Report & evidence: https://phishdestroy.io/domain/6xwin.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6xwin.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-05T13:01:24Z","labels":["malicious-activity","phishing","brand:foundation"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6xwin.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--56b30e17-74e3-5416-836b-9442d30c04ff","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-16T14:26:38Z","modified":"2026-06-16T14:26:38Z","name":"Phishing domain: 6yod3a.lmax.xin","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/6yod3a.lmax.xin","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6yod3a.lmax.xin']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-16T14:26:38Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6yod3a.lmax.xin"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcc7cdee-a5d6-5533-a330-b3b6e7cbbeac","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-16T07:21:51Z","modified":"2025-12-16T07:21:51Z","name":"Phishing domain: 6z9csad.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/6z9csad.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '6z9csad.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-16T07:21:51Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/6z9csad.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--32b44a7b-788f-525e-8f49-2ed7ff980f80","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-27T14:15:37Z","modified":"2026-06-27T14:15:37Z","name":"Phishing domain: 7-0070hu.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericemail. Report & evidence: https://phishdestroy.io/domain/7-0070hu.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7-0070hu.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-27T14:15:37Z","labels":["malicious-activity","phishing","brand:genericemail"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7-0070hu.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6402562a-0077-53d4-a089-e40cae636ab1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-24T21:24:31Z","modified":"2026-04-24T21:24:31Z","name":"Phishing domain: 7-bit-casino.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/7-bit-casino.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7-bit-casino.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-24T21:24:31Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7-bit-casino.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eccac453-ac1b-5290-afff-ee2c4847face","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-24T18:31:57Z","modified":"2026-04-24T18:31:57Z","name":"Phishing domain: 7-bit-casino.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bitcoin. Report & evidence: https://phishdestroy.io/domain/7-bit-casino.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7-bit-casino.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-24T18:31:57Z","labels":["malicious-activity","phishing","brand:bitcoin"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7-bit-casino.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6129d8a0-91da-5866-9723-d5f6dcd6ed12","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-16T07:48:42Z","modified":"2025-09-16T07:48:42Z","name":"Phishing domain: 7-dec.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/7-dec.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7-dec.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-16T07:48:42Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7-dec.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b28a2279-4fd0-57e4-a2de-e24d7b36f236","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-08T01:28:36Z","modified":"2026-08-08T01:28:36Z","name":"Phishing domain: 7-google.com.cn","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating gemini. Report & evidence: https://phishdestroy.io/domain/7-google.com.cn","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7-google.com.cn']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-08T01:28:36Z","labels":["malicious-activity","phishing","brand:gemini"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7-google.com.cn"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5567a43e-faf8-54b9-ac00-8f909302fe57","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-05T15:14:41Z","modified":"2026-01-05T15:14:41Z","name":"Phishing domain: 7-rocket.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating cryptoscam. Report & evidence: https://phishdestroy.io/domain/7-rocket.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7-rocket.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-05T15:14:41Z","labels":["malicious-activity","phishing","brand:cryptoscam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7-rocket.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d193c1c-6601-5eab-83cb-8c230c409765","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-28T06:03:20Z","modified":"2026-03-28T06:03:20Z","name":"Phishing domain: 7-slonov.ru","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/7-slonov.ru","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7-slonov.ru']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-28T06:03:20Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7-slonov.ru"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4e8fb70-a91e-559f-92b1-d0a87234d47e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-11T17:35:38Z","modified":"2025-11-11T17:35:38Z","name":"Phishing domain: 7-zip.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/7-zip.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7-zip.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-11T17:35:38Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7-zip.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1586d918-02e9-549b-8700-1fa46800311c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-13T12:41:43Z","modified":"2026-06-13T12:41:43Z","name":"Phishing domain: 7-zip.net.cn","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/7-zip.net.cn","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7-zip.net.cn']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-13T12:41:43Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7-zip.net.cn"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a3f4904-9bda-5bb3-8738-6fdc714f87a0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-11T20:30:02Z","modified":"2026-03-11T20:30:02Z","name":"Phishing domain: 7-zip.org.pl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/7-zip.org.pl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7-zip.org.pl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-11T20:30:02Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7-zip.org.pl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8700dac-e343-5d4f-b7b2-da04cdea12ca","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-10T14:41:38Z","modified":"2026-07-10T14:41:38Z","name":"Phishing domain: 7-zip.us","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/7-zip.us","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7-zip.us']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-10T14:41:38Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7-zip.us"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--10b1f947-e17a-5d35-97af-444369c7f510","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-14T01:43:41Z","modified":"2025-12-14T01:43:41Z","name":"Phishing domain: 7.600212.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating whatsapp. Report & evidence: https://phishdestroy.io/domain/7.600212.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7.600212.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-14T01:43:41Z","labels":["malicious-activity","phishing","brand:whatsapp"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7.600212.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b03b0c0-ed25-54a2-a80f-cfa4a81099d1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-08T02:51:40Z","modified":"2026-08-08T02:51:40Z","name":"Phishing domain: 7.rewardingmyself.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/7.rewardingmyself.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7.rewardingmyself.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-08T02:51:40Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7.rewardingmyself.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--42ff17f2-ea6c-5eec-8917-630c48466d26","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-08T02:54:28Z","modified":"2026-08-08T02:54:28Z","name":"Phishing domain: 7.therewardinglocker.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/7.therewardinglocker.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7.therewardinglocker.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-08T02:54:28Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7.therewardinglocker.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9040ec0e-70c6-5581-9b61-6a578196e698","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-28T18:23:23Z","modified":"2026-02-28T18:23:23Z","name":"Phishing domain: 7009marsbahis.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/7009marsbahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7009marsbahis.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-28T18:23:23Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7009marsbahis.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc752f41-9b5b-5b99-b3f3-0164900f3424","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-30T05:02:24Z","modified":"2026-05-30T05:02:24Z","name":"Phishing domain: 700tgt.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/700tgt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '700tgt.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-30T05:02:24Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/700tgt.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--39dd4a76-5876-558d-aaae-eb35e0ef1646","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T15:55:31Z","modified":"2026-08-09T15:55:31Z","name":"Phishing domain: 70113.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating gmail. Report & evidence: https://phishdestroy.io/domain/70113.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '70113.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T15:55:31Z","labels":["malicious-activity","phishing","brand:gmail"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/70113.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cd78c74-ab2f-53ed-a5a1-876aadf773f8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-03T09:58:32Z","modified":"2025-09-03T09:58:32Z","name":"Phishing domain: 70232.my","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/70232.my","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '70232.my']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-03T09:58:32Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/70232.my"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--06770916-dc94-5f6f-b2ba-510141eef841","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-19T17:10:07Z","modified":"2026-07-19T17:10:07Z","name":"Phishing domain: 70365app.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/70365app.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '70365app.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-19T17:10:07Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/70365app.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--881c8e2c-3e21-50f7-92ad-805081c52a2a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-18T15:32:32Z","modified":"2025-10-18T15:32:32Z","name":"Phishing domain: 703b5bfdcb9e4440.raydiumpro-web.shop","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Raydium. Report & evidence: https://phishdestroy.io/domain/703b5bfdcb9e4440.raydiumpro-web.shop","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '703b5bfdcb9e4440.raydiumpro-web.shop']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-18T15:32:32Z","labels":["malicious-activity","phishing","brand:raydium"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/703b5bfdcb9e4440.raydiumpro-web.shop"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc02368f-443a-5b86-b13c-9503051f887a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-16T15:16:11Z","modified":"2026-03-16T15:16:11Z","name":"Phishing domain: 707.su","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/707.su","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '707.su']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-16T15:16:11Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/707.su"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c64be6f-3378-5d76-ad69-cbe3b298ae18","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:40Z","modified":"2026-02-26T23:22:40Z","name":"Phishing domain: 7076611218.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/7076611218.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7076611218.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:40Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7076611218.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e85dd586-85b2-50ab-a8e8-d6e7b1c99cd9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 7109708159tyj.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/7109708159tyj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7109708159tyj.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7109708159tyj.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3b50f4c-7f92-50e5-84bc-84b471310fb9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-19T11:37:27Z","modified":"2026-03-19T11:37:27Z","name":"Phishing domain: 710k.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/710k.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '710k.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-19T11:37:27Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/710k.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--135e6bde-061a-5dc7-88fd-249fb499ad26","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-26T13:39:11Z","modified":"2026-01-26T13:39:11Z","name":"Phishing domain: 7117934065.dojiner.at","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Steam. Report & evidence: https://phishdestroy.io/domain/7117934065.dojiner.at","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7117934065.dojiner.at']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-26T13:39:11Z","labels":["malicious-activity","phishing","brand:steam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7117934065.dojiner.at"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f32efa9-a98a-5599-abbc-899d40e3d6f0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-23T15:43:13Z","modified":"2026-01-23T15:43:13Z","name":"Phishing domain: 712403-cb.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/712403-cb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '712403-cb.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-23T15:43:13Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/712403-cb.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d56fc3ae-4e44-58b2-9ab2-1be69f40310e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-04T14:10:49Z","modified":"2026-07-04T14:10:49Z","name":"Phishing domain: 71257.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/71257.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '71257.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-04T14:10:49Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/71257.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--81bc1ab9-d5cd-5db4-9b77-6d9b2e1c3a2d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:31Z","modified":"2026-02-26T23:19:31Z","name":"Phishing domain: 712849-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/712849-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '712849-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:31Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/712849-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9601fd49-3755-555a-9ccb-bd204af22914","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:16Z","modified":"2026-07-27T06:02:16Z","name":"Phishing domain: 71292.pet","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/71292.pet","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '71292.pet']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:16Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/71292.pet"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8888c6d7-e1d2-5149-9d54-d6730c5ca581","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-08T15:21:13Z","modified":"2026-08-08T15:21:13Z","name":"Phishing domain: 71381.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating gmail. Report & evidence: https://phishdestroy.io/domain/71381.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '71381.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-08T15:21:13Z","labels":["malicious-activity","phishing","brand:gmail"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/71381.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--23949081-5fcd-59ee-a065-62194624908b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-08T15:33:46Z","modified":"2026-08-08T15:33:46Z","name":"Phishing domain: 71593.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating gmail. Report & evidence: https://phishdestroy.io/domain/71593.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '71593.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-08T15:33:46Z","labels":["malicious-activity","phishing","brand:gmail"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/71593.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dac5dcd-7590-5372-9082-900b34f986b0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T03:06:44Z","modified":"2026-08-10T03:06:44Z","name":"Phishing domain: 71693.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/71693.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '71693.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T03:06:44Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/71693.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--164b4ea1-2a55-5a7f-96ba-232fd61e4a0f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-08T15:24:20Z","modified":"2026-08-08T15:24:20Z","name":"Phishing domain: 71713.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating gmail. Report & evidence: https://phishdestroy.io/domain/71713.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '71713.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-08T15:24:20Z","labels":["malicious-activity","phishing","brand:gmail"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/71713.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cbc97ea-8f6a-5489-8d49-08754ace2936","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-12T03:31:51Z","modified":"2026-08-12T03:31:51Z","name":"Phishing domain: 717ac0.arcadejafet.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/717ac0.arcadejafet.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '717ac0.arcadejafet.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-12T03:31:51Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/717ac0.arcadejafet.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--82a567cf-b353-58cd-af82-924b2e847080","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-08T14:41:26Z","modified":"2026-07-08T14:41:26Z","name":"Phishing domain: 718345.top","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/718345.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '718345.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-08T14:41:26Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/718345.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9ff303a-2ed1-576c-9ccc-f4a352487853","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-08T13:48:59Z","modified":"2026-07-08T13:48:59Z","name":"Phishing domain: 718809.top","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/718809.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '718809.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-08T13:48:59Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/718809.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--df55224f-52c4-5aed-b82b-83d04cedbbf5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-25T15:26:41Z","modified":"2025-12-25T15:26:41Z","name":"Phishing domain: 7196ae03.mfgjgnihfh.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating trezor. Report & evidence: https://phishdestroy.io/domain/7196ae03.mfgjgnihfh.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7196ae03.mfgjgnihfh.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-25T15:26:41Z","labels":["malicious-activity","phishing","brand:trezor"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7196ae03.mfgjgnihfh.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b7f310f-23ec-5dd4-8963-ac1aec591400","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-28T00:55:57Z","modified":"2026-03-28T00:55:57Z","name":"Phishing domain: 71mra.vip","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/71mra.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '71mra.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-28T00:55:57Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/71mra.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ec6489d-65d8-5f01-84c8-29704a87beac","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-29T09:49:43Z","modified":"2025-11-29T09:49:43Z","name":"Phishing domain: 72-14-190-53.ip.linodeusercontent.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/72-14-190-53.ip.linodeusercontent.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '72-14-190-53.ip.linodeusercontent.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-29T09:49:43Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/72-14-190-53.ip.linodeusercontent.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--24b3e59d-0c72-5635-a5a4-fb88e39daccf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-30T00:39:25Z","modified":"2025-12-30T00:39:25Z","name":"Phishing domain: 72-146-195-11.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/72-146-195-11.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '72-146-195-11.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-30T00:39:25Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/72-146-195-11.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7661b342-e1a9-530b-b576-ca9e670d565c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-01T20:11:32Z","modified":"2026-08-01T20:11:32Z","name":"Phishing domain: 72037.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/72037.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '72037.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-01T20:11:32Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/72037.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a47a853e-c3a4-5b6a-b412-7b2103fbabcb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-05T05:27:44Z","modified":"2026-01-05T05:27:44Z","name":"Phishing domain: 721928coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/721928coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '721928coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-05T05:27:44Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/721928coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a9ab54c-e68c-53af-a611-72d51270a07f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-20T13:22:39Z","modified":"2025-10-20T13:22:39Z","name":"Phishing domain: 72216.weebly.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating AT&T. Report & evidence: https://phishdestroy.io/domain/72216.weebly.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '72216.weebly.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-20T13:22:39Z","labels":["malicious-activity","phishing","brand:at&t"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/72216.weebly.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0beb921-339c-5fe1-9666-48a3a9fdcd8b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-12T11:05:01Z","modified":"2026-06-12T11:05:01Z","name":"Phishing domain: 72351coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/72351coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '72351coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-12T11:05:01Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/72351coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--00dd30a5-12ce-53f0-8fb3-3c2874313ff7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-11T18:15:46Z","modified":"2026-08-11T18:15:46Z","name":"Phishing domain: 724526-binance.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Binance. Report & evidence: https://phishdestroy.io/domain/724526-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '724526-binance.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-11T18:15:46Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/724526-binance.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4edd5dc-8723-52b9-b0c7-f9a7d98948ee","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-17T19:21:17Z","modified":"2026-06-17T19:21:17Z","name":"Phishing domain: 726354.click","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/726354.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '726354.click']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-17T19:21:17Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/726354.click"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a87f0d6-aa7d-5c14-b73f-22537ba11335","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-09T11:16:54Z","modified":"2026-03-09T11:16:54Z","name":"Phishing domain: 726698-google.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/726698-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '726698-google.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-09T11:16:54Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/726698-google.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a6379c8-117f-5ac7-8f66-c015f9bf8d1c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-05T15:46:13Z","modified":"2026-07-05T15:46:13Z","name":"Phishing domain: 72753-icloud.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Apple. Report & evidence: https://phishdestroy.io/domain/72753-icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '72753-icloud.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-05T15:46:13Z","labels":["malicious-activity","phishing","brand:apple"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/72753-icloud.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fecbf7cc-4211-513b-b1d8-25ddf99da42e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 72761652.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/72761652.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '72761652.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/72761652.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--103b95c3-eb3e-5fc7-8f4b-8376c6376414","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:47:49Z","modified":"2026-07-27T04:47:49Z","name":"Phishing domain: 72815c.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/72815c.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '72815c.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:47:49Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/72815c.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed080e49-4bd9-5506-915b-2f9fd133d3ac","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T00:13:12Z","modified":"2026-02-13T00:13:12Z","name":"Phishing domain: 728568google.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/728568google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '728568google.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T00:13:12Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/728568google.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c50dcd0f-385a-56e6-afd8-3c9e69caba5b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-25T09:41:17Z","modified":"2025-12-25T09:41:17Z","name":"Phishing domain: 729281coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/729281coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '729281coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-25T09:41:17Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/729281coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4bf5c2a-9443-595e-b897-5a8f2f05d113","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-17T18:55:56Z","modified":"2025-10-17T18:55:56Z","name":"Phishing domain: 72948-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/72948-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '72948-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-17T18:55:56Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/72948-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--95e91572-6eb9-5aa3-bd3c-ca838611c5dc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T18:14:05Z","modified":"2026-02-13T18:14:05Z","name":"Phishing domain: 729536google.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/729536google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '729536google.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T18:14:05Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/729536google.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--65a587ab-949b-5bc2-b19d-b83ff9097337","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-13T21:04:11Z","modified":"2026-08-13T21:04:11Z","name":"Phishing domain: 729fc8.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/729fc8.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '729fc8.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-13T21:04:11Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/729fc8.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b0a0629-1a20-5e8d-bce1-43d69a6d0faf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-28T00:55:55Z","modified":"2026-03-28T00:55:55Z","name":"Phishing domain: 72chs.vip","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/72chs.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '72chs.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-28T00:55:55Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/72chs.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--253c34d0-3e34-5cf5-be1d-d6cc39bd31f4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T18:40:07Z","modified":"2026-08-09T18:40:07Z","name":"Phishing domain: 73.5lvo.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/73.5lvo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '73.5lvo.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T18:40:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/73.5lvo.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7493690-9cdd-55f5-ac11-ab476078b14b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-27T07:54:29Z","modified":"2026-02-27T07:54:29Z","name":"Phishing domain: 735kavbet.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/735kavbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '735kavbet.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-27T07:54:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/735kavbet.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce2295a6-1d73-517c-96f3-92fdda420cbe","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-19T18:04:03Z","modified":"2026-01-19T18:04:03Z","name":"Phishing domain: 73613.vip","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/73613.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '73613.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-19T18:04:03Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/73613.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac8689bc-4df0-5f40-b9e3-cf4e4cd89798","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-23T12:45:51Z","modified":"2025-11-23T12:45:51Z","name":"Phishing domain: 736623coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/736623coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '736623coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-23T12:45:51Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/736623coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e4f9ca1-5969-513e-8dda-ff3a85a5d74c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 736vns.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/736vns.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '736vns.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/736vns.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe80ac40-2d93-5359-8113-af9bf95e9819","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-02T11:07:45Z","modified":"2025-11-02T11:07:45Z","name":"Phishing domain: 737452coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/737452coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '737452coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-02T11:07:45Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/737452coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4084b00-02d8-5464-8978-a38db9dd4fc3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-08T13:32:28Z","modified":"2026-07-08T13:32:28Z","name":"Phishing domain: 73765.vip","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/73765.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '73765.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-08T13:32:28Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/73765.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bf1d91c-0f81-5932-89b8-eed85f5dc3d6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-12T03:18:46Z","modified":"2026-08-12T03:18:46Z","name":"Phishing domain: 73b70c.arcadejafet.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/73b70c.arcadejafet.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '73b70c.arcadejafet.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-12T03:18:46Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/73b70c.arcadejafet.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b9cf6b5-f1aa-5a1b-aeab-42dd81a6c3b8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-25T17:30:30Z","modified":"2026-06-25T17:30:30Z","name":"Phishing domain: 73bz90.cn","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/73bz90.cn","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '73bz90.cn']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-25T17:30:30Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/73bz90.cn"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a7aa09c-b71d-5d7e-9ff5-57378fc593a6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-12T11:16:44Z","modified":"2026-06-12T11:16:44Z","name":"Phishing domain: 73ddyknsbbcxpyzn2pgwg5vnlrav4cegs22bpubkocrukfsiqupa.turbo-gateway.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/73ddyknsbbcxpyzn2pgwg5vnlrav4cegs22bpubkocrukfsiqupa.turbo-gateway.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '73ddyknsbbcxpyzn2pgwg5vnlrav4cegs22bpubkocrukfsiqupa.turbo-gateway.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-12T11:16:44Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/73ddyknsbbcxpyzn2pgwg5vnlrav4cegs22bpubkocrukfsiqupa.turbo-gateway.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c7e43a0-b419-5db5-b092-dba73337cd07","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T17:27:31Z","modified":"2026-02-26T17:27:31Z","name":"Phishing domain: 74-242-218-249.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/74-242-218-249.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '74-242-218-249.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T17:27:31Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/74-242-218-249.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--96e1e0d4-1815-556c-b89a-714432765929","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-28T11:54:53Z","modified":"2026-06-28T11:54:53Z","name":"Phishing domain: 74-248-32-242.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating dpd. Report & evidence: https://phishdestroy.io/domain/74-248-32-242.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '74-248-32-242.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-28T11:54:53Z","labels":["malicious-activity","phishing","brand:dpd"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/74-248-32-242.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7adfb68-68c7-5e97-ba13-b5fb03879e57","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-07-22T07:56:10Z","modified":"2025-07-22T07:56:10Z","name":"Phishing domain: 7415decarpiquet.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Arbitrum. Report & evidence: https://phishdestroy.io/domain/7415decarpiquet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7415decarpiquet.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-07-22T07:56:10Z","labels":["malicious-activity","phishing","brand:arbitrum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7415decarpiquet.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7343faa7-e732-5b01-bf46-3e31e53c1513","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T15:43:31Z","modified":"2026-08-09T15:43:31Z","name":"Phishing domain: 741be7.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/741be7.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '741be7.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T15:43:31Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/741be7.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a2c211d-99c2-5f15-9eb6-1ed2ca83f628","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-22T10:16:04Z","modified":"2025-12-22T10:16:04Z","name":"Phishing domain: 742182coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/742182coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '742182coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-22T10:16:04Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/742182coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f6a27ff-b541-574c-b49e-a2fa20ba304e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:08Z","modified":"2026-02-26T23:23:08Z","name":"Phishing domain: 742935coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/742935coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '742935coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:08Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/742935coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3f38c78-a1f7-55d6-a66b-bb0d1c822449","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-09T14:10:11Z","modified":"2026-07-09T14:10:11Z","name":"Phishing domain: 743692-binance.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Binance. Report & evidence: https://phishdestroy.io/domain/743692-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '743692-binance.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-09T14:10:11Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/743692-binance.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--66d54259-6d6a-55ff-9611-fc9ab46391b6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-28T18:29:53Z","modified":"2026-02-28T18:29:53Z","name":"Phishing domain: 746hillbet.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/746hillbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '746hillbet.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-28T18:29:53Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/746hillbet.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c95a045-5e8a-5c09-9783-8e3e3744a56b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-03T09:52:29Z","modified":"2025-09-03T09:52:29Z","name":"Phishing domain: 74801.academy","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/74801.academy","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '74801.academy']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-03T09:52:29Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/74801.academy"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac83a61c-0a65-5c3d-afb4-f789fb79d25f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-15T15:32:08Z","modified":"2026-07-15T15:32:08Z","name":"Phishing domain: 749aliyevf.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating facebook. Report & evidence: https://phishdestroy.io/domain/749aliyevf.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '749aliyevf.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-15T15:32:08Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/749aliyevf.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0555871f-6e61-5d53-9c1e-6f2c6de75c6f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-22T23:28:03Z","modified":"2026-06-22T23:28:03Z","name":"Phishing domain: 74ze98.cn","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/74ze98.cn","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '74ze98.cn']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-22T23:28:03Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/74ze98.cn"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9351eaa-17d9-5adb-ae81-113e16dc2d64","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-06T14:44:28Z","modified":"2026-07-06T14:44:28Z","name":"Phishing domain: 7539.xin","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/7539.xin","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7539.xin']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-06T14:44:28Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7539.xin"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--81a7d7f7-a068-5d18-a956-5e82b0212198","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 75461652.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/75461652.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '75461652.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/75461652.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--17bdd267-4e8d-58f7-b4bf-e5cc9a15d774","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T13:49:30Z","modified":"2026-02-13T13:49:30Z","name":"Phishing domain: 755341-uphold.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/755341-uphold.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '755341-uphold.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T13:49:30Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/755341-uphold.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3473bdb0-60d6-5b29-8cd3-0b2138d470f3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-03T09:57:48Z","modified":"2025-09-03T09:57:48Z","name":"Phishing domain: 75701.club","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/75701.club","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '75701.club']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-03T09:57:48Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/75701.club"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--436b6102-7518-5bf0-a793-2fd60c87383e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T14:34:05Z","modified":"2026-07-27T14:34:05Z","name":"Phishing domain: 757cd1be-caf3-4f80-a41c-cce6f5c7cf14-00-n6g9vgcw7z72.spock.replit.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/757cd1be-caf3-4f80-a41c-cce6f5c7cf14-00-n6g9vgcw7z72.spock.replit.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '757cd1be-caf3-4f80-a41c-cce6f5c7cf14-00-n6g9vgcw7z72.spock.replit.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T14:34:05Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/757cd1be-caf3-4f80-a41c-cce6f5c7cf14-00-n6g9vgcw7z72.spock.replit.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d43f9ea8-cdab-56cc-896b-0339646da751","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 75900k.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/75900k.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '75900k.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/75900k.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed0a210f-ca80-51d7-8fb7-de23e97550df","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-11T18:28:52Z","modified":"2026-08-11T18:28:52Z","name":"Phishing domain: 75dbd9.arcadejafet.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/75dbd9.arcadejafet.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '75dbd9.arcadejafet.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-11T18:28:52Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/75dbd9.arcadejafet.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f78753d5-1b73-527e-91a6-60be9edf2561","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-29T02:34:57Z","modified":"2026-07-29T02:34:57Z","name":"Phishing domain: 75df6039-6a04-17a3-c392-docviewer2.rajesh-das1010.workers.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/75df6039-6a04-17a3-c392-docviewer2.rajesh-das1010.workers.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '75df6039-6a04-17a3-c392-docviewer2.rajesh-das1010.workers.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-29T02:34:57Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/75df6039-6a04-17a3-c392-docviewer2.rajesh-das1010.workers.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--81a75f94-52ff-5c56-988a-fa69b68e0b0c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-24T03:08:57Z","modified":"2025-08-24T03:08:57Z","name":"Phishing domain: 762359-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/762359-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '762359-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-24T03:08:57Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/762359-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd8b645d-b6a8-5fd6-b2a6-06769d110c7d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-24T18:48:07Z","modified":"2026-02-24T18:48:07Z","name":"Phishing domain: 763182819.top","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/763182819.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '763182819.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-24T18:48:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/763182819.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f465add4-73cb-5675-9e2c-5dfe9d0c1be7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-06T12:49:39Z","modified":"2026-03-06T12:49:39Z","name":"Phishing domain: 76372coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/76372coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '76372coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-06T12:49:39Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/76372coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--002803ed-a50e-5778-b081-37e8fb2f489b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-06T18:19:02Z","modified":"2026-07-06T18:19:02Z","name":"Phishing domain: 763yf63gcrvr.icu","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/763yf63gcrvr.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '763yf63gcrvr.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-06T18:19:02Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/763yf63gcrvr.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b559ae5-b9a1-52ae-a2e8-7db23b0dd599","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-03T09:56:35Z","modified":"2025-09-03T09:56:35Z","name":"Phishing domain: 76511.loan","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/76511.loan","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '76511.loan']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-03T09:56:35Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/76511.loan"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--da82aba3-bb8b-57fb-a28b-cc4088561504","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-31T20:14:52Z","modified":"2026-07-31T20:14:52Z","name":"Phishing domain: 7655holiganbet.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating counter-strike. Report & evidence: https://phishdestroy.io/domain/7655holiganbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7655holiganbet.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-31T20:14:52Z","labels":["malicious-activity","phishing","brand:counter-strike"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7655holiganbet.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5ef70dd-a3cf-56c5-880a-458ba8af74ff","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:43Z","modified":"2026-02-26T23:20:43Z","name":"Phishing domain: 76650022.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/76650022.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '76650022.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:43Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/76650022.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--046dca71-83dc-5142-b53d-fc22364e9b3e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T13:17:19Z","modified":"2026-01-02T13:17:19Z","name":"Phishing domain: 76650077.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/76650077.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '76650077.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T13:17:19Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/76650077.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--86b6f60a-ea7f-57a9-bedf-9f71b32551ba","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T14:04:31Z","modified":"2026-01-02T14:04:31Z","name":"Phishing domain: 76651144.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/76651144.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '76651144.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T14:04:31Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/76651144.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c66985d-d027-55e2-b3d7-a0c8b9545aaa","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T13:11:28Z","modified":"2026-01-02T13:11:28Z","name":"Phishing domain: 76651166.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/76651166.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '76651166.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T13:11:28Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/76651166.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3aa66fb7-fb20-55ef-970e-05a1c95b0ed1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T13:17:16Z","modified":"2026-01-02T13:17:16Z","name":"Phishing domain: 76652255.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/76652255.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '76652255.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T13:17:16Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/76652255.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1414afb8-4b0f-561d-acc8-2831c8db0187","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T13:07:39Z","modified":"2026-01-02T13:07:39Z","name":"Phishing domain: 76652266.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/76652266.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '76652266.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T13:07:39Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/76652266.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--48681d5a-1924-5cc0-88a8-1dca6765e47b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-25T09:40:28Z","modified":"2025-12-25T09:40:28Z","name":"Phishing domain: 76653322.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/76653322.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '76653322.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-25T09:40:28Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/76653322.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--48faf347-9e1a-55bc-ac6b-2762880f605e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:38Z","modified":"2026-02-26T23:24:38Z","name":"Phishing domain: 76653333.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/76653333.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '76653333.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:38Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/76653333.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8b8b834-4e8c-56cd-b85c-98d5d5bddda0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T13:11:25Z","modified":"2026-01-02T13:11:25Z","name":"Phishing domain: 7665aa.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/7665aa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7665aa.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T13:11:25Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7665aa.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce6e6bd9-72b4-593c-8efa-73023452c9a1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T14:04:51Z","modified":"2026-01-02T14:04:51Z","name":"Phishing domain: 7665p.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/7665p.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7665p.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T14:04:51Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7665p.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--da138344-8a5a-56ac-a5da-864e916d4478","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T13:18:29Z","modified":"2026-01-02T13:18:29Z","name":"Phishing domain: 7665xx.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/7665xx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7665xx.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T13:18:29Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7665xx.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4754045d-0453-5480-adb5-e787e15fcfe7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T13:11:56Z","modified":"2026-01-02T13:11:56Z","name":"Phishing domain: 7665z.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/7665z.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7665z.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T13:11:56Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7665z.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bb047f2-c38c-54d1-87c7-fd35265dbb6d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-21T13:25:07Z","modified":"2025-11-21T13:25:07Z","name":"Phishing domain: 77-110-110-217.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/77-110-110-217.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '77-110-110-217.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-21T13:25:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/77-110-110-217.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--85b239cd-eadc-50e5-9ec2-69f93d468950","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-19T12:42:24Z","modified":"2025-11-19T12:42:24Z","name":"Phishing domain: 77-110-118-2.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/77-110-118-2.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '77-110-118-2.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-19T12:42:24Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/77-110-118-2.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--782acf4e-4342-55fe-9d22-a987a3ddaf9d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:45Z","modified":"2026-02-26T23:19:45Z","name":"Phishing domain: 77-blt.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/77-blt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '77-blt.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:45Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/77-blt.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b324788-5ae7-5b9a-8f41-4208254dcf25","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:17Z","modified":"2026-07-27T06:02:17Z","name":"Phishing domain: 770.vc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/770.vc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '770.vc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/770.vc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--84b0e112-9fd7-52ef-896b-3a6a1af3db1a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-23T23:43:30Z","modified":"2026-02-23T23:43:30Z","name":"Phishing domain: 7700betbrazil.bet","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/7700betbrazil.bet","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7700betbrazil.bet']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-23T23:43:30Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7700betbrazil.bet"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--180dc477-6a44-5124-858c-11c7b768d9c6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-08T14:44:05Z","modified":"2026-07-08T14:44:05Z","name":"Phishing domain: 77093.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/77093.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '77093.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-08T14:44:05Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/77093.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0951947-5d23-5eed-b012-8ef5170489a2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-08T14:44:53Z","modified":"2026-07-08T14:44:53Z","name":"Phishing domain: 77145.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/77145.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '77145.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-08T14:44:53Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/77145.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bdddeec-9c08-5317-a2cd-505c62917367","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-08T14:44:28Z","modified":"2026-07-08T14:44:28Z","name":"Phishing domain: 77192.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/77192.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '77192.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-08T14:44:28Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/77192.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4c51467-7903-5d55-bf5c-2f94ae3ecf67","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 7729698---6165.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/7729698---6165.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7729698---6165.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7729698---6165.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c1c221a-8fc8-5108-bc16-f3d2f1a277c9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-28T13:07:39Z","modified":"2026-06-28T13:07:39Z","name":"Phishing domain: 773001coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/773001coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '773001coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-28T13:07:39Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/773001coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--93a0167f-3448-5a1b-8275-daca4309e687","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T15:08:14Z","modified":"2026-02-13T15:08:14Z","name":"Phishing domain: 773124coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/773124coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '773124coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T15:08:14Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/773124coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2839699a-e86d-5256-9e0f-54e0258e5a51","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-28T22:33:05Z","modified":"2026-01-28T22:33:05Z","name":"Phishing domain: 773918coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/773918coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '773918coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-28T22:33:05Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/773918coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2c8e6c0-16a1-5f5a-8b99-9e75f8b94913","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T14:06:31Z","modified":"2026-01-02T14:06:31Z","name":"Phishing domain: 7765yy.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/7765yy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7765yy.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T14:06:31Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7765yy.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--814ca5d1-e932-58f8-a16c-ac133e9a8835","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T05:01:24Z","modified":"2026-07-27T05:01:24Z","name":"Phishing domain: 77686v.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/77686v.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '77686v.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T05:01:24Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/77686v.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9df2d271-1f48-5fce-aa27-40903d198e3a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-16T18:38:43Z","modified":"2025-12-16T18:38:43Z","name":"Phishing domain: 777-betspin.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/777-betspin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '777-betspin.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-16T18:38:43Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/777-betspin.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--10e7ac94-4211-5724-881a-ce2e4c10d3d8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T19:19:28Z","modified":"2026-02-13T19:19:28Z","name":"Phishing domain: 777-casinos-uk.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/777-casinos-uk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '777-casinos-uk.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T19:19:28Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/777-casinos-uk.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--68a4b116-911f-53e9-ba58-4b4f45ca1c33","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-26T10:42:46Z","modified":"2026-01-26T10:42:46Z","name":"Phishing domain: 777.lat","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/777.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '777.lat']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-26T10:42:46Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/777.lat"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e0aeec3-027e-587f-ae5c-cbf39e0f4431","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-14T13:17:35Z","modified":"2025-12-14T13:17:35Z","name":"Phishing domain: 7770b261.kjfdjfh.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/7770b261.kjfdjfh.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7770b261.kjfdjfh.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-14T13:17:35Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7770b261.kjfdjfh.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--11375b16-1a0d-55cb-b90c-f6b2ff445c6d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-05T11:57:55Z","modified":"2025-11-05T11:57:55Z","name":"Phishing domain: 7778899.weebly.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/7778899.weebly.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7778899.weebly.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-05T11:57:55Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7778899.weebly.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fdc93ed-1161-549e-a706-c6ab5787b25b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-05T13:10:56Z","modified":"2026-01-05T13:10:56Z","name":"Phishing domain: 777betsp.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/777betsp.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '777betsp.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-05T13:10:56Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/777betsp.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0931886-c02b-52d1-9a91-dd96ab629101","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-16T18:32:54Z","modified":"2025-12-16T18:32:54Z","name":"Phishing domain: 777betsp.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/777betsp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '777betsp.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-16T18:32:54Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/777betsp.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1517aab8-5458-53f5-bda4-0df4e9a19629","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:56Z","modified":"2026-02-26T23:24:56Z","name":"Phishing domain: 777betspin.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/777betspin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '777betspin.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:56Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/777betspin.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1556a4b4-ff21-5712-907a-8267febc4b04","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-12T21:35:09Z","modified":"2026-06-12T21:35:09Z","name":"Phishing domain: 777cas.shop","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/777cas.shop","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '777cas.shop']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-12T21:35:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/777cas.shop"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d47c6fc-1143-5a3f-83e5-a27d91ac0e11","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-25T15:00:45Z","modified":"2025-12-25T15:00:45Z","name":"Phishing domain: 777kasino.bet","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/777kasino.bet","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '777kasino.bet']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-25T15:00:45Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/777kasino.bet"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b83e16b-b2b7-5ecc-b515-4c1eff26be07","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-24T13:54:43Z","modified":"2026-03-24T13:54:43Z","name":"Phishing domain: 777lucky9.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/777lucky9.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '777lucky9.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-24T13:54:43Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/777lucky9.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d944229-adf8-564f-8161-504b34cb3d12","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-08T07:56:43Z","modified":"2026-06-08T07:56:43Z","name":"Phishing domain: 777nova.vip","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/777nova.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '777nova.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-08T07:56:43Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/777nova.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d348742b-bdff-5ddf-8297-dbf481d425ac","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-18T20:16:07Z","modified":"2026-02-18T20:16:07Z","name":"Phishing domain: 777olympus.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/777olympus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '777olympus.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-18T20:16:07Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/777olympus.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e75e56fb-54d9-5855-8ddd-dc703013c4c8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-18T04:59:50Z","modified":"2025-12-18T04:59:50Z","name":"Phishing domain: 777play.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/777play.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '777play.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-18T04:59:50Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/777play.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--db732466-96f3-5928-88b0-d78468a0755d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-07T18:22:40Z","modified":"2026-02-07T18:22:40Z","name":"Phishing domain: 777regalbet.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/777regalbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '777regalbet.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-07T18:22:40Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/777regalbet.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7930ae01-5197-56b4-9822-9adb33378f53","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-28T15:31:38Z","modified":"2026-06-28T15:31:38Z","name":"Phishing domain: 777seven.casino","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/777seven.casino","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '777seven.casino']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-28T15:31:38Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/777seven.casino"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--851c1557-3e81-5f63-935c-4588223dd32b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-06T12:31:57Z","modified":"2026-07-06T12:31:57Z","name":"Phishing domain: 777spins.vip","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating cryptoscam. Report & evidence: https://phishdestroy.io/domain/777spins.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '777spins.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-06T12:31:57Z","labels":["malicious-activity","phishing","brand:cryptoscam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/777spins.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e095676-1394-5860-b6cc-e5e499240b76","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-05T13:14:50Z","modified":"2026-01-05T13:14:50Z","name":"Phishing domain: 777vault.casino","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/777vault.casino","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '777vault.casino']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-05T13:14:50Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/777vault.casino"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9333800c-db2b-5650-8d32-f73e4d6c60c1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-27T07:01:39Z","modified":"2026-04-27T07:01:39Z","name":"Phishing domain: 777vibeslots.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/777vibeslots.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '777vibeslots.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-27T07:01:39Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/777vibeslots.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba6edeb4-051d-5b32-8ad5-4f91f4ed194e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-25T15:00:58Z","modified":"2025-12-25T15:00:58Z","name":"Phishing domain: 777wild.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/777wild.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '777wild.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-25T15:00:58Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/777wild.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5760d2ee-dfbc-53e9-9409-cda21f9b80b8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-20T16:00:17Z","modified":"2025-11-20T16:00:17Z","name":"Phishing domain: 777win777.bet","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating ethereum. Report & evidence: https://phishdestroy.io/domain/777win777.bet","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '777win777.bet']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-20T16:00:17Z","labels":["malicious-activity","phishing","brand:ethereum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/777win777.bet"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--adc3b78c-baa5-503d-bff7-2ebd83d0af62","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-12T22:21:57Z","modified":"2026-02-12T22:21:57Z","name":"Phishing domain: 777winstar.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/777winstar.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '777winstar.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-12T22:21:57Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/777winstar.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d8e2318-fb0f-58f2-a572-94ebe5dc36a9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-24T17:51:29Z","modified":"2026-01-24T17:51:29Z","name":"Phishing domain: 7788.zorb.pro","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/7788.zorb.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7788.zorb.pro']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-24T17:51:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7788.zorb.pro"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e23e6b5-053b-50d2-af05-8a77eda129fc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-24T14:37:58Z","modified":"2026-06-24T14:37:58Z","name":"Phishing domain: 77caib.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/77caib.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '77caib.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-24T14:37:58Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/77caib.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7b4e5b8-c8a9-5319-a925-5db628ccad6c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:54Z","modified":"2026-02-26T23:22:54Z","name":"Phishing domain: 77casino.life","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/77casino.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '77casino.life']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:54Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/77casino.life"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--88192b56-e1e5-5778-83f3-3fa613302872","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-05T13:36:35Z","modified":"2026-01-05T13:36:35Z","name":"Phishing domain: 77casino.rest","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/77casino.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '77casino.rest']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-05T13:36:35Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/77casino.rest"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcf2ef61-1d60-50a8-b713-0f238f2f7f64","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T01:38:34Z","modified":"2026-02-13T01:38:34Z","name":"Phishing domain: 77cxmai3zm.icu","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/77cxmai3zm.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '77cxmai3zm.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T01:38:34Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/77cxmai3zm.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1e20e41-c13e-530a-b9b8-f45d90fae588","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-05T16:55:54Z","modified":"2026-02-05T16:55:54Z","name":"Phishing domain: 77edge.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Trump Token. Report & evidence: https://phishdestroy.io/domain/77edge.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '77edge.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-05T16:55:54Z","labels":["malicious-activity","phishing","brand:trump token"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/77edge.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1b27a2d-d641-5e44-a10a-58e92db0fb23","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-17T20:13:37Z","modified":"2026-02-17T20:13:37Z","name":"Phishing domain: 77hx.vip","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating [\"tron\"]. Report & evidence: https://phishdestroy.io/domain/77hx.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '77hx.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-17T20:13:37Z","labels":["malicious-activity","phishing","brand:[\"tron\"]"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/77hx.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--52c24b2f-bed2-5dea-9429-abd8b1b91b9b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-25T15:00:47Z","modified":"2025-12-25T15:00:47Z","name":"Phishing domain: 77kasino.bet","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/77kasino.bet","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '77kasino.bet']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-25T15:00:47Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/77kasino.bet"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e82a5cd-3858-567b-8cdc-444ba8f95870","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-01T07:39:42Z","modified":"2026-05-01T07:39:42Z","name":"Phishing domain: 77win.fun","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/77win.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '77win.fun']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-01T07:39:42Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/77win.fun"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc85cf29-e6f9-5000-b63c-239fa2dd037a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-08T12:17:43Z","modified":"2025-11-08T12:17:43Z","name":"Phishing domain: 77ysb8.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/77ysb8.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '77ysb8.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-08T12:17:43Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/77ysb8.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1087c0b4-635d-51d8-b492-c9cbc7eb9f1e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T11:33:15Z","modified":"2026-02-13T11:33:15Z","name":"Phishing domain: 780432-crypto.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Crypto.com. Report & evidence: https://phishdestroy.io/domain/780432-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '780432-crypto.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T11:33:15Z","labels":["malicious-activity","phishing","brand:crypto.com"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/780432-crypto.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--021d0dc1-a9ad-5730-8141-1fa0874604e5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:08Z","modified":"2026-02-26T23:20:08Z","name":"Phishing domain: 780f70bf.magma-staging.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/780f70bf.magma-staging.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '780f70bf.magma-staging.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:08Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/780f70bf.magma-staging.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--64ec0e71-322d-5e76-9796-910e8488223a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-03T09:54:44Z","modified":"2025-09-03T09:54:44Z","name":"Phishing domain: 78418.tax","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/78418.tax","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '78418.tax']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-03T09:54:44Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/78418.tax"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--96e95365-df4b-5023-a3f0-b323e6cb866b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:59Z","modified":"2026-02-26T23:24:59Z","name":"Phishing domain: 784890a6865f.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/784890a6865f.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '784890a6865f.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:59Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/784890a6865f.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7db69316-b829-563e-ac30-c8ba567764a6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-18T19:37:59Z","modified":"2026-07-18T19:37:59Z","name":"Phishing domain: 784982-google.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/784982-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '784982-google.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-18T19:37:59Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/784982-google.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--922fa8b2-7575-53f3-8d6c-fdd2071bfe20","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:58Z","modified":"2026-02-26T23:22:58Z","name":"Phishing domain: 785rpm-gacoorabiskeman.crabdance.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/785rpm-gacoorabiskeman.crabdance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '785rpm-gacoorabiskeman.crabdance.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:58Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/785rpm-gacoorabiskeman.crabdance.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bdea65b-8655-5230-9873-22d60fe44186","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 78711v.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/78711v.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '78711v.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/78711v.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--58d23bd8-1d98-5652-bd4e-2cc0757ecd78","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T01:19:39Z","modified":"2026-02-13T01:19:39Z","name":"Phishing domain: 789clubx.games","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/789clubx.games","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '789clubx.games']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T01:19:39Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/789clubx.games"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ab4f2d5-e57d-521f-a3cf-f56b2113f301","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T17:37:37Z","modified":"2026-02-26T17:37:37Z","name":"Phishing domain: 78fz.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/78fz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '78fz.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T17:37:37Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/78fz.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--db8af1a4-3b18-575d-807e-aba0cbdde082","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T17:38:38Z","modified":"2026-02-26T17:38:38Z","name":"Phishing domain: 78ms.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/78ms.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '78ms.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T17:38:38Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/78ms.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--09d8d9f5-e5fb-5ec6-bd1c-eadd1e8190bf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-11T18:11:46Z","modified":"2026-08-11T18:11:46Z","name":"Phishing domain: 78v6786v8.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/78v6786v8.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '78v6786v8.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-11T18:11:46Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/78v6786v8.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--acd6965d-26e3-54d2-b239-b89af861114d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:51Z","modified":"2026-02-26T23:20:51Z","name":"Phishing domain: 79-137-204-233.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/79-137-204-233.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '79-137-204-233.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:51Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/79-137-204-233.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f29500fb-cf0f-555d-8b52-991682140c47","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 79159kk.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/79159kk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '79159kk.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/79159kk.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f55cb445-8ce3-5605-aafc-b5d97ea21589","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:55Z","modified":"2026-02-26T23:21:55Z","name":"Phishing domain: 791932f4.jascha.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating ledger. Report & evidence: https://phishdestroy.io/domain/791932f4.jascha.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '791932f4.jascha.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:55Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/791932f4.jascha.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--45be522e-6366-519d-9fd6-22507d8d2a09","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-12T11:10:23Z","modified":"2026-06-12T11:10:23Z","name":"Phishing domain: 7931187365.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/7931187365.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7931187365.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-12T11:10:23Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7931187365.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b06cc445-a039-59c9-835b-9305e32ebfd3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-28T22:56:52Z","modified":"2025-10-28T22:56:52Z","name":"Phishing domain: 795813coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/795813coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '795813coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-28T22:56:52Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/795813coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a7dee0f-0610-5c05-a171-a46ff6034184","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-03T09:58:09Z","modified":"2025-09-03T09:58:09Z","name":"Phishing domain: 79597.my","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/79597.my","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '79597.my']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-03T09:58:09Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/79597.my"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea8126c8-6b41-5794-90c8-b1bd9366daed","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-24T11:08:56Z","modified":"2025-09-24T11:08:56Z","name":"Phishing domain: 796w.ucdc1122.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/796w.ucdc1122.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '796w.ucdc1122.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-24T11:08:56Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/796w.ucdc1122.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3faa3acc-ec7d-55f0-84a2-26956c1acb1b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-03T09:55:58Z","modified":"2025-09-03T09:55:58Z","name":"Phishing domain: 79700.tax","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/79700.tax","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '79700.tax']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-03T09:55:58Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/79700.tax"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--043d4681-bf44-5642-accf-798cc456c046","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-02T16:44:14Z","modified":"2026-06-02T16:44:14Z","name":"Phishing domain: 7978bet.vip","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/7978bet.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7978bet.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-02T16:44:14Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7978bet.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5619c721-63da-51a8-a91d-6ac2441fe486","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-20T16:00:19Z","modified":"2025-11-20T16:00:19Z","name":"Phishing domain: 798.casino","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ethereum. Report & evidence: https://phishdestroy.io/domain/798.casino","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '798.casino']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-20T16:00:19Z","labels":["malicious-activity","phishing","brand:ethereum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/798.casino"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a837e18-0cd5-539d-bae1-e696c4ecc4d2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:01Z","modified":"2026-02-26T23:21:01Z","name":"Phishing domain: 79842b0c.led0i9rf-jahjufr9f-4kisdfju.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/79842b0c.led0i9rf-jahjufr9f-4kisdfju.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '79842b0c.led0i9rf-jahjufr9f-4kisdfju.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:01Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/79842b0c.led0i9rf-jahjufr9f-4kisdfju.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--104f44d6-38c9-5259-b639-3ad995d2ad28","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-05T15:22:40Z","modified":"2026-02-05T15:22:40Z","name":"Phishing domain: 7985.tanaragerlach.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/7985.tanaragerlach.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7985.tanaragerlach.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-05T15:22:40Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7985.tanaragerlach.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe3481c0-ba07-5a74-b7c9-f0c0cc00203c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-03T09:58:31Z","modified":"2025-09-03T09:58:31Z","name":"Phishing domain: 79884.my","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/79884.my","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '79884.my']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-03T09:58:31Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/79884.my"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2c3488f-47dd-5df1-83d5-e4032c3273c2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-23T19:55:22Z","modified":"2025-12-23T19:55:22Z","name":"Phishing domain: 7a.ag","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/7a.ag","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7a.ag']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-23T19:55:22Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7a.ag"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6df2c58-7069-58a0-9239-05e55369f68a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-11T18:41:11Z","modified":"2026-08-11T18:41:11Z","name":"Phishing domain: 7b591c.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/7b591c.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7b591c.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-11T18:41:11Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7b591c.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--86829f27-eb2b-5e13-a860-53826aed3dea","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-13T20:39:26Z","modified":"2026-08-13T20:39:26Z","name":"Phishing domain: 7b6297.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/7b6297.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7b6297.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-13T20:39:26Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7b6297.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a5efb06-73f0-53af-b821-ea6ab2b8bc60","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-01T12:35:32Z","modified":"2026-06-01T12:35:32Z","name":"Phishing domain: 7base.cfd","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Base. Report & evidence: https://phishdestroy.io/domain/7base.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7base.cfd']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-01T12:35:32Z","labels":["malicious-activity","phishing","brand:base"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7base.cfd"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb0a81ab-2aae-5d43-a5b1-18a08469ccad","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-28T15:38:25Z","modified":"2026-06-28T15:38:25Z","name":"Phishing domain: 7bets-sweden.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/7bets-sweden.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7bets-sweden.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-28T15:38:25Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7bets-sweden.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ad8055e-0932-5546-b9be-9bfd5f7cfde9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-24T14:53:59Z","modified":"2025-12-24T14:53:59Z","name":"Phishing domain: 7bf8ec90.kfhhfdue.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/7bf8ec90.kfhhfdue.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7bf8ec90.kfhhfdue.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-24T14:53:59Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7bf8ec90.kfhhfdue.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6099068e-1a54-53f9-b7ed-d43f77982cf6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:45:58Z","modified":"2026-07-27T04:45:58Z","name":"Phishing domain: 7bridgecapital.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/7bridgecapital.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7bridgecapital.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:45:58Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7bridgecapital.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a9bf8c3-0758-51e8-93a1-143fa4a2e347","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-12T03:21:48Z","modified":"2026-08-12T03:21:48Z","name":"Phishing domain: 7c2a38.arcadejafet.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/7c2a38.arcadejafet.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7c2a38.arcadejafet.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-12T03:21:48Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7c2a38.arcadejafet.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--31653612-380e-52cc-b250-f4053ee0645e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:42Z","modified":"2026-02-26T23:22:42Z","name":"Phishing domain: 7c6e5762.1236rby1279works.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating ethereum. Report & evidence: https://phishdestroy.io/domain/7c6e5762.1236rby1279works.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7c6e5762.1236rby1279works.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:42Z","labels":["malicious-activity","phishing","brand:ethereum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7c6e5762.1236rby1279works.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac17b2c1-2d7c-5e95-ba31-830186116641","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-27T16:14:14Z","modified":"2025-12-27T16:14:14Z","name":"Phishing domain: 7c87a3fa.ngddguteetdy.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating trezor. Report & evidence: https://phishdestroy.io/domain/7c87a3fa.ngddguteetdy.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7c87a3fa.ngddguteetdy.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-27T16:14:14Z","labels":["malicious-activity","phishing","brand:trezor"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7c87a3fa.ngddguteetdy.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd87f1fa-2f9f-585b-af20-35cd302675c1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-05T13:46:24Z","modified":"2026-01-05T13:46:24Z","name":"Phishing domain: 7cas.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/7cas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7cas.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-05T13:46:24Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7cas.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--61b09edb-544f-5487-8540-06f5446938bf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-11T18:27:06Z","modified":"2026-08-11T18:27:06Z","name":"Phishing domain: 7d7be1.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/7d7be1.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7d7be1.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-11T18:27:06Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7d7be1.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--daead595-0498-53ee-8e43-8f0a72892a20","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-27T05:22:59Z","modified":"2025-08-27T05:22:59Z","name":"Phishing domain: 7dckzuox.dora.run","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Trezor. Report & evidence: https://phishdestroy.io/domain/7dckzuox.dora.run","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7dckzuox.dora.run']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-27T05:22:59Z","labels":["malicious-activity","phishing","brand:trezor"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7dckzuox.dora.run"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcbbf967-e308-50b4-940b-c8b4593f49a4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-11T18:24:01Z","modified":"2026-08-11T18:24:01Z","name":"Phishing domain: 7ddc0a.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/7ddc0a.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7ddc0a.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-11T18:24:01Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7ddc0a.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--855b5f2c-5d31-52f8-919f-130d253d3b30","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-05T15:53:17Z","modified":"2026-02-05T15:53:17Z","name":"Phishing domain: 7dino.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/7dino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7dino.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-05T15:53:17Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7dino.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6f46e0d-b290-51d6-aead-b16b6a7bb164","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-15T01:12:17Z","modified":"2025-10-15T01:12:17Z","name":"Phishing domain: 7dizabchichuia.icu","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/7dizabchichuia.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7dizabchichuia.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-15T01:12:17Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7dizabchichuia.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd992b77-1241-56e6-8074-a70185388133","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:24Z","modified":"2026-02-26T23:20:24Z","name":"Phishing domain: 7drop.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating revolut. Report & evidence: https://phishdestroy.io/domain/7drop.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7drop.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:24Z","labels":["malicious-activity","phishing","brand:revolut"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7drop.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c6cdb9d-40ba-5c96-b296-8dfc23e799e5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T16:01:54Z","modified":"2026-08-09T16:01:54Z","name":"Phishing domain: 7e29e3.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/7e29e3.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7e29e3.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T16:01:54Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7e29e3.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--db0a6696-f6bc-5527-8e41-1ac83024dc74","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-10T10:47:50Z","modified":"2026-07-10T10:47:50Z","name":"Phishing domain: 7e3g37dbqdfmeerz5n4uxwq6pzxcz2bee4zjxiviszsgpuf2utlq.arweave.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/7e3g37dbqdfmeerz5n4uxwq6pzxcz2bee4zjxiviszsgpuf2utlq.arweave.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7e3g37dbqdfmeerz5n4uxwq6pzxcz2bee4zjxiviszsgpuf2utlq.arweave.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-10T10:47:50Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7e3g37dbqdfmeerz5n4uxwq6pzxcz2bee4zjxiviszsgpuf2utlq.arweave.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--316cff65-c3fc-5a48-b09c-16b39ce5fd64","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T23:48:00Z","modified":"2026-08-09T23:48:00Z","name":"Phishing domain: 7ea274.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/7ea274.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7ea274.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T23:48:00Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7ea274.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--97b5ac07-4b59-530c-97fe-ce2a238d6a9d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-10T01:55:31Z","modified":"2025-11-10T01:55:31Z","name":"Phishing domain: 7elcasino.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/7elcasino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7elcasino.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-10T01:55:31Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7elcasino.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c470f7df-1fe3-5c61-bd99-a6b8e4d6b4c7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-11T12:54:59Z","modified":"2026-08-11T12:54:59Z","name":"Phishing domain: 7f001d.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/7f001d.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7f001d.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-11T12:54:59Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7f001d.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--346ac8ab-356f-56d5-8159-0da42bf38e93","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T18:04:16Z","modified":"2026-02-26T18:04:16Z","name":"Phishing domain: 7f138a09169b250e9dcb378140907378.netlify.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating opensea. Report & evidence: https://phishdestroy.io/domain/7f138a09169b250e9dcb378140907378.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7f138a09169b250e9dcb378140907378.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T18:04:16Z","labels":["malicious-activity","phishing","brand:opensea"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7f138a09169b250e9dcb378140907378.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e829dd0-6f08-5a93-96b2-e2c3b40bc832","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-27T16:14:52Z","modified":"2025-12-27T16:14:52Z","name":"Phishing domain: 7f359606.ngddguteetdy.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/7f359606.ngddguteetdy.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7f359606.ngddguteetdy.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-27T16:14:52Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7f359606.ngddguteetdy.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--352f71b0-46e3-556d-8d40-513c26d5e718","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-26T15:03:21Z","modified":"2025-12-26T15:03:21Z","name":"Phishing domain: 7f3779da.hdfuhduddijgji.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/7f3779da.hdfuhduddijgji.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7f3779da.hdfuhduddijgji.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-26T15:03:21Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7f3779da.hdfuhduddijgji.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--97d0f3e8-975d-5afd-acf3-9c862b72cc8c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-13T21:03:54Z","modified":"2026-08-13T21:03:54Z","name":"Phishing domain: 7f49b1.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/7f49b1.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7f49b1.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-13T21:03:54Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7f49b1.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e17aae2-ecdb-5760-a819-f44e693beb67","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T01:37:46Z","modified":"2026-02-13T01:37:46Z","name":"Phishing domain: 7fbgvw.icu","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/7fbgvw.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7fbgvw.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T01:37:46Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7fbgvw.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8fcfff1-6d49-5933-85d9-c018056fd582","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-12T03:31:44Z","modified":"2026-08-12T03:31:44Z","name":"Phishing domain: 7fc5e3.arcadejafet.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/7fc5e3.arcadejafet.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7fc5e3.arcadejafet.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-12T03:31:44Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7fc5e3.arcadejafet.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--758281fa-f1fa-5cad-bb83-61295d1396eb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-05T13:43:07Z","modified":"2026-01-05T13:43:07Z","name":"Phishing domain: 7force.vip","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/7force.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7force.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-05T13:43:07Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7force.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--53fd77cd-e0ef-5148-82c3-fc79e0c722db","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:51Z","modified":"2026-02-26T23:19:51Z","name":"Phishing domain: 7g7h042.seo6.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating walletconnect. Report & evidence: https://phishdestroy.io/domain/7g7h042.seo6.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7g7h042.seo6.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:51Z","labels":["malicious-activity","phishing","brand:walletconnect"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7g7h042.seo6.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dd26f40-7ed9-56d0-902b-b06224589fad","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-25T15:32:30Z","modified":"2025-12-25T15:32:30Z","name":"Phishing domain: 7game.us","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/7game.us","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7game.us']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-25T15:32:30Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7game.us"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--530f98b4-e9e2-5b5e-b617-118be8dc806e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T01:39:00Z","modified":"2026-02-13T01:39:00Z","name":"Phishing domain: 7gcp6bd48fq.icu","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/7gcp6bd48fq.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7gcp6bd48fq.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T01:39:00Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7gcp6bd48fq.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--60722374-9146-50ad-b1ad-79c6ea1c9d8d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-27T00:13:41Z","modified":"2026-06-27T00:13:41Z","name":"Phishing domain: 7glint.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/7glint.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7glint.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-27T00:13:41Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7glint.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--12bedb1d-b417-5179-bbef-0de88fe053be","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-24T23:33:22Z","modified":"2026-02-24T23:33:22Z","name":"Phishing domain: 7gzser.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/7gzser.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7gzser.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-24T23:33:22Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7gzser.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--446499d1-fe48-58fe-9ae1-19f4e5d165f6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-18T16:35:45Z","modified":"2026-06-18T16:35:45Z","name":"Phishing domain: 7hhbh8.cn","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/7hhbh8.cn","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7hhbh8.cn']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-18T16:35:45Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7hhbh8.cn"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--275fb6c7-0132-5c6f-9f23-c4c625ca3ebc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:37Z","modified":"2026-02-26T23:21:37Z","name":"Phishing domain: 7kag.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/7kag.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7kag.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:37Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7kag.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebbfe0a5-84fa-51c8-a8da-81d616d901c0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-30T04:43:26Z","modified":"2025-11-30T04:43:26Z","name":"Phishing domain: 7kasino.bet","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/7kasino.bet","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7kasino.bet']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-30T04:43:26Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7kasino.bet"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3da257e-b655-5f21-bdc0-69aef5295e74","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-04T14:33:40Z","modified":"2025-08-04T14:33:40Z","name":"Phishing domain: 7kcasino.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating blast. Report & evidence: https://phishdestroy.io/domain/7kcasino.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7kcasino.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-04T14:33:40Z","labels":["malicious-activity","phishing","brand:blast"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7kcasino.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--afdcd4af-fd37-5085-9adb-933652c8f2c4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-24T13:30:39Z","modified":"2026-01-24T13:30:39Z","name":"Phishing domain: 7kcasino.casino","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/7kcasino.casino","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7kcasino.casino']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-24T13:30:39Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7kcasino.casino"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c202c685-f1ad-5d70-ab9d-9841f6bc7c65","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-22T19:17:50Z","modified":"2025-10-22T19:17:50Z","name":"Phishing domain: 7kingscasino.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating cryptoscam. Report & evidence: https://phishdestroy.io/domain/7kingscasino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7kingscasino.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-22T19:17:50Z","labels":["malicious-activity","phishing","brand:cryptoscam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7kingscasino.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--585f1a73-ffc9-55fb-bb2a-43c1d29d26f5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-13T21:28:25Z","modified":"2026-08-13T21:28:25Z","name":"Phishing domain: 7kk2ybe4vd.peoplefirstservices.top","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/7kk2ybe4vd.peoplefirstservices.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7kk2ybe4vd.peoplefirstservices.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-13T21:28:25Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7kk2ybe4vd.peoplefirstservices.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6994bb34-1c8b-528b-ba35-9c512c15175f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 7mbfw.vip","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/7mbfw.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7mbfw.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7mbfw.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4c6d9f5-dd5f-58db-87e6-15f629184b1e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-07-16T09:57:03Z","modified":"2025-07-16T09:57:03Z","name":"Phishing domain: 7missjewellery.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating telegram. Report & evidence: https://phishdestroy.io/domain/7missjewellery.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7missjewellery.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-07-16T09:57:03Z","labels":["malicious-activity","phishing","brand:telegram"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7missjewellery.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7712d0c2-b25a-56b2-8675-d44c243f81b6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-07T01:10:14Z","modified":"2026-06-07T01:10:14Z","name":"Phishing domain: 7napiypv4rsoustx6pn6ninx6zomppfyu3esrjrxrflb5mes5iuq.arweave.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/7napiypv4rsoustx6pn6ninx6zomppfyu3esrjrxrflb5mes5iuq.arweave.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7napiypv4rsoustx6pn6ninx6zomppfyu3esrjrxrflb5mes5iuq.arweave.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-07T01:10:14Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7napiypv4rsoustx6pn6ninx6zomppfyu3esrjrxrflb5mes5iuq.arweave.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--53eec8a9-d6fd-587e-bc1d-f5868f94f8ed","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-07T20:51:03Z","modified":"2026-06-07T20:51:03Z","name":"Phishing domain: 7oxbet.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/7oxbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7oxbet.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-07T20:51:03Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7oxbet.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee4afa33-0b37-59b5-b712-8e2ada8708ef","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-14T01:46:25Z","modified":"2025-12-14T01:46:25Z","name":"Phishing domain: 7pysv.gobookroom.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Airbnb. Report & evidence: https://phishdestroy.io/domain/7pysv.gobookroom.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7pysv.gobookroom.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-14T01:46:25Z","labels":["malicious-activity","phishing","brand:airbnb"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7pysv.gobookroom.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1abda662-4d0d-5907-9d2b-d0480114b1f3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-07T01:09:57Z","modified":"2026-06-07T01:09:57Z","name":"Phishing domain: 7r6xed4a5dhivfhhxg6j2sjzo55l2bt2ckrjcctsxndurub3rdqq.arweave.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/7r6xed4a5dhivfhhxg6j2sjzo55l2bt2ckrjcctsxndurub3rdqq.arweave.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7r6xed4a5dhivfhhxg6j2sjzo55l2bt2ckrjcctsxndurub3rdqq.arweave.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-07T01:09:57Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7r6xed4a5dhivfhhxg6j2sjzo55l2bt2ckrjcctsxndurub3rdqq.arweave.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3c7e044-0d23-5e9f-b6a0-a3e6e2f2b473","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-27T07:01:45Z","modified":"2026-04-27T07:01:45Z","name":"Phishing domain: 7riches.casino","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/7riches.casino","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7riches.casino']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-27T07:01:45Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7riches.casino"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7240c320-7007-5bc4-b8ba-09ea0b7f4bc0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T19:58:51Z","modified":"2026-08-10T19:58:51Z","name":"Phishing domain: 7ro-wwv-ftvh-2np810-9v8crh.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/7ro-wwv-ftvh-2np810-9v8crh.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7ro-wwv-ftvh-2np810-9v8crh.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T19:58:51Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7ro-wwv-ftvh-2np810-9v8crh.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e2a2b96-ca28-5514-a586-d6ecc126f13a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-05T12:52:34Z","modified":"2026-01-05T12:52:34Z","name":"Phishing domain: 7rolls.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating foundation. Report & evidence: https://phishdestroy.io/domain/7rolls.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7rolls.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-05T12:52:34Z","labels":["malicious-activity","phishing","brand:foundation"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7rolls.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a158530-87f5-50fb-9227-932d8c6146dc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-10T01:59:11Z","modified":"2025-11-10T01:59:11Z","name":"Phishing domain: 7rolls.pro","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/7rolls.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7rolls.pro']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-10T01:59:11Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7rolls.pro"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e55ec3e-afa7-542d-822f-159c52ce05d2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-07T01:10:31Z","modified":"2026-06-07T01:10:31Z","name":"Phishing domain: 7rwbo4waussfvsxgyzbphph6ffbyfczctzvv5gfspc3mg2gxx76a.arweave.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/7rwbo4waussfvsxgyzbphph6ffbyfczctzvv5gfspc3mg2gxx76a.arweave.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7rwbo4waussfvsxgyzbphph6ffbyfczctzvv5gfspc3mg2gxx76a.arweave.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-07T01:10:31Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7rwbo4waussfvsxgyzbphph6ffbyfczctzvv5gfspc3mg2gxx76a.arweave.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a436bae-a1c8-58a5-b0c5-82761eea357f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-14T13:23:55Z","modified":"2025-12-14T13:23:55Z","name":"Phishing domain: 7s60m.gobookroom.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Airbnb. Report & evidence: https://phishdestroy.io/domain/7s60m.gobookroom.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7s60m.gobookroom.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-14T13:23:55Z","labels":["malicious-activity","phishing","brand:airbnb"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7s60m.gobookroom.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b87ed27-8ffb-5460-ad66-f1dbbf699d76","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-17T17:15:59Z","modified":"2026-06-17T17:15:59Z","name":"Phishing domain: 7seven.casino","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/7seven.casino","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7seven.casino']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-17T17:15:59Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7seven.casino"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6a30731-c3f5-50c8-9952-84773c5da6c0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-02T00:27:01Z","modified":"2026-05-02T00:27:01Z","name":"Phishing domain: 7sim.pro","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/7sim.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7sim.pro']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-02T00:27:01Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7sim.pro"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a7b5750-eef0-5c1a-8d4c-6c9c3dca7a1e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-03T13:35:09Z","modified":"2026-02-03T13:35:09Z","name":"Phishing domain: 7slots.bonuswin.life","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/7slots.bonuswin.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7slots.bonuswin.life']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-03T13:35:09Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7slots.bonuswin.life"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbe02157-0636-5098-886a-b4de0088de3e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-19T07:14:57Z","modified":"2025-10-19T07:14:57Z","name":"Phishing domain: 7spin.us","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/7spin.us","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7spin.us']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-19T07:14:57Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7spin.us"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--852e0ea3-a36a-5912-83d1-df79b9902db5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-04T15:06:51Z","modified":"2025-08-04T15:06:51Z","name":"Phishing domain: 7spinlabs.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating blast. Report & evidence: https://phishdestroy.io/domain/7spinlabs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7spinlabs.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-04T15:06:51Z","labels":["malicious-activity","phishing","brand:blast"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7spinlabs.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3afc06b2-b4cb-52e2-be31-3a54c5f1b22e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-05T13:25:37Z","modified":"2026-01-05T13:25:37Z","name":"Phishing domain: 7spins.win","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/7spins.win","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7spins.win']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-05T13:25:37Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7spins.win"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--75cd2a11-b524-5258-98be-bb4c72f81460","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-28T02:03:58Z","modified":"2025-12-28T02:03:58Z","name":"Phishing domain: 7spiny.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/7spiny.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7spiny.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-28T02:03:58Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7spiny.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--23694b2c-9a26-53ba-8edc-4a2623fb8720","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:41Z","modified":"2026-02-26T23:22:41Z","name":"Phishing domain: 7spurcore.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating PayPal. Report & evidence: https://phishdestroy.io/domain/7spurcore.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7spurcore.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:41Z","labels":["malicious-activity","phishing","brand:paypal"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7spurcore.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd035b07-0d99-5ee1-9ec7-c9c5897c6da8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-02T00:23:09Z","modified":"2025-09-02T00:23:09Z","name":"Phishing domain: 7suh3-jqaaa-aaaak-afdpa-cai.icp0.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating WalletConnect. Report & evidence: https://phishdestroy.io/domain/7suh3-jqaaa-aaaak-afdpa-cai.icp0.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7suh3-jqaaa-aaaak-afdpa-cai.icp0.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-02T00:23:09Z","labels":["malicious-activity","phishing","brand:walletconnect"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7suh3-jqaaa-aaaak-afdpa-cai.icp0.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d9267c9-403b-5d66-b9b4-6abd6a828eed","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-04T05:16:04Z","modified":"2026-08-04T05:16:04Z","name":"Phishing domain: 7summer.fun","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/7summer.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7summer.fun']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-04T05:16:04Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7summer.fun"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3a63fcf-afd4-5790-9434-a7e777f66809","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T13:06:16Z","modified":"2026-06-15T13:06:16Z","name":"Phishing domain: 7us96ao.vip","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating MetaMask. Report & evidence: https://phishdestroy.io/domain/7us96ao.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7us96ao.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T13:06:16Z","labels":["malicious-activity","phishing","brand:metamask"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7us96ao.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--44170e0d-bcde-592a-b779-f67814f7e064","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T07:26:55Z","modified":"2026-08-10T07:26:55Z","name":"Phishing domain: 7usdt.live","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/7usdt.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7usdt.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T07:26:55Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7usdt.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--83ada131-cd29-5545-8c0b-45add505a28e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-16T07:50:06Z","modified":"2025-09-16T07:50:06Z","name":"Phishing domain: 7wai.ae","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Facebook. Report & evidence: https://phishdestroy.io/domain/7wai.ae","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7wai.ae']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-16T07:50:06Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7wai.ae"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbd9cec6-ccdc-544d-8f15-b6fbb8933ad2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T19:36:23Z","modified":"2026-02-13T19:36:23Z","name":"Phishing domain: 7win.us","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/7win.us","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7win.us']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T19:36:23Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7win.us"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--425f59db-4db9-532b-8813-707837895069","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-19T07:18:11Z","modified":"2025-10-19T07:18:11Z","name":"Phishing domain: 7wingo.us","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/7wingo.us","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7wingo.us']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-19T07:18:11Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7wingo.us"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e0f5335-cefb-5395-9ccf-51b3b9388cd4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-19T02:48:31Z","modified":"2026-06-19T02:48:31Z","name":"Phishing domain: 7wk0-c0co-0t2l.dturcotte-predictms-com-s-account.workers.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/7wk0-c0co-0t2l.dturcotte-predictms-com-s-account.workers.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7wk0-c0co-0t2l.dturcotte-predictms-com-s-account.workers.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-19T02:48:31Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7wk0-c0co-0t2l.dturcotte-predictms-com-s-account.workers.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b57ea35-9910-5607-905b-c515f78b7e8a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-20T15:09:58Z","modified":"2026-01-20T15:09:58Z","name":"Phishing domain: 7x4r.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/7x4r.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7x4r.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-20T15:09:58Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7x4r.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c65fcb1a-79e3-5186-b30d-b1ce8e0b4d51","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-06T20:07:43Z","modified":"2026-02-06T20:07:43Z","name":"Phishing domain: 7xcas.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/7xcas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7xcas.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-06T20:07:43Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7xcas.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e194cec3-e78d-5d5d-8f2c-2aa8d2c854e5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T14:09:32Z","modified":"2026-01-02T14:09:32Z","name":"Phishing domain: 7xcasino.bet","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/7xcasino.bet","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7xcasino.bet']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T14:09:32Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7xcasino.bet"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7a5e97a-c8ac-5189-a386-10d762377cf3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-02T20:48:50Z","modified":"2026-07-02T20:48:50Z","name":"Phishing domain: 7z5yz77rj4gvl3cwdjzgnircq5litzt263aj5zgkm3xhr4ai3n7q.turbo-gateway.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/7z5yz77rj4gvl3cwdjzgnircq5litzt263aj5zgkm3xhr4ai3n7q.turbo-gateway.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7z5yz77rj4gvl3cwdjzgnircq5litzt263aj5zgkm3xhr4ai3n7q.turbo-gateway.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-02T20:48:50Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7z5yz77rj4gvl3cwdjzgnircq5litzt263aj5zgkm3xhr4ai3n7q.turbo-gateway.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--07b8a8e3-ecea-5100-b7a2-24ee1bc60530","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-12T18:49:57Z","modified":"2026-08-12T18:49:57Z","name":"Phishing domain: 7zip.world","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating base. Report & evidence: https://phishdestroy.io/domain/7zip.world","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7zip.world']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-12T18:49:57Z","labels":["malicious-activity","phishing","brand:base"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7zip.world"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--898ede06-ca6a-56a0-a3f7-0b9ea16b15a3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-09T17:24:13Z","modified":"2026-06-09T17:24:13Z","name":"Phishing domain: 7ziphelp.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/7ziphelp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7ziphelp.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-09T17:24:13Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7ziphelp.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e39e62c-0fa4-5af9-b0c5-a792939dfb59","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-24T23:28:11Z","modified":"2025-10-24T23:28:11Z","name":"Phishing domain: 7zzb6542zn.raydiumpro.vip","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Raydium. Report & evidence: https://phishdestroy.io/domain/7zzb6542zn.raydiumpro.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '7zzb6542zn.raydiumpro.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-24T23:28:11Z","labels":["malicious-activity","phishing","brand:raydium"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/7zzb6542zn.raydiumpro.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fda9fae-91cd-5039-9714-bf2a9d4970d6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-08T01:30:15Z","modified":"2026-08-08T01:30:15Z","name":"Phishing domain: 8-google.com.cn","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating gemini. Report & evidence: https://phishdestroy.io/domain/8-google.com.cn","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8-google.com.cn']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-08T01:30:15Z","labels":["malicious-activity","phishing","brand:gemini"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8-google.com.cn"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--34f8d582-415d-5c08-9fb7-9b1aeafb639e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-05T12:04:16Z","modified":"2025-11-05T12:04:16Z","name":"Phishing domain: 800000000006aaa.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/800000000006aaa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '800000000006aaa.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-05T12:04:16Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/800000000006aaa.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--06725535-eccb-5576-bc79-8ab68a6adb43","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-21T06:47:47Z","modified":"2026-03-21T06:47:47Z","name":"Phishing domain: 800pty.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/800pty.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '800pty.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-21T06:47:47Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/800pty.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--94bde888-0564-5cc2-b8a8-49c249dd4480","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-20T15:21:24Z","modified":"2025-11-20T15:21:24Z","name":"Phishing domain: 80124.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/80124.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '80124.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-20T15:21:24Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/80124.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb3e28ee-9876-55e3-93f6-8de0dc07fe07","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-08T03:16:23Z","modified":"2026-08-08T03:16:23Z","name":"Phishing domain: 801637.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating argent. Report & evidence: https://phishdestroy.io/domain/801637.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '801637.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-08T03:16:23Z","labels":["malicious-activity","phishing","brand:argent"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/801637.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e08cc436-e40b-57e4-a10a-171b6f63ae9a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-11T18:55:19Z","modified":"2026-08-11T18:55:19Z","name":"Phishing domain: 802811.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/802811.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '802811.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-11T18:55:19Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/802811.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ca2eb58-f554-55ef-964f-a182c96ad8f8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-06T18:20:04Z","modified":"2026-03-06T18:20:04Z","name":"Phishing domain: 803318coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/803318coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '803318coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-06T18:20:04Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/803318coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac58c01a-2a63-552f-971f-a6e51d346c21","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-06T12:55:50Z","modified":"2026-01-06T12:55:50Z","name":"Phishing domain: 803424coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/803424coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '803424coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-06T12:55:50Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/803424coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e7ad804-4863-52ac-a2a9-3c54be921b27","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-01T20:12:16Z","modified":"2026-08-01T20:12:16Z","name":"Phishing domain: 80365365.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/80365365.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '80365365.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-01T20:12:16Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/80365365.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0da69908-9746-5eb6-b20c-a8423374b999","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T02:17:33Z","modified":"2026-06-15T02:17:33Z","name":"Phishing domain: 803886.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/803886.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '803886.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T02:17:33Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/803886.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c7dfddc-ff00-5416-8c57-196ed1f0733a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 80474289---61652.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/80474289---61652.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '80474289---61652.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/80474289---61652.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad07ed39-d50d-59f8-93c3-0dec2c6d641d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-17T14:05:09Z","modified":"2025-11-17T14:05:09Z","name":"Phishing domain: 806xpj.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/806xpj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '806xpj.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-17T14:05:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/806xpj.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--311862f8-e887-5dbf-8be5-a20e40180646","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:44Z","modified":"2026-02-26T23:21:44Z","name":"Phishing domain: 807xpj.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/807xpj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '807xpj.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:44Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/807xpj.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b8bfbfc-2438-5791-9fd5-8546f3702563","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 8099958---6165.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/8099958---6165.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8099958---6165.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8099958---6165.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b48b37b-d68e-578d-9d97-c08d180874f5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:10Z","modified":"2026-02-26T23:24:10Z","name":"Phishing domain: 80dances.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/80dances.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '80dances.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:10Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/80dances.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5090602-a73b-5a54-a7e1-7924b9164542","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:44:08Z","modified":"2026-07-27T04:44:08Z","name":"Phishing domain: 81024766hd.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/81024766hd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '81024766hd.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:44:08Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/81024766hd.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e2873a7-ae97-5137-bdb4-d5ec42cf7118","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T00:13:26Z","modified":"2026-02-13T00:13:26Z","name":"Phishing domain: 812577google.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/812577google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '812577google.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T00:13:26Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/812577google.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--adf296d5-6991-5e1f-a73d-7dcdf613547b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T14:05:30Z","modified":"2026-01-02T14:05:30Z","name":"Phishing domain: 81313.uk","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/81313.uk","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '81313.uk']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T14:05:30Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/81313.uk"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--547adf9f-dfb6-5f07-a24f-0cbfa0cf8f8d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-27T07:47:18Z","modified":"2026-02-27T07:47:18Z","name":"Phishing domain: 813betkolik.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/813betkolik.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '813betkolik.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-27T07:47:18Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/813betkolik.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--431c87aa-9081-5d37-a22d-248c59aa6ef7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-02T14:47:33Z","modified":"2025-09-02T14:47:33Z","name":"Phishing domain: 81587.loan","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/81587.loan","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '81587.loan']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-02T14:47:33Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/81587.loan"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a98ffcd-4b71-590d-ac26-83249f230e1d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:17Z","modified":"2026-07-27T06:02:17Z","name":"Phishing domain: 8159app.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/8159app.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8159app.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8159app.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--050bff2b-1549-56a4-abed-dc77a5970086","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:50:16Z","modified":"2026-07-27T04:50:16Z","name":"Phishing domain: 8159ww.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/8159ww.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8159ww.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:50:16Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8159ww.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cae70829-67bb-5fc3-ae02-4cb6b9009100","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 8159xpj.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/8159xpj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8159xpj.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8159xpj.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9baebd10-6569-5b95-aa35-ed1905c06d60","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:46:24Z","modified":"2026-07-27T04:46:24Z","name":"Phishing domain: 8159zxd.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/8159zxd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8159zxd.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:46:24Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8159zxd.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0e74f9b-0898-59ab-9d85-b96631407d24","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 8160a76.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/8160a76.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8160a76.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8160a76.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d33742d-0191-5700-95f3-560da6505eb7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-22T17:54:07Z","modified":"2026-02-22T17:54:07Z","name":"Phishing domain: 817741-crypto.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Crypto.com. Report & evidence: https://phishdestroy.io/domain/817741-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '817741-crypto.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-22T17:54:07Z","labels":["malicious-activity","phishing","brand:crypto.com"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/817741-crypto.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--43a05a92-5ae4-562a-9879-f312bb9ff854","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-03T13:19:49Z","modified":"2025-09-03T13:19:49Z","name":"Phishing domain: 818671-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/818671-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '818671-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-03T13:19:49Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/818671-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2634a90c-45a6-58c6-8225-ffe0818bb40f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-13T02:25:40Z","modified":"2026-03-13T02:25:40Z","name":"Phishing domain: 819.lol","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating discord. Report & evidence: https://phishdestroy.io/domain/819.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '819.lol']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-13T02:25:40Z","labels":["malicious-activity","phishing","brand:discord"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/819.lol"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7ae549d-d5a0-5ebd-9884-b90a7e80fe2e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-04T02:38:21Z","modified":"2025-11-04T02:38:21Z","name":"Phishing domain: 81919-8iaiai.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating MEXC. Report & evidence: https://phishdestroy.io/domain/81919-8iaiai.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '81919-8iaiai.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-04T02:38:21Z","labels":["malicious-activity","phishing","brand:mexc"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/81919-8iaiai.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2b67d43-1437-5615-b1fc-70ede966d962","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:55Z","modified":"2026-02-26T23:19:55Z","name":"Phishing domain: 819248kraken.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating kraken. Report & evidence: https://phishdestroy.io/domain/819248kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '819248kraken.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:55Z","labels":["malicious-activity","phishing","brand:kraken"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/819248kraken.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--edde1cd1-e04d-54a8-b7d3-7e1097ce366e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-11T18:44:05Z","modified":"2026-08-11T18:44:05Z","name":"Phishing domain: 81ef2a.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/81ef2a.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '81ef2a.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-11T18:44:05Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/81ef2a.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a9cfffb-24a6-560c-97d3-f2dc7dec00fc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-12T03:20:36Z","modified":"2026-08-12T03:20:36Z","name":"Phishing domain: 820443.arcadejafet.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/820443.arcadejafet.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '820443.arcadejafet.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-12T03:20:36Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/820443.arcadejafet.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c589eefa-5567-5eae-9e05-08222bd339f0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 82126t.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/82126t.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '82126t.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/82126t.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8038270a-97af-59e9-8c91-d80213506f77","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 82211m.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/82211m.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '82211m.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/82211m.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ace7b29d-0799-5641-ab79-b75e64a03a79","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-06T13:08:17Z","modified":"2026-03-06T13:08:17Z","name":"Phishing domain: 822951-recovery.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/822951-recovery.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '822951-recovery.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-06T13:08:17Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/822951-recovery.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e7c03d9-0a7e-5f0c-b5bc-ddefd109d948","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-02T16:09:50Z","modified":"2026-03-02T16:09:50Z","name":"Phishing domain: 82311v.weebly.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/82311v.weebly.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '82311v.weebly.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-02T16:09:50Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/82311v.weebly.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae93d470-7d86-5de4-bf15-7bc8dae63ad0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:56Z","modified":"2026-02-26T23:23:56Z","name":"Phishing domain: 823640-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/823640-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '823640-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:56Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/823640-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3094d5f5-a24f-5157-9a8a-3d102fe54f9a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-13T21:05:51Z","modified":"2026-08-13T21:05:51Z","name":"Phishing domain: 823962coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/823962coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '823962coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-13T21:05:51Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/823962coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--625d6752-c3f5-5d8f-84fc-e51da1ca93f3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-17T09:08:46Z","modified":"2025-09-17T09:08:46Z","name":"Phishing domain: 826436.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/826436.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '826436.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-17T09:08:46Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/826436.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--16a6fd4c-1482-50c8-9389-37c941b9b296","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-11T12:13:49Z","modified":"2025-11-11T12:13:49Z","name":"Phishing domain: 8272.bar","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/8272.bar","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8272.bar']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-11T12:13:49Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8272.bar"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a785843c-a02a-5087-8417-79aa3ce2d881","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-25T15:35:17Z","modified":"2026-01-25T15:35:17Z","name":"Phishing domain: 82777.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/82777.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '82777.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-25T15:35:17Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/82777.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f1cfaeb-a7e5-5199-8f66-241fab700263","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-21T10:41:46Z","modified":"2025-12-21T10:41:46Z","name":"Phishing domain: 82790.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/82790.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '82790.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-21T10:41:46Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/82790.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cf4c509-dcd8-5a10-bac6-54c0deb1abe0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:46:50Z","modified":"2026-07-27T04:46:50Z","name":"Phishing domain: 8282usdt.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/8282usdt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8282usdt.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:46:50Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8282usdt.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3e74857-a021-52b2-88cb-77f6d7630310","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-10T10:53:54Z","modified":"2026-07-10T10:53:54Z","name":"Phishing domain: 828592-kraken.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Kraken. Report & evidence: https://phishdestroy.io/domain/828592-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '828592-kraken.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-10T10:53:54Z","labels":["malicious-activity","phishing","brand:kraken"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/828592-kraken.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f148d8b6-f965-53e2-b072-9e5267fe092c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-20T16:53:03Z","modified":"2025-12-20T16:53:03Z","name":"Phishing domain: 82891.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/82891.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '82891.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-20T16:53:03Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/82891.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5e137b7-b344-5d75-adab-3ce6fc614ced","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-20T16:53:04Z","modified":"2025-12-20T16:53:04Z","name":"Phishing domain: 82895.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/82895.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '82895.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-20T16:53:04Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/82895.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa9803ca-5de9-5f50-9d6d-fbe14f89c6c2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:22Z","modified":"2026-02-26T23:23:22Z","name":"Phishing domain: 82900.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/82900.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '82900.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:22Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/82900.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d52bb31a-e9e6-5bbe-84a8-58d8346b2e38","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-29T01:19:44Z","modified":"2025-08-29T01:19:44Z","name":"Phishing domain: 829491-ledger.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/829491-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '829491-ledger.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-29T01:19:44Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/829491-ledger.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3049cfe-5bf9-528b-abb5-7febc2896f14","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-18T19:06:10Z","modified":"2026-07-18T19:06:10Z","name":"Phishing domain: 82hg49.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/82hg49.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '82hg49.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-18T19:06:10Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/82hg49.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc7d20ff-f0a3-5c88-8cfa-5e1c3d0122c9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T01:23:45Z","modified":"2026-07-27T01:23:45Z","name":"Phishing domain: 830129coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/830129coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '830129coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T01:23:45Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/830129coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f15a8f3-09c7-5d69-b4d0-19ae6b77f46e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 8307861652.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/8307861652.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8307861652.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8307861652.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8982310-62e0-5879-b9e1-18e62b84a5f1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-28T18:07:31Z","modified":"2026-07-28T18:07:31Z","name":"Phishing domain: 830fa-xjsp-l9g2q-yxexu-qf055r.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/830fa-xjsp-l9g2q-yxexu-qf055r.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '830fa-xjsp-l9g2q-yxexu-qf055r.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-28T18:07:31Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/830fa-xjsp-l9g2q-yxexu-qf055r.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--045a3d9e-a4e2-513a-a7c9-29e7626a0bce","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-03T09:52:17Z","modified":"2025-09-03T09:52:17Z","name":"Phishing domain: 83101.academy","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/83101.academy","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '83101.academy']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-03T09:52:17Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/83101.academy"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--19c6eb1f-9a7d-5977-b6b5-3f01d44e4430","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 8333.bz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/8333.bz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8333.bz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8333.bz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a53c5685-3fbf-5343-b29c-c25329f037bf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:44Z","modified":"2026-02-26T23:22:44Z","name":"Phishing domain: 83358.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/83358.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '83358.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:44Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/83358.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b552d53-ea9f-5087-954f-7eb3c93142d5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:24Z","modified":"2026-02-26T23:22:24Z","name":"Phishing domain: 83385.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/83385.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '83385.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:24Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/83385.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--34e067f4-62e9-55a6-ab79-a3379b8462ce","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:15Z","modified":"2026-02-26T23:23:15Z","name":"Phishing domain: 83400.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/83400.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '83400.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:15Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/83400.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b09b972-cde4-5204-a3eb-d7917b507dd8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-22T15:19:32Z","modified":"2026-01-22T15:19:32Z","name":"Phishing domain: 83480.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/83480.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '83480.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-22T15:19:32Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/83480.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--951e25f9-f14c-5027-b5a9-84cf8e466af9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-27T19:21:08Z","modified":"2025-11-27T19:21:08Z","name":"Phishing domain: 834883-kraken.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Kraken. Report & evidence: https://phishdestroy.io/domain/834883-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '834883-kraken.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-27T19:21:08Z","labels":["malicious-activity","phishing","brand:kraken"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/834883-kraken.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--66da5a7b-0725-54be-9d75-103b174da055","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:22Z","modified":"2026-02-26T23:21:22Z","name":"Phishing domain: 834933coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/834933coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '834933coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:22Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/834933coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7317add0-44ba-5dec-9fd1-7d8ca3fbc90c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:54Z","modified":"2026-02-26T23:21:54Z","name":"Phishing domain: 83568.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/83568.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '83568.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:54Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/83568.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdb79575-974b-5b1f-9671-cee6714eb401","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-08T22:10:39Z","modified":"2025-10-08T22:10:39Z","name":"Phishing domain: 837143kraken.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Kraken. Report & evidence: https://phishdestroy.io/domain/837143kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '837143kraken.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-08T22:10:39Z","labels":["malicious-activity","phishing","brand:kraken"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/837143kraken.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea753268-405f-5133-8cc4-c2aa1b0a2f81","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-28T15:05:33Z","modified":"2026-02-28T15:05:33Z","name":"Phishing domain: 83721-cb.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/83721-cb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '83721-cb.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-28T15:05:33Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/83721-cb.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--26215aac-1a66-56d3-a296-58eb16e29090","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-10T16:23:51Z","modified":"2026-02-10T16:23:51Z","name":"Phishing domain: 837485coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/837485coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '837485coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-10T16:23:51Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/837485coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e7132ca-c4fb-5ca4-a6a5-837c3036458a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-14T09:21:22Z","modified":"2025-11-14T09:21:22Z","name":"Phishing domain: 837839coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/837839coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '837839coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-14T09:21:22Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/837839coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7baa3220-e7b1-5a67-a45a-cbb94438e2bc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 839018159.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/839018159.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '839018159.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/839018159.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f3783dc-56f0-52c3-9bb3-ffc4a6109a3b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-31T18:54:52Z","modified":"2025-12-31T18:54:52Z","name":"Phishing domain: 83ef271f.kjdhfhud.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating trezor. Report & evidence: https://phishdestroy.io/domain/83ef271f.kjdhfhud.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '83ef271f.kjdhfhud.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-31T18:54:52Z","labels":["malicious-activity","phishing","brand:trezor"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/83ef271f.kjdhfhud.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1b692bd-9449-552e-ab55-aaa21c473346","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-11T12:56:26Z","modified":"2026-08-11T12:56:26Z","name":"Phishing domain: 83f7ab.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/83f7ab.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '83f7ab.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-11T12:56:26Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/83f7ab.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe79d4f7-ca38-5059-9e04-9d32134407a6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-09T14:25:06Z","modified":"2026-06-09T14:25:06Z","name":"Phishing domain: 84123.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/84123.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '84123.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-09T14:25:06Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/84123.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcf9c73c-6d21-5cf1-8c5a-efeaac6169f6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-26T03:24:53Z","modified":"2026-01-26T03:24:53Z","name":"Phishing domain: 84279.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/84279.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '84279.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-26T03:24:53Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/84279.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--26d5af3a-cdf5-5966-ba46-f483c99f6986","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-24T00:13:28Z","modified":"2025-12-24T00:13:28Z","name":"Phishing domain: 84331.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/84331.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '84331.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-24T00:13:28Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/84331.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c68af60-dccc-5cb7-a101-cce8a9027b99","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-26T03:23:39Z","modified":"2026-01-26T03:23:39Z","name":"Phishing domain: 84340.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/84340.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '84340.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-26T03:23:39Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/84340.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d3ce423-604b-51c6-8e55-2cc7bc7b97b7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-18T15:34:19Z","modified":"2025-10-18T15:34:19Z","name":"Phishing domain: 84360coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/84360coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '84360coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-18T15:34:19Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/84360coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6286262b-49cd-56ff-b17d-d8c65556b129","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-19T15:05:54Z","modified":"2026-02-19T15:05:54Z","name":"Phishing domain: 843653-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/843653-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '843653-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-19T15:05:54Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/843653-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--333f57ed-fbf4-5264-b0da-a3cff9d2e948","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:50Z","modified":"2026-02-26T23:19:50Z","name":"Phishing domain: 84371.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/84371.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '84371.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:50Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/84371.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f129c6f-a2ad-5521-a65e-6a3f280cfbe3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-25T15:59:45Z","modified":"2026-01-25T15:59:45Z","name":"Phishing domain: 84376.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/84376.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '84376.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-25T15:59:45Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/84376.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a58b09c6-236c-57a4-a167-981ae7304c45","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-26T03:33:32Z","modified":"2026-01-26T03:33:32Z","name":"Phishing domain: 84408.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/84408.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '84408.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-26T03:33:32Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/84408.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2673bdb-faed-5cec-bc48-d0c6d2709e42","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-26T03:24:45Z","modified":"2026-01-26T03:24:45Z","name":"Phishing domain: 84415.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/84415.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '84415.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-26T03:24:45Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/84415.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--421c5368-9759-5c52-b6fd-e3adda75206b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-03T09:56:45Z","modified":"2025-09-03T09:56:45Z","name":"Phishing domain: 84563.club","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/84563.club","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '84563.club']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-03T09:56:45Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/84563.club"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b72e27e-01c8-568a-bfa7-5930690d6d32","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 84612901---61652.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/84612901---61652.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '84612901---61652.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/84612901---61652.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6cefb49-257b-5d8d-a5b4-f954784e1283","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:24Z","modified":"2026-02-26T23:24:24Z","name":"Phishing domain: 84620.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/84620.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '84620.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:24Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/84620.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e56bc69d-2747-5c23-bc0c-f6a0e73304ba","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:54Z","modified":"2026-02-26T23:22:54Z","name":"Phishing domain: 84627.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/84627.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '84627.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:54Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/84627.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--788c1c22-f378-5e7e-b767-15e9fcf1bcd1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:07Z","modified":"2026-02-26T23:23:07Z","name":"Phishing domain: 84643.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/84643.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '84643.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:07Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/84643.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b609de0c-9dac-5956-b5ea-34bd44150c9c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-24T17:07:38Z","modified":"2026-02-24T17:07:38Z","name":"Phishing domain: 846433coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/846433coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '846433coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-24T17:07:38Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/846433coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--96ee5ec3-1d95-5643-a65a-462a72c06661","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:37Z","modified":"2026-02-26T23:21:37Z","name":"Phishing domain: 84645.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/84645.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '84645.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:37Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/84645.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9ec14e7-f1d6-5fdb-b282-8debb16b2ed0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:44Z","modified":"2026-02-26T23:22:44Z","name":"Phishing domain: 84673.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/84673.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '84673.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:44Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/84673.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--541d1907-69d9-54e2-90e3-774508810bd6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-23T10:53:13Z","modified":"2025-10-23T10:53:13Z","name":"Phishing domain: 84690-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/84690-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '84690-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-23T10:53:13Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/84690-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a61b40ce-69a0-5245-9f8e-45ebe2f8a8f0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:25Z","modified":"2026-02-26T23:22:25Z","name":"Phishing domain: 84698.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/84698.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '84698.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:25Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/84698.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--00f0f2b5-bf1f-52db-a36b-180d5553f8d5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-28T18:34:02Z","modified":"2026-02-28T18:34:02Z","name":"Phishing domain: 846oslobet.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/846oslobet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '846oslobet.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-28T18:34:02Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/846oslobet.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f03870e5-4f55-5dba-9528-fdc48f754602","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:39Z","modified":"2026-02-26T23:24:39Z","name":"Phishing domain: 84700.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/84700.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '84700.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:39Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/84700.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4497e005-7768-5d53-8f0a-ec7c89238122","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:58Z","modified":"2026-02-26T23:19:58Z","name":"Phishing domain: 84705.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/84705.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '84705.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:58Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/84705.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5db0f67c-5447-529d-8440-05020b09765b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:23Z","modified":"2026-02-26T23:23:23Z","name":"Phishing domain: 84708.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/84708.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '84708.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:23Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/84708.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--431d5ad4-ec61-50cc-8a1a-a02ed124a233","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-12T00:30:02Z","modified":"2026-03-12T00:30:02Z","name":"Phishing domain: 847312-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/847312-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '847312-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-12T00:30:02Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/847312-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6e43f79-e918-5859-af3d-055eddbd113a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-12T16:30:03Z","modified":"2026-03-12T16:30:03Z","name":"Phishing domain: 847312-ledger.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/847312-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '847312-ledger.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-12T16:30:03Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/847312-ledger.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb2176b9-6b27-53c0-adef-caca2d787948","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:45Z","modified":"2026-02-26T23:24:45Z","name":"Phishing domain: 84738.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/84738.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '84738.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:45Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/84738.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--04a3065b-bd01-5a33-b3ca-56f9a30f41ca","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-07T15:18:00Z","modified":"2026-01-07T15:18:00Z","name":"Phishing domain: 84861.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/84861.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '84861.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-07T15:18:00Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/84861.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0723dc0a-80f4-5938-8c8d-50cb36d9a88f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-10T14:36:35Z","modified":"2026-06-10T14:36:35Z","name":"Phishing domain: 84899286365.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/84899286365.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '84899286365.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-10T14:36:35Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/84899286365.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa321513-6c3f-5e04-8c62-d378c59eae27","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-16T07:49:36Z","modified":"2025-09-16T07:49:36Z","name":"Phishing domain: 849234-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/849234-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '849234-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-16T07:49:36Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/849234-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--22283ed3-cefa-5e65-a87b-65e9b0fd2b5f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-10T14:16:31Z","modified":"2026-07-10T14:16:31Z","name":"Phishing domain: 84ad81a9-df50-2c05-67eb-docviewer.rajesh-das1010.workers.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating microsoft. Report & evidence: https://phishdestroy.io/domain/84ad81a9-df50-2c05-67eb-docviewer.rajesh-das1010.workers.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '84ad81a9-df50-2c05-67eb-docviewer.rajesh-das1010.workers.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-10T14:16:31Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/84ad81a9-df50-2c05-67eb-docviewer.rajesh-das1010.workers.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb05ab09-84f2-58cc-a9ce-2aae033a1ad2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-20T00:55:25Z","modified":"2025-11-20T00:55:25Z","name":"Phishing domain: 85-215-175-92.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/85-215-175-92.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '85-215-175-92.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-20T00:55:25Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/85-215-175-92.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b1bc242-5b38-57a0-a391-14e67eeefc37","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 8515133---6165.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/8515133---6165.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8515133---6165.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8515133---6165.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f75bed8f-98a0-566d-87b1-df53f1597939","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T09:41:54Z","modified":"2026-07-27T09:41:54Z","name":"Phishing domain: 8520258.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/8520258.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8520258.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T09:41:54Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8520258.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d79617da-d135-5d0a-bbd7-46c1e296ebd0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 85288k.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/85288k.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '85288k.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/85288k.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c969df17-11b0-5658-a170-0543558a9ddb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 85288x.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/85288x.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '85288x.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/85288x.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--891dde7e-e5fc-5317-9829-edefaea49aa7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 85288z.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/85288z.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '85288z.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/85288z.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c01d0f09-7fdd-520f-b814-ad6830f74000","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 85288zxd.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/85288zxd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '85288zxd.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/85288zxd.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e586f68b-2674-502b-964b-e516cfd4c757","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-27T16:14:28Z","modified":"2025-12-27T16:14:28Z","name":"Phishing domain: 852e3acb.kjvhvuhutvv.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/852e3acb.kjvhvuhutvv.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '852e3acb.kjvhvuhutvv.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-27T16:14:28Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/852e3acb.kjvhvuhutvv.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c23f9665-4dcc-5ff5-8fdc-6f9e5df70fdc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-14T22:08:40Z","modified":"2026-03-14T22:08:40Z","name":"Phishing domain: 8563-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/8563-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8563-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-14T22:08:40Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8563-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4103754-5b34-5144-974b-85c9efe0ac48","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-01T03:30:00Z","modified":"2026-03-01T03:30:00Z","name":"Phishing domain: 857644coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/857644coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '857644coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-01T03:30:00Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/857644coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1700f5c7-116e-5c9e-bc31-acbbf29df2f1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:13Z","modified":"2026-02-26T23:22:13Z","name":"Phishing domain: 8586.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating amazon. Report & evidence: https://phishdestroy.io/domain/8586.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8586.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:13Z","labels":["malicious-activity","phishing","brand:amazon"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8586.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--795bf76a-cacd-5a56-9489-9e52d562cf0a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-26T13:39:07Z","modified":"2026-01-26T13:39:07Z","name":"Phishing domain: 8589817314.dojiner.at","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Steam. Report & evidence: https://phishdestroy.io/domain/8589817314.dojiner.at","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8589817314.dojiner.at']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-26T13:39:07Z","labels":["malicious-activity","phishing","brand:steam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8589817314.dojiner.at"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a67e64c3-fc05-52d7-8388-0de4b7572164","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-08T15:01:00Z","modified":"2026-04-08T15:01:00Z","name":"Phishing domain: 858bet08.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/858bet08.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '858bet08.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-08T15:01:00Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/858bet08.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e31d0f18-d958-51e5-a922-391b1ca8f31e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-23T10:52:23Z","modified":"2025-10-23T10:52:23Z","name":"Phishing domain: 859825coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/859825coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '859825coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-23T10:52:23Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/859825coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cee79b27-4623-5d84-b177-e0e47a3bad5f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:32Z","modified":"2026-02-26T23:21:32Z","name":"Phishing domain: 85jfd1d.baollll2.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/85jfd1d.baollll2.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '85jfd1d.baollll2.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:32Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/85jfd1d.baollll2.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--61b50505-0059-5d7d-8988-c18cffdf0646","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:19Z","modified":"2026-02-26T23:19:19Z","name":"Phishing domain: 8617kryy.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/8617kryy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8617kryy.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:19Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8617kryy.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--802dde5f-4cab-5a29-884c-30638c96bf36","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:01Z","modified":"2026-02-26T23:21:01Z","name":"Phishing domain: 86269.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/86269.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '86269.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:01Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/86269.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4cd651d-d55c-585b-bbc7-526d8ecb27bf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-20T03:31:57Z","modified":"2026-01-20T03:31:57Z","name":"Phishing domain: 86322.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/86322.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '86322.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-20T03:31:57Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/86322.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2505c3c-b0d8-5279-82d9-48ee86e1f751","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-12T15:24:16Z","modified":"2026-02-12T15:24:16Z","name":"Phishing domain: 863365.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/863365.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '863365.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-12T15:24:16Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/863365.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d121c8db-15f6-526a-9cbe-0cb5acc72593","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-12T03:43:04Z","modified":"2026-08-12T03:43:04Z","name":"Phishing domain: 8635f6.arcadejafet.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/8635f6.arcadejafet.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8635f6.arcadejafet.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-12T03:43:04Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8635f6.arcadejafet.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--646add2a-4742-5419-87b0-7189416e863e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-21T02:16:29Z","modified":"2026-06-21T02:16:29Z","name":"Phishing domain: 86365kk.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/86365kk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '86365kk.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-21T02:16:29Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/86365kk.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--261a0643-ed86-5bad-b038-89dc73bea3ac","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-09T14:28:14Z","modified":"2026-07-09T14:28:14Z","name":"Phishing domain: 86365z.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/86365z.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '86365z.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-09T14:28:14Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/86365z.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a41a865e-0f51-5922-b11b-17e98ce366ba","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-10T22:49:13Z","modified":"2026-03-10T22:49:13Z","name":"Phishing domain: 86374coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/86374coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '86374coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-10T22:49:13Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/86374coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--359c86aa-bebf-5309-8611-596e419315ed","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: 8657guest-booking.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/8657guest-booking.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8657guest-booking.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8657guest-booking.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9293237-02ac-5374-8cad-a79bbb81c6cc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-17T16:17:08Z","modified":"2026-03-17T16:17:08Z","name":"Phishing domain: 865pro.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/865pro.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '865pro.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-17T16:17:08Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/865pro.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a30b484-e3af-5704-86b1-6e34d4296d39","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:45:25Z","modified":"2026-07-27T04:45:25Z","name":"Phishing domain: 866292824.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/866292824.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '866292824.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:45:25Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/866292824.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b21c38f-ebff-54d3-8f32-bf71e5178744","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-21T15:30:16Z","modified":"2026-01-21T15:30:16Z","name":"Phishing domain: 86652.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/86652.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '86652.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-21T15:30:16Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/86652.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6d6f350-94b9-52ee-811e-0f412ffeb2c4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-20T03:31:43Z","modified":"2026-01-20T03:31:43Z","name":"Phishing domain: 86719.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/86719.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '86719.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-20T03:31:43Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/86719.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6afd9380-c025-5363-9a38-71db094dba9f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-21T15:29:23Z","modified":"2026-01-21T15:29:23Z","name":"Phishing domain: 86729.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/86729.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '86729.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-21T15:29:23Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/86729.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--74b92e33-aa39-5523-b433-7f86a2f91063","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-21T15:27:50Z","modified":"2026-01-21T15:27:50Z","name":"Phishing domain: 86732.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/86732.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '86732.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-21T15:27:50Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/86732.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5da04c72-488c-56a4-98dc-9711e0868bd9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-20T06:57:45Z","modified":"2025-12-20T06:57:45Z","name":"Phishing domain: 8674b351.memo-ba1.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/8674b351.memo-ba1.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8674b351.memo-ba1.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-20T06:57:45Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8674b351.memo-ba1.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c44f4bb-8cb3-5868-900b-fe5707b181e4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:17Z","modified":"2026-07-27T06:02:17Z","name":"Phishing domain: 8678.bet","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/8678.bet","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8678.bet']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8678.bet"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--74627036-6a1a-55de-ad14-0b418bfdae69","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-23T14:27:01Z","modified":"2026-06-23T14:27:01Z","name":"Phishing domain: 868542.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/868542.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '868542.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-23T14:27:01Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/868542.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d48c67e9-987b-5df6-be99-809aaa4a7fda","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T17:37:54Z","modified":"2026-02-26T17:37:54Z","name":"Phishing domain: 868dc.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/868dc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '868dc.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T17:37:54Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/868dc.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1466b125-c307-54c3-a750-3ffec943aab4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:35Z","modified":"2026-02-26T23:22:35Z","name":"Phishing domain: 86b13a04.blockchainsynchronization.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/86b13a04.blockchainsynchronization.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '86b13a04.blockchainsynchronization.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:35Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/86b13a04.blockchainsynchronization.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aacc6629-c195-5a40-801f-b3837df8e8e9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-14T14:26:06Z","modified":"2026-06-14T14:26:06Z","name":"Phishing domain: 86d9ac664f32b3117fef6b80c85afdd31edd.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/86d9ac664f32b3117fef6b80c85afdd31edd.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '86d9ac664f32b3117fef6b80c85afdd31edd.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-14T14:26:06Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/86d9ac664f32b3117fef6b80c85afdd31edd.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--91b061e6-0c3b-53d0-a04b-f52ceca8b347","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-19T15:09:20Z","modified":"2026-02-19T15:09:20Z","name":"Phishing domain: 87-106-70-155.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/87-106-70-155.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '87-106-70-155.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-19T15:09:20Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/87-106-70-155.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5a1d2c4-73c6-52dc-ab80-77c63f72a44a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:27Z","modified":"2026-02-26T23:19:27Z","name":"Phishing domain: 87193.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/87193.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '87193.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:27Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/87193.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4d92e85-a2fa-5925-a1df-4d8bd5a25449","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-11T14:37:21Z","modified":"2026-06-11T14:37:21Z","name":"Phishing domain: 87365.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/87365.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '87365.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-11T14:37:21Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/87365.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--652005ff-4df6-5cb6-9205-76716bd850e5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-18T12:52:15Z","modified":"2026-06-18T12:52:15Z","name":"Phishing domain: 87405.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/87405.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '87405.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-18T12:52:15Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/87405.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--66bfc5bb-d365-5928-8a86-abf717af5f88","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:15Z","modified":"2026-02-26T23:23:15Z","name":"Phishing domain: 87443.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/87443.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '87443.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:15Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/87443.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bd0fb7c-7e07-54c1-bb30-7a9a5ac01eb7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:11Z","modified":"2026-02-26T23:23:11Z","name":"Phishing domain: 87458.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/87458.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '87458.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:11Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/87458.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d183cdc9-f7a0-59f8-88dc-417c20490a58","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:12Z","modified":"2026-02-26T23:24:12Z","name":"Phishing domain: 87464.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/87464.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '87464.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:12Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/87464.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac1f7d9f-057d-5ee0-99c9-eb3976011ad1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:23Z","modified":"2026-02-26T23:19:23Z","name":"Phishing domain: 87483.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/87483.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '87483.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:23Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/87483.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--04f23aaf-b573-5009-938b-6b46ee1fbac3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-17T16:03:34Z","modified":"2026-05-17T16:03:34Z","name":"Phishing domain: 874cratosroyalbet.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/874cratosroyalbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '874cratosroyalbet.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-17T16:03:34Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/874cratosroyalbet.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0736a55-d59b-54a2-92a6-309fae72fa67","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-05T15:51:35Z","modified":"2026-07-05T15:51:35Z","name":"Phishing domain: 87621-live.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Microsoft. Report & evidence: https://phishdestroy.io/domain/87621-live.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '87621-live.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-05T15:51:35Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/87621-live.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--701c19b6-6402-51cd-864b-5f66fa3559e0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-03T14:33:32Z","modified":"2026-08-03T14:33:32Z","name":"Phishing domain: 876231-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/876231-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '876231-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-03T14:33:32Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/876231-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1da8ef00-58c0-5a98-8e2d-a5fdbe4db33b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-15T09:05:14Z","modified":"2026-02-15T09:05:14Z","name":"Phishing domain: 878391-crypto.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Crypto.com. Report & evidence: https://phishdestroy.io/domain/878391-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '878391-crypto.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-15T09:05:14Z","labels":["malicious-activity","phishing","brand:crypto.com"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/878391-crypto.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e0d0fe0-f4fe-5812-96e0-15542f82d23b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-23T15:51:38Z","modified":"2026-01-23T15:51:38Z","name":"Phishing domain: 87905.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/87905.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '87905.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-23T15:51:38Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/87905.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c7ad294-52ff-53e0-9dfa-b5b414a517a5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-23T15:52:09Z","modified":"2026-01-23T15:52:09Z","name":"Phishing domain: 87917.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/87917.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '87917.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-23T15:52:09Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/87917.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--13105de4-e338-573b-b828-80989fda9da7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-21T15:28:18Z","modified":"2026-01-21T15:28:18Z","name":"Phishing domain: 87919.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/87919.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '87919.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-21T15:28:18Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/87919.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--02a7bf88-e010-5706-8b2f-dd54f9ba8c0f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-23T15:46:53Z","modified":"2026-01-23T15:46:53Z","name":"Phishing domain: 87921.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/87921.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '87921.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-23T15:46:53Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/87921.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--13b62d2d-fb85-5d47-9e7d-bb63d4695cd5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-27T18:03:52Z","modified":"2026-01-27T18:03:52Z","name":"Phishing domain: 87tytdrtfdrx765.weebly.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/87tytdrtfdrx765.weebly.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '87tytdrtfdrx765.weebly.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-27T18:03:52Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/87tytdrtfdrx765.weebly.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f4aef91-d17c-5edb-a417-782f3bd937a8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:17Z","modified":"2026-07-27T06:02:17Z","name":"Phishing domain: 8801.tw","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/8801.tw","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8801.tw']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8801.tw"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c175a56-9f60-577d-a484-81fd0b97ce2a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 88026rr.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/88026rr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '88026rr.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/88026rr.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8b583ef-d181-5c39-a7b6-cabefcc4cf4c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:12Z","modified":"2026-02-26T23:21:12Z","name":"Phishing domain: 88031.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/88031.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '88031.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:12Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/88031.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca0ea89c-f4b8-5d58-819a-2627869b9e01","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:21Z","modified":"2026-02-26T23:20:21Z","name":"Phishing domain: 88038.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/88038.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '88038.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:21Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/88038.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ec3cfe6-7aee-5904-bc47-78e6463a06de","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:53Z","modified":"2026-02-26T23:23:53Z","name":"Phishing domain: 880802-cb.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/880802-cb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '880802-cb.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:53Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/880802-cb.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--99190340-c485-5398-8711-f56b609faf59","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 881-221-654-90-1.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/881-221-654-90-1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '881-221-654-90-1.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/881-221-654-90-1.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d68b429b-d3e6-57f3-a140-245ca4868088","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T14:06:36Z","modified":"2026-01-02T14:06:36Z","name":"Phishing domain: 8822365.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/8822365.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8822365.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T14:06:36Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8822365.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--62e8746d-f565-5b0b-83db-f5d243db7795","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-21T10:43:26Z","modified":"2025-12-21T10:43:26Z","name":"Phishing domain: 882340-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/882340-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '882340-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-21T10:43:26Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/882340-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f1a8cdd-16ac-5996-82c9-b9e1b9a3e829","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T15:50:29Z","modified":"2026-08-09T15:50:29Z","name":"Phishing domain: 88326.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating gmail. Report & evidence: https://phishdestroy.io/domain/88326.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '88326.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T15:50:29Z","labels":["malicious-activity","phishing","brand:gmail"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/88326.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6508fc14-c4ac-56dd-9b6e-c1ba5ec6dc19","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T18:05:55Z","modified":"2026-02-26T18:05:55Z","name":"Phishing domain: 8834g.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/8834g.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8834g.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T18:05:55Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8834g.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--272769a6-5689-5cd9-a62e-1f1aa487a927","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:02:16Z","modified":"2026-08-10T00:02:16Z","name":"Phishing domain: 88407.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating gmail. Report & evidence: https://phishdestroy.io/domain/88407.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '88407.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:02:16Z","labels":["malicious-activity","phishing","brand:gmail"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/88407.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--09b7d32e-f7f2-5b8b-a1f1-341796048ff1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T15:52:44Z","modified":"2026-08-09T15:52:44Z","name":"Phishing domain: 88413.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/88413.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '88413.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T15:52:44Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/88413.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--457fdda8-2f21-5661-a111-08c8f073a7fb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T15:51:28Z","modified":"2026-08-09T15:51:28Z","name":"Phishing domain: 88418.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating gmail. Report & evidence: https://phishdestroy.io/domain/88418.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '88418.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T15:51:28Z","labels":["malicious-activity","phishing","brand:gmail"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/88418.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--60ba0ca7-f735-5f74-b3c1-2d2fcdd8b4c1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T15:50:01Z","modified":"2026-08-09T15:50:01Z","name":"Phishing domain: 88438.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/88438.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '88438.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T15:50:01Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/88438.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cfe4cb1-2d31-5182-9c1a-4f8c14004307","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T23:54:21Z","modified":"2026-08-09T23:54:21Z","name":"Phishing domain: 88440.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating gmail. Report & evidence: https://phishdestroy.io/domain/88440.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '88440.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T23:54:21Z","labels":["malicious-activity","phishing","brand:gmail"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/88440.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ab510c8-93cb-545a-865b-556f239ab748","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-04T12:37:51Z","modified":"2026-07-04T12:37:51Z","name":"Phishing domain: 88465.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/88465.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '88465.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-04T12:37:51Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/88465.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f29f6ca-0b2d-5454-b38b-0fd21f2a84c8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T15:52:10Z","modified":"2026-08-09T15:52:10Z","name":"Phishing domain: 88466.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating gmail. Report & evidence: https://phishdestroy.io/domain/88466.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '88466.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T15:52:10Z","labels":["malicious-activity","phishing","brand:gmail"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/88466.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ce0a32b-4e11-5470-a6be-99e4957e2cca","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-24T18:52:38Z","modified":"2026-02-24T18:52:38Z","name":"Phishing domain: 88529ht.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/88529ht.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '88529ht.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-24T18:52:38Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/88529ht.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b696c4e2-f5b5-5cc8-a438-3f570f530bbb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-31T17:43:54Z","modified":"2026-01-31T17:43:54Z","name":"Phishing domain: 885625-ledger.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating ledger. Report & evidence: https://phishdestroy.io/domain/885625-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '885625-ledger.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-31T17:43:54Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/885625-ledger.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f41dd0c4-d558-548c-a36e-40ab64a99a95","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-17T14:48:35Z","modified":"2026-03-17T14:48:35Z","name":"Phishing domain: 88622.mssg.me","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating telegram. Report & evidence: https://phishdestroy.io/domain/88622.mssg.me","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '88622.mssg.me']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-17T14:48:35Z","labels":["malicious-activity","phishing","brand:telegram"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/88622.mssg.me"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5918e224-9b31-5b74-a0e3-539ba33fbc01","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-03T13:19:50Z","modified":"2025-09-03T13:19:50Z","name":"Phishing domain: 88623-crypto.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating crypto.com. Report & evidence: https://phishdestroy.io/domain/88623-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '88623-crypto.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-03T13:19:50Z","labels":["malicious-activity","phishing","brand:crypto.com"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/88623-crypto.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fa0124a-226d-5611-ab99-3a1cf5a2ec50","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-04T12:42:12Z","modified":"2026-07-04T12:42:12Z","name":"Phishing domain: 88680.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/88680.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '88680.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-04T12:42:12Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/88680.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d835daef-69e4-5235-b394-3f08d23f8a17","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-14T14:28:49Z","modified":"2026-06-14T14:28:49Z","name":"Phishing domain: 8868605.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/8868605.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8868605.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-14T14:28:49Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8868605.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6d6d997-e744-5e5a-b310-a6a7db91e6d1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-25T19:00:40Z","modified":"2025-11-25T19:00:40Z","name":"Phishing domain: 886eth.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/886eth.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '886eth.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-25T19:00:40Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/886eth.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--74647842-1969-508e-a9d1-e432ce94ab7f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-24T00:59:32Z","modified":"2025-11-24T00:59:32Z","name":"Phishing domain: 887365.co","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/887365.co","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '887365.co']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-24T00:59:32Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/887365.co"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--63c77cb8-fce0-5fc7-90d8-ac58e7a1a080","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-17T14:17:07Z","modified":"2026-07-17T14:17:07Z","name":"Phishing domain: 88790.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/88790.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '88790.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-17T14:17:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/88790.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f97466e9-c6b6-57e0-8b9e-27f435462b5c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-31T11:00:39Z","modified":"2025-12-31T11:00:39Z","name":"Phishing domain: 887f4f5c.lkjddhd.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/887f4f5c.lkjddhd.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '887f4f5c.lkjddhd.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-31T11:00:39Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/887f4f5c.lkjddhd.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--38632047-8515-5320-b1a5-101c5e51666e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-24T13:12:18Z","modified":"2026-01-24T13:12:18Z","name":"Phishing domain: 888-betspin.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/888-betspin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '888-betspin.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-24T13:12:18Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/888-betspin.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--12373275-24e3-5072-a7df-37c83ae449ef","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T11:33:15Z","modified":"2026-02-13T11:33:15Z","name":"Phishing domain: 888-casinoss-uk.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating chase. Report & evidence: https://phishdestroy.io/domain/888-casinoss-uk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '888-casinoss-uk.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T11:33:15Z","labels":["malicious-activity","phishing","brand:chase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/888-casinoss-uk.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4802244-6772-5799-955a-02a27bfb3884","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:17Z","modified":"2026-07-27T06:02:17Z","name":"Phishing domain: 8880.pw","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/8880.pw","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8880.pw']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8880.pw"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e32330e-5051-5398-b0f0-3ed67fafb94e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-17T14:27:23Z","modified":"2026-07-17T14:27:23Z","name":"Phishing domain: 88804.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/88804.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '88804.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-17T14:27:23Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/88804.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--656f75a2-bb09-5be0-9f82-ff3ae0e1dd24","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-17T14:19:08Z","modified":"2026-07-17T14:19:08Z","name":"Phishing domain: 88812.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/88812.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '88812.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-17T14:19:08Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/88812.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2157469-e577-5d37-aaca-7ed9d1b56106","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-11T03:31:47Z","modified":"2026-02-11T03:31:47Z","name":"Phishing domain: 88830.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/88830.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '88830.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-11T03:31:47Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/88830.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--36b43500-e979-5170-8be4-d8fdbaa341b9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:20Z","modified":"2026-02-26T23:20:20Z","name":"Phishing domain: 888365168.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/888365168.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '888365168.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:20Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/888365168.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--420b1754-302c-5b3b-92c3-5ac4f43d1d3c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-17T14:17:15Z","modified":"2026-07-17T14:17:15Z","name":"Phishing domain: 88841.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/88841.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '88841.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-17T14:17:15Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/88841.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac4a23c0-a5c4-536b-a064-e03811103a99","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-10T16:20:19Z","modified":"2026-02-10T16:20:19Z","name":"Phishing domain: 88846.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/88846.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '88846.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-10T16:20:19Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/88846.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--66424775-8628-560d-83b1-92e45943bc7d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-08T17:41:05Z","modified":"2026-02-08T17:41:05Z","name":"Phishing domain: 88861.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/88861.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '88861.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-08T17:41:05Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/88861.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4395e3da-05ab-5af5-bd63-a5118c2cfd89","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 88899.ee","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/88899.ee","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '88899.ee']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/88899.ee"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb09f391-7405-5e7b-b76d-dbe998632740","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-06T14:59:13Z","modified":"2026-07-06T14:59:13Z","name":"Phishing domain: 888c-asino.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/888c-asino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '888c-asino.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-06T14:59:13Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/888c-asino.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--299e03e7-6587-5407-8989-03ce7a5f0ddb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-21T12:37:39Z","modified":"2026-04-21T12:37:39Z","name":"Phishing domain: 888casino.capital","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/888casino.capital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '888casino.capital']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-21T12:37:39Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/888casino.capital"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0e1c1ad-9a45-5256-a1f2-c6789d2ba89d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-02T19:53:36Z","modified":"2026-03-02T19:53:36Z","name":"Phishing domain: 888kasino.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/888kasino.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '888kasino.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-02T19:53:36Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/888kasino.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc720888-30bd-5334-ac81-945378f4c6b4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:58:55Z","modified":"2026-07-27T04:58:55Z","name":"Phishing domain: 888qpd2.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/888qpd2.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '888qpd2.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:58:55Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/888qpd2.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5eec09f6-9b44-5a1d-b9ae-ff6e763adfb3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-30T18:02:54Z","modified":"2025-10-30T18:02:54Z","name":"Phishing domain: 888spinbet.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating cryptoscam. Report & evidence: https://phishdestroy.io/domain/888spinbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '888spinbet.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-30T18:02:54Z","labels":["malicious-activity","phishing","brand:cryptoscam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/888spinbet.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--22a64888-2f11-5442-a30b-4ddf94b606e2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-17T14:27:23Z","modified":"2026-07-17T14:27:23Z","name":"Phishing domain: 88920.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/88920.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '88920.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-17T14:27:23Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/88920.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ed1c1c4-e44b-58a4-993e-3fa56ad1aa62","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-25T03:45:00Z","modified":"2026-02-25T03:45:00Z","name":"Phishing domain: 889212-kraken.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Kraken. Report & evidence: https://phishdestroy.io/domain/889212-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '889212-kraken.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-25T03:45:00Z","labels":["malicious-activity","phishing","brand:kraken"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/889212-kraken.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ce2ab3b-f84a-57d9-97db-4330e6b950eb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:59Z","modified":"2026-02-26T23:24:59Z","name":"Phishing domain: 88978-kraken.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Kraken. Report & evidence: https://phishdestroy.io/domain/88978-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '88978-kraken.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:59Z","labels":["malicious-activity","phishing","brand:kraken"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/88978-kraken.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbd3f804-8c8f-50bb-b795-2ac1b5e64f79","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:45Z","modified":"2026-02-26T23:20:45Z","name":"Phishing domain: 88bitkan.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/88bitkan.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '88bitkan.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:45Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/88bitkan.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6c54db8-bafe-5dc0-ae37-31b98eb3c67e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-26T15:30:14Z","modified":"2025-12-26T15:30:14Z","name":"Phishing domain: 88bosku.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/88bosku.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '88bosku.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-26T15:30:14Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/88bosku.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e249f3d7-9dfe-547f-a32a-67cb739bc540","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-12T03:39:39Z","modified":"2026-08-12T03:39:39Z","name":"Phishing domain: 88c700.arcadejafet.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/88c700.arcadejafet.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '88c700.arcadejafet.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-12T03:39:39Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/88c700.arcadejafet.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6020d47c-41ed-5f6e-aa6d-8a8422156d9f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-23T21:50:41Z","modified":"2026-04-23T21:50:41Z","name":"Phishing domain: 88dog.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/88dog.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '88dog.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-23T21:50:41Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/88dog.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6566b79-68c7-5d13-a853-5c29b61418ef","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-24T18:33:51Z","modified":"2026-04-24T18:33:51Z","name":"Phishing domain: 88dog.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/88dog.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '88dog.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-24T18:33:51Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/88dog.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--07cc9694-5bfa-58df-a52b-40ff63ad5e9b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T18:09:57Z","modified":"2026-02-26T18:09:57Z","name":"Phishing domain: 88fortune.fun","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/88fortune.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '88fortune.fun']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T18:09:57Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/88fortune.fun"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b84bcc1-0deb-5858-8545-f6faf12243ba","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-05T00:50:23Z","modified":"2026-01-05T00:50:23Z","name":"Phishing domain: 88st.vip","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/88st.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '88st.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-05T00:50:23Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/88st.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7049ccd0-8b38-5251-bd56-8aebf1c3ca2a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-17T14:44:40Z","modified":"2026-07-17T14:44:40Z","name":"Phishing domain: 89002.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/89002.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '89002.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-17T14:44:40Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/89002.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--97dabcb2-c0b1-5a9b-915e-e6767b4b63fa","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-07T02:02:57Z","modified":"2026-06-07T02:02:57Z","name":"Phishing domain: 89019.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/89019.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '89019.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-07T02:02:57Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/89019.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--16a5a83e-c868-51e3-b80d-37830e37bec1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-17T14:18:00Z","modified":"2026-07-17T14:18:00Z","name":"Phishing domain: 89026.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/89026.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '89026.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-17T14:18:00Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/89026.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d78f0449-8eec-5491-918c-f7a900714129","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-12T14:10:47Z","modified":"2026-02-12T14:10:47Z","name":"Phishing domain: 89028.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/89028.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '89028.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-12T14:10:47Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/89028.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf39f30f-7500-5afa-abc0-430555f60721","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-02T11:04:06Z","modified":"2025-11-02T11:04:06Z","name":"Phishing domain: 89031-test890.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating jupiter. Report & evidence: https://phishdestroy.io/domain/89031-test890.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '89031-test890.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-02T11:04:06Z","labels":["malicious-activity","phishing","brand:jupiter"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/89031-test890.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d106bbbb-f5c5-5453-b0ff-1c5ca98c0b38","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-05T01:16:45Z","modified":"2026-03-05T01:16:45Z","name":"Phishing domain: 890431coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/890431coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '890431coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-05T01:16:45Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/890431coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d35c9b22-ee8e-597c-963d-b53ca0a60140","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-09T14:28:38Z","modified":"2026-06-09T14:28:38Z","name":"Phishing domain: 89240.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/89240.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '89240.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-09T14:28:38Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/89240.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4922f89-4e75-5623-8b34-9ab7a4dca2f9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-13T19:18:14Z","modified":"2026-03-13T19:18:14Z","name":"Phishing domain: 893428coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/893428coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '893428coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-13T19:18:14Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/893428coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd99c493-0421-58a7-95c7-9b6a48ce3545","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:17Z","modified":"2026-07-27T06:02:17Z","name":"Phishing domain: 8942.win","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/8942.win","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8942.win']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8942.win"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cf3b4d3-9cb5-5d5e-839e-926149222bd5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-03T04:17:19Z","modified":"2026-02-03T04:17:19Z","name":"Phishing domain: 89421.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/89421.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '89421.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-03T04:17:19Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/89421.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddf773e8-2a04-548c-939b-f7fd9b850692","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-04T14:14:32Z","modified":"2026-07-04T14:14:32Z","name":"Phishing domain: 89429.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/89429.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '89429.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-04T14:14:32Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/89429.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--77233865-15d5-5260-afd8-e836c5ddf8ed","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-04T14:37:23Z","modified":"2026-07-04T14:37:23Z","name":"Phishing domain: 89447.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/89447.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '89447.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-04T14:37:23Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/89447.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0e9025c-d973-5efc-852e-adf3113d4bad","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-04T14:09:09Z","modified":"2026-07-04T14:09:09Z","name":"Phishing domain: 89452.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/89452.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '89452.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-04T14:09:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/89452.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac22eb4e-b04e-562d-9c80-06bd45634db0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-22T19:50:38Z","modified":"2025-10-22T19:50:38Z","name":"Phishing domain: 89453-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/89453-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '89453-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-22T19:50:38Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/89453-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--45652a9b-ded2-5e66-a58a-218d7081d160","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-07T01:29:47Z","modified":"2026-07-07T01:29:47Z","name":"Phishing domain: 894539.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/894539.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '894539.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-07T01:29:47Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/894539.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d604f33-16ed-5be1-91ac-4471552c628e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:45Z","modified":"2026-02-26T23:22:45Z","name":"Phishing domain: 89454.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/89454.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '89454.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:45Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/89454.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--944ea05e-94ac-5977-bcab-9c299d170124","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-04T14:09:09Z","modified":"2026-07-04T14:09:09Z","name":"Phishing domain: 89457.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/89457.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '89457.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-04T14:09:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/89457.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb468ee0-2182-59be-8880-386b6526e19a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-04T14:09:08Z","modified":"2026-07-04T14:09:08Z","name":"Phishing domain: 89458.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/89458.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '89458.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-04T14:09:08Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/89458.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4df0688c-5f9f-5d0a-934c-d5697e30fd37","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-04T14:17:23Z","modified":"2026-07-04T14:17:23Z","name":"Phishing domain: 89461.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/89461.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '89461.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-04T14:17:23Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/89461.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--350b1f6a-a7bd-55e1-8ca8-bc2371d2a116","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-14T11:57:15Z","modified":"2026-07-14T11:57:15Z","name":"Phishing domain: 894938.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/894938.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '894938.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-14T11:57:15Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/894938.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--657da681-e675-5cc9-b46d-adefdba92a9d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-20T23:34:33Z","modified":"2026-02-20T23:34:33Z","name":"Phishing domain: 895142coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/895142coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '895142coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-20T23:34:33Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/895142coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--433e0f9a-3acb-5761-ab59-b6b5b7601e37","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-08T02:59:37Z","modified":"2026-08-08T02:59:37Z","name":"Phishing domain: 89561.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating gmail. Report & evidence: https://phishdestroy.io/domain/89561.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '89561.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-08T02:59:37Z","labels":["malicious-activity","phishing","brand:gmail"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/89561.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--78bd1227-b52e-5db2-9745-fd49db1b3309","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-04T14:12:37Z","modified":"2026-07-04T14:12:37Z","name":"Phishing domain: 89572.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/89572.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '89572.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-04T14:12:37Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/89572.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--592bb731-7c48-5a28-9643-fe7cabeb4da2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-07T10:42:02Z","modified":"2026-08-07T10:42:02Z","name":"Phishing domain: 897b98b7.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating apple. Report & evidence: https://phishdestroy.io/domain/897b98b7.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '897b98b7.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-07T10:42:02Z","labels":["malicious-activity","phishing","brand:apple"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/897b98b7.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7159482-b61c-52cd-a7c6-d9a71e53afdf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-01T12:51:33Z","modified":"2025-11-01T12:51:33Z","name":"Phishing domain: 8989.life","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/8989.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8989.life']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-01T12:51:33Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8989.life"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b90c7f2-03e5-5dcf-bde7-b1c53322fd18","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-24T13:54:43Z","modified":"2026-03-24T13:54:43Z","name":"Phishing domain: 898a155.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/898a155.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '898a155.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-24T13:54:43Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/898a155.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e5c0593-13fc-5e79-9baa-02af9ea7e9f6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-24T13:54:42Z","modified":"2026-03-24T13:54:42Z","name":"Phishing domain: 898a8.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/898a8.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '898a8.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-24T13:54:42Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/898a8.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3721eeaa-8d83-500a-b471-5b34834b48d8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-12T03:37:45Z","modified":"2026-08-12T03:37:45Z","name":"Phishing domain: 898fd7.arcadejafet.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/898fd7.arcadejafet.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '898fd7.arcadejafet.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-12T03:37:45Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/898fd7.arcadejafet.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--00f3290a-b300-5393-930f-161288dd8d71","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-13T22:53:53Z","modified":"2026-07-13T22:53:53Z","name":"Phishing domain: 89906c6d9245efa4992639407d36cbc7.icu","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/89906c6d9245efa4992639407d36cbc7.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '89906c6d9245efa4992639407d36cbc7.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-13T22:53:53Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/89906c6d9245efa4992639407d36cbc7.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bb13ee9-211c-5105-b99c-9ffe71957cc9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-27T12:48:27Z","modified":"2025-12-27T12:48:27Z","name":"Phishing domain: 89988---8.weebly.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/89988---8.weebly.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '89988---8.weebly.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-27T12:48:27Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/89988---8.weebly.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--16925549-f812-513b-92c7-80c5d4af759b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T17:25:53Z","modified":"2026-02-26T17:25:53Z","name":"Phishing domain: 899887v.weebly.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/899887v.weebly.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '899887v.weebly.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T17:25:53Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/899887v.weebly.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e151addb-5eef-5f5b-92e9-075d4d5225e9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-18T02:37:20Z","modified":"2025-12-18T02:37:20Z","name":"Phishing domain: 89abaf02.smart-5jf.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/89abaf02.smart-5jf.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '89abaf02.smart-5jf.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-18T02:37:20Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/89abaf02.smart-5jf.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--364227db-c2d2-5486-b023-1fe345dfdb91","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-11T14:44:22Z","modified":"2026-06-11T14:44:22Z","name":"Phishing domain: 89betlc.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/89betlc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '89betlc.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-11T14:44:22Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/89betlc.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--889df3ba-01cd-5a33-88ec-0420fcfd9b6a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:30Z","modified":"2026-02-26T23:19:30Z","name":"Phishing domain: 89uv-casefb489572.vercel.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/89uv-casefb489572.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '89uv-casefb489572.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:30Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/89uv-casefb489572.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--721dae03-f25e-5787-b8d9-5e8f7262c05c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-11T14:41:33Z","modified":"2025-10-11T14:41:33Z","name":"Phishing domain: 8a7u.sap25041c5.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/8a7u.sap25041c5.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8a7u.sap25041c5.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-11T14:41:33Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8a7u.sap25041c5.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--30c6a2e0-295f-58f8-9dac-5793c78b33bd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-17T20:13:41Z","modified":"2026-02-17T20:13:41Z","name":"Phishing domain: 8atrx.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating telegram. Report & evidence: https://phishdestroy.io/domain/8atrx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8atrx.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-17T20:13:41Z","labels":["malicious-activity","phishing","brand:telegram"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8atrx.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bab534b0-2d11-5049-8c6b-e04e3aa88a74","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-11T18:44:04Z","modified":"2026-08-11T18:44:04Z","name":"Phishing domain: 8b0c57.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/8b0c57.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8b0c57.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-11T18:44:04Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8b0c57.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--da726b54-a796-5c62-be74-8e9b79514fbb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T23:51:13Z","modified":"2026-08-09T23:51:13Z","name":"Phishing domain: 8b33b9.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/8b33b9.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8b33b9.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T23:51:13Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8b33b9.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--41c57139-3cb4-5767-b901-1c32c38f33f0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-26T15:29:36Z","modified":"2025-12-26T15:29:36Z","name":"Phishing domain: 8b4dfe60.knfdjfhusurje.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating trezor. Report & evidence: https://phishdestroy.io/domain/8b4dfe60.knfdjfhusurje.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8b4dfe60.knfdjfhusurje.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-26T15:29:36Z","labels":["malicious-activity","phishing","brand:trezor"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8b4dfe60.knfdjfhusurje.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eed46383-65d6-5675-a5cd-5701592d0969","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-21T23:51:18Z","modified":"2025-12-21T23:51:18Z","name":"Phishing domain: 8b7500ce.ripsyr.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/8b7500ce.ripsyr.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8b7500ce.ripsyr.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-21T23:51:18Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8b7500ce.ripsyr.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--716821c9-e3b3-5ea2-828c-122b6bc36ba3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-21T15:09:29Z","modified":"2025-12-21T15:09:29Z","name":"Phishing domain: 8b8d49a3.solvee.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/8b8d49a3.solvee.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8b8d49a3.solvee.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-21T15:09:29Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8b8d49a3.solvee.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--25366ad9-7776-5136-9ee9-53486474e78a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-08T16:05:47Z","modified":"2026-06-08T16:05:47Z","name":"Phishing domain: 8base.cfd","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/8base.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8base.cfd']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-08T16:05:47Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8base.cfd"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--985e6bac-3c71-5fe7-b98a-58d24a5bf32e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-11T18:36:50Z","modified":"2026-08-11T18:36:50Z","name":"Phishing domain: 8be6e8.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/8be6e8.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8be6e8.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-11T18:36:50Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8be6e8.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f35d8f33-c557-5214-914f-88c8f440f63e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-20T14:12:16Z","modified":"2026-06-20T14:12:16Z","name":"Phishing domain: 8bezt5.cn","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/8bezt5.cn","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8bezt5.cn']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-20T14:12:16Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8bezt5.cn"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2f174c2-108a-5190-8622-01197e59f007","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-03T09:35:15Z","modified":"2026-02-03T09:35:15Z","name":"Phishing domain: 8bitwin.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/8bitwin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8bitwin.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-03T09:35:15Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8bitwin.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--615f88a0-01c3-559c-892e-90e4b09bc843","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-27T16:20:51Z","modified":"2026-03-27T16:20:51Z","name":"Phishing domain: 8casinobrazil.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating apple. Report & evidence: https://phishdestroy.io/domain/8casinobrazil.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8casinobrazil.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-27T16:20:51Z","labels":["malicious-activity","phishing","brand:apple"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8casinobrazil.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cee8309-0769-521b-ae84-3c9777def3bb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-11T18:11:44Z","modified":"2026-08-11T18:11:44Z","name":"Phishing domain: 8d073d.winnicart.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/8d073d.winnicart.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8d073d.winnicart.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-11T18:11:44Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8d073d.winnicart.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2c7ddcd-4cb9-5114-b0d1-54b159df5585","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:40Z","modified":"2026-02-26T23:19:40Z","name":"Phishing domain: 8d3f4d59-kdrama-mood-based-re-frontend.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/8d3f4d59-kdrama-mood-based-re-frontend.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8d3f4d59-kdrama-mood-based-re-frontend.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:40Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8d3f4d59-kdrama-mood-based-re-frontend.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc8ba4fa-f406-506e-8275-ee67d014f09c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-16T16:31:02Z","modified":"2026-02-16T16:31:02Z","name":"Phishing domain: 8d86cdef88.nxcli.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/8d86cdef88.nxcli.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8d86cdef88.nxcli.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-16T16:31:02Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8d86cdef88.nxcli.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcb91633-9b0f-54f4-92ed-4119319a8602","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T01:57:56Z","modified":"2026-02-13T01:57:56Z","name":"Phishing domain: 8d8ypzcydx35.icu","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/8d8ypzcydx35.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8d8ypzcydx35.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T01:57:56Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8d8ypzcydx35.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3d50136-0636-5b83-891f-2031ee21d2ff","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:59Z","modified":"2026-02-26T23:22:59Z","name":"Phishing domain: 8dfc8c79.connewal-330.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Sui. Report & evidence: https://phishdestroy.io/domain/8dfc8c79.connewal-330.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8dfc8c79.connewal-330.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:59Z","labels":["malicious-activity","phishing","brand:sui"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8dfc8c79.connewal-330.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f238c28-6b77-5672-8af7-f1ed889c8094","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-13T21:04:31Z","modified":"2026-08-13T21:04:31Z","name":"Phishing domain: 8e256f.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/8e256f.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8e256f.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-13T21:04:31Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8e256f.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd0d986b-735f-5787-b9c2-46c3813cf849","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-14T01:29:28Z","modified":"2025-12-14T01:29:28Z","name":"Phishing domain: 8eff59ce.raydium-perp-v2-inner.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Raydium. Report & evidence: https://phishdestroy.io/domain/8eff59ce.raydium-perp-v2-inner.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8eff59ce.raydium-perp-v2-inner.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-14T01:29:28Z","labels":["malicious-activity","phishing","brand:raydium"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8eff59ce.raydium-perp-v2-inner.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--112bb55e-208a-5da7-83f7-31dda8d2a709","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:44Z","modified":"2026-02-26T23:22:44Z","name":"Phishing domain: 8eth.eu","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/8eth.eu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8eth.eu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:44Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8eth.eu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c22e8e6f-219f-5543-87b8-19c5cc07b66a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-09T20:41:45Z","modified":"2025-11-09T20:41:45Z","name":"Phishing domain: 8eth.top","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/8eth.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8eth.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-09T20:41:45Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8eth.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1059091-5453-574d-9fac-07d787758d00","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:32Z","modified":"2026-02-26T23:19:32Z","name":"Phishing domain: 8f09fc01-fa60-44dd-940c-e03d331976eb-solana-dashboard.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/8f09fc01-fa60-44dd-940c-e03d331976eb-solana-dashboard.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8f09fc01-fa60-44dd-940c-e03d331976eb-solana-dashboard.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:32Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8f09fc01-fa60-44dd-940c-e03d331976eb-solana-dashboard.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--df6580c1-52f2-5de3-8c9f-aa295fa225ab","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-11T18:23:12Z","modified":"2026-08-11T18:23:12Z","name":"Phishing domain: 8f93ee.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/8f93ee.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8f93ee.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-11T18:23:12Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8f93ee.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--acf47ac1-ae6c-54e8-90c8-574fb2ce1a29","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-11T18:27:37Z","modified":"2026-08-11T18:27:37Z","name":"Phishing domain: 8feed4.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/8feed4.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8feed4.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-11T18:27:37Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8feed4.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a151243-13e7-592f-b0ac-0dfd0ce011b0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-26T02:45:30Z","modified":"2026-01-26T02:45:30Z","name":"Phishing domain: 8fi9dvoujgws.world","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/8fi9dvoujgws.world","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8fi9dvoujgws.world']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-26T02:45:30Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8fi9dvoujgws.world"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--096381cb-bf35-5b96-97d3-0818f88dd9dd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-03T08:25:56Z","modified":"2026-07-03T08:25:56Z","name":"Phishing domain: 8g93p.stick.ws","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/8g93p.stick.ws","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8g93p.stick.ws']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-03T08:25:56Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8g93p.stick.ws"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d97e893-4c5f-505d-bc3e-6f06a7cc3506","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-25T06:39:47Z","modified":"2026-06-25T06:39:47Z","name":"Phishing domain: 8ifa.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/8ifa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8ifa.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-25T06:39:47Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8ifa.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--26c2f2bb-52fe-5191-b891-9f3e89630f6d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 8j599.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/8j599.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8j599.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8j599.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab57da22-be58-5941-8c79-6c08ad92f21b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-13T14:16:16Z","modified":"2026-06-13T14:16:16Z","name":"Phishing domain: 8krab.at","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/8krab.at","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8krab.at']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-13T14:16:16Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8krab.at"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--83478e03-ed7c-5f44-8616-e592f13c15b1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:10Z","modified":"2026-02-26T23:20:10Z","name":"Phishing domain: 8l8.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/8l8.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8l8.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:10Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8l8.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d80d47a0-8580-55f7-986f-5b278eb9aeca","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-21T16:47:51Z","modified":"2026-04-21T16:47:51Z","name":"Phishing domain: 8lend-en.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/8lend-en.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8lend-en.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-21T16:47:51Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8lend-en.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--417c9ebc-5d98-5760-a58c-131ba96f47c7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T09:49:10Z","modified":"2026-02-13T09:49:10Z","name":"Phishing domain: 8lends.pro","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/8lends.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8lends.pro']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T09:49:10Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8lends.pro"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--67d562c4-cdc7-5280-a7a9-a48160e8a429","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T09:49:20Z","modified":"2026-02-13T09:49:20Z","name":"Phishing domain: 8lendshub.pro","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/8lendshub.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8lendshub.pro']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T09:49:20Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8lendshub.pro"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a6ebf43-8fa9-5baf-b4ae-a3b59ec479e8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-29T13:11:18Z","modified":"2025-08-29T13:11:18Z","name":"Phishing domain: 8linkbones.icu","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating gmail. Report & evidence: https://phishdestroy.io/domain/8linkbones.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8linkbones.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-29T13:11:18Z","labels":["malicious-activity","phishing","brand:gmail"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8linkbones.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1394dec5-137c-5bc1-9cd8-b0cba66f9224","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-28T00:09:57Z","modified":"2025-11-28T00:09:57Z","name":"Phishing domain: 8matic.krakenagent.space","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Kraken. Report & evidence: https://phishdestroy.io/domain/8matic.krakenagent.space","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8matic.krakenagent.space']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-28T00:09:57Z","labels":["malicious-activity","phishing","brand:kraken"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8matic.krakenagent.space"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--72469d35-02a6-5f83-9355-6c47182e49c5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-22T20:21:00Z","modified":"2026-07-22T20:21:00Z","name":"Phishing domain: 8new.shop","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/8new.shop","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8new.shop']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-22T20:21:00Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8new.shop"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9afd3e3d-f5af-5d88-bbc3-9a617476ee6d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-27T18:07:11Z","modified":"2026-01-27T18:07:11Z","name":"Phishing domain: 8nnj4.weebly.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/8nnj4.weebly.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8nnj4.weebly.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-27T18:07:11Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8nnj4.weebly.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1412624b-b877-556e-8ecf-e179828b96a5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-23T03:09:45Z","modified":"2025-10-23T03:09:45Z","name":"Phishing domain: 8onsolana.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/8onsolana.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8onsolana.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-23T03:09:45Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8onsolana.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa0089fc-5356-58a7-b4e0-4a70190ec783","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-06T23:54:18Z","modified":"2026-02-06T23:54:18Z","name":"Phishing domain: 8qdqsk.356739.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating amazon. Report & evidence: https://phishdestroy.io/domain/8qdqsk.356739.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8qdqsk.356739.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-06T23:54:18Z","labels":["malicious-activity","phishing","brand:amazon"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8qdqsk.356739.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e57582cd-1fb7-525e-ad0d-190178781eee","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:23Z","modified":"2026-02-26T23:19:23Z","name":"Phishing domain: 8qyslgi.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bitcoin. Report & evidence: https://phishdestroy.io/domain/8qyslgi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8qyslgi.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:23Z","labels":["malicious-activity","phishing","brand:bitcoin"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8qyslgi.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6fd51db-ba7e-596b-9ae7-5493e3758fb1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-21T02:10:13Z","modified":"2026-07-21T02:10:13Z","name":"Phishing domain: 8s.non-steam.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Steam. Report & evidence: https://phishdestroy.io/domain/8s.non-steam.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8s.non-steam.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-21T02:10:13Z","labels":["malicious-activity","phishing","brand:steam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8s.non-steam.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8ab68ba-1485-5f06-b81f-70f6dfb29aba","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-28T18:07:47Z","modified":"2026-07-28T18:07:47Z","name":"Phishing domain: 8s0o5f-52r3by-hxhr-e600hl.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/8s0o5f-52r3by-hxhr-e600hl.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8s0o5f-52r3by-hxhr-e600hl.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-28T18:07:47Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8s0o5f-52r3by-hxhr-e600hl.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d8a13f3-b4eb-51b2-b51b-6a34a9b4d132","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-28T15:28:46Z","modified":"2026-06-28T15:28:46Z","name":"Phishing domain: 8slong.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/8slong.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8slong.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-28T15:28:46Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8slong.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c8dc314-be99-53c9-a1e5-47183a307a15","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-28T15:35:08Z","modified":"2026-06-28T15:35:08Z","name":"Phishing domain: 8sloni.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/8sloni.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8sloni.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-28T15:35:08Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8sloni.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2d33510-f151-5236-9531-e11896ac57c1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-20T12:53:23Z","modified":"2026-07-20T12:53:23Z","name":"Phishing domain: 8tzd4lvkbcj339cy.aht.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating microsoft. Report & evidence: https://phishdestroy.io/domain/8tzd4lvkbcj339cy.aht.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8tzd4lvkbcj339cy.aht.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-20T12:53:23Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8tzd4lvkbcj339cy.aht.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--615779f0-bdeb-5b10-8d73-c9e74f93db7c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-17T17:18:47Z","modified":"2026-07-17T17:18:47Z","name":"Phishing domain: 8uup.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/8uup.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8uup.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-17T17:18:47Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8uup.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bd45844-52e5-54ec-ad96-9082bf665b2c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-31T16:23:12Z","modified":"2026-01-31T16:23:12Z","name":"Phishing domain: 8web.whatsapwcsx.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating whatsapp. Report & evidence: https://phishdestroy.io/domain/8web.whatsapwcsx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8web.whatsapwcsx.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-31T16:23:12Z","labels":["malicious-activity","phishing","brand:whatsapp"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8web.whatsapwcsx.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0625add-8111-52b1-8ef9-4969f854615f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-09T06:07:40Z","modified":"2026-02-09T06:07:40Z","name":"Phishing domain: 8xbet.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/8xbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8xbet.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-09T06:07:40Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8xbet.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8523788-297b-525a-9131-06ae459c374c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-17T02:18:09Z","modified":"2026-06-17T02:18:09Z","name":"Phishing domain: 8yaz-k3zj-br05.cebsgroupsreceivables-ar-caesars-com-s-account.workers.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/8yaz-k3zj-br05.cebsgroupsreceivables-ar-caesars-com-s-account.workers.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '8yaz-k3zj-br05.cebsgroupsreceivables-ar-caesars-com-s-account.workers.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-17T02:18:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/8yaz-k3zj-br05.cebsgroupsreceivables-ar-caesars-com-s-account.workers.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac157f79-1b22-55a0-a420-771ee47eb297","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-02T14:54:37Z","modified":"2026-08-02T14:54:37Z","name":"Phishing domain: 9-160-165-249.cprapid.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating dpd. Report & evidence: https://phishdestroy.io/domain/9-160-165-249.cprapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9-160-165-249.cprapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-02T14:54:37Z","labels":["malicious-activity","phishing","brand:dpd"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9-160-165-249.cprapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4aa862d-3141-5cc1-ad7c-30403d7cfe31","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-08T01:29:13Z","modified":"2026-08-08T01:29:13Z","name":"Phishing domain: 9-google.com.cn","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating gemini. Report & evidence: https://phishdestroy.io/domain/9-google.com.cn","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9-google.com.cn']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-08T01:29:13Z","labels":["malicious-activity","phishing","brand:gemini"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9-google.com.cn"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c6a96d2-dec0-5b72-88e4-8b5736588064","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 900956165tyj.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/900956165tyj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '900956165tyj.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/900956165tyj.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e671d54-ff00-5011-8515-0fe1412f9e79","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T18:40:07Z","modified":"2026-08-09T18:40:07Z","name":"Phishing domain: 900green.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/900green.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '900green.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T18:40:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/900green.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e281106-f9bb-53e0-bd3e-73d0ae29b907","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-29T15:32:08Z","modified":"2026-01-29T15:32:08Z","name":"Phishing domain: 90176.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/90176.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '90176.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-29T15:32:08Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/90176.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a587d395-f71f-54f1-aabf-361f00e658be","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-03T09:54:11Z","modified":"2025-09-03T09:54:11Z","name":"Phishing domain: 90197.tax","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/90197.tax","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '90197.tax']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-03T09:54:11Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/90197.tax"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6bf029b-77f4-5b3d-a20a-daacae6214c4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-19T10:00:42Z","modified":"2025-11-19T10:00:42Z","name":"Phishing domain: 901c705a-7072-40b9-b144-7e9b73aca18e-00-37vacz5fs42ob.riker.replit.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/901c705a-7072-40b9-b144-7e9b73aca18e-00-37vacz5fs42ob.riker.replit.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '901c705a-7072-40b9-b144-7e9b73aca18e-00-37vacz5fs42ob.riker.replit.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-19T10:00:42Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/901c705a-7072-40b9-b144-7e9b73aca18e-00-37vacz5fs42ob.riker.replit.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--96de64f2-8f6c-56e4-aaec-9a37dca54d84","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-07T03:13:02Z","modified":"2026-03-07T03:13:02Z","name":"Phishing domain: 90222.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/90222.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '90222.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-07T03:13:02Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/90222.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebc84b9f-0f4a-5ae1-95d6-64213c3852ae","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:22Z","modified":"2026-02-26T23:20:22Z","name":"Phishing domain: 90261.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/90261.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '90261.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:22Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/90261.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbbf448a-020c-5f07-8517-fd286d33dfce","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-30T11:03:27Z","modified":"2025-10-30T11:03:27Z","name":"Phishing domain: 90265xx65.weebly.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/90265xx65.weebly.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '90265xx65.weebly.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-30T11:03:27Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/90265xx65.weebly.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--162f05f3-3f51-547f-8774-47bc32079893","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-19T15:05:55Z","modified":"2026-02-19T15:05:55Z","name":"Phishing domain: 903453coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/903453coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '903453coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-19T15:05:55Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/903453coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1cb9c5b-dc86-54c9-a12e-8c66caa4d6c4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 90394401---61652.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/90394401---61652.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '90394401---61652.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/90394401---61652.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d971173d-c027-58d3-be77-9ef0711dc984","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:00Z","modified":"2026-02-26T23:24:00Z","name":"Phishing domain: 90418.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/90418.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '90418.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:00Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/90418.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9d0e263-90a0-50cd-80fd-db08c830795c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-27T13:52:12Z","modified":"2026-01-27T13:52:12Z","name":"Phishing domain: 90420.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/90420.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '90420.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-27T13:52:12Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/90420.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bea01dfb-26c2-5ccd-a505-61f967da97d3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-26T15:35:08Z","modified":"2026-01-26T15:35:08Z","name":"Phishing domain: 90424.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/90424.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '90424.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-26T15:35:08Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/90424.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--56aaafaf-cc38-513f-9913-217685c2ff7a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-04T14:13:22Z","modified":"2026-07-04T14:13:22Z","name":"Phishing domain: 90426.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/90426.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '90426.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-04T14:13:22Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/90426.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--45d3c5d4-cca4-5e78-8547-323cf06e1333","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-26T03:29:16Z","modified":"2026-01-26T03:29:16Z","name":"Phishing domain: 90428.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/90428.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '90428.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-26T03:29:16Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/90428.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c88d81f-4c3f-5cdd-9850-1438e4490fe0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-26T03:20:39Z","modified":"2026-01-26T03:20:39Z","name":"Phishing domain: 90434.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/90434.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '90434.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-26T03:20:39Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/90434.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--33275c02-9d9a-5047-ac52-1e3beda34e23","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-26T03:20:15Z","modified":"2026-01-26T03:20:15Z","name":"Phishing domain: 90437.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/90437.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '90437.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-26T03:20:15Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/90437.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--02d2ea8f-a803-587d-9a8c-7822c1b76cc9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-26T03:18:39Z","modified":"2026-01-26T03:18:39Z","name":"Phishing domain: 90442.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/90442.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '90442.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-26T03:18:39Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/90442.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9a3a916-5a63-506c-8ab9-064a0bbb77ca","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-26T03:18:02Z","modified":"2026-01-26T03:18:02Z","name":"Phishing domain: 90443.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/90443.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '90443.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-26T03:18:02Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/90443.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3853540-f25c-589a-b561-2d108b4e951f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-25T15:55:19Z","modified":"2026-01-25T15:55:19Z","name":"Phishing domain: 90462.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/90462.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '90462.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-25T15:55:19Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/90462.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--38d9f638-361c-5d70-9846-43c7df2c8acb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-02T16:38:36Z","modified":"2026-03-02T16:38:36Z","name":"Phishing domain: 905281coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/905281coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '905281coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-02T16:38:36Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/905281coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7498427f-fad4-54cf-b4e9-650bbd2c0f7d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-23T15:34:13Z","modified":"2026-01-23T15:34:13Z","name":"Phishing domain: 90561.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/90561.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '90561.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-23T15:34:13Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/90561.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--546debf4-3494-5867-889d-fa3c71e54efc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-23T15:31:26Z","modified":"2026-01-23T15:31:26Z","name":"Phishing domain: 90571.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/90571.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '90571.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-23T15:31:26Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/90571.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cd8cb31-2b3b-5006-9c9f-fa4a5fa70c81","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-12T03:32:00Z","modified":"2026-08-12T03:32:00Z","name":"Phishing domain: 906b94.arcadejafet.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/906b94.arcadejafet.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '906b94.arcadejafet.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-12T03:32:00Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/906b94.arcadejafet.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2945105-d1b4-5e8c-8f83-9f18e213204e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-22T03:33:53Z","modified":"2026-01-22T03:33:53Z","name":"Phishing domain: 90811.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/90811.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '90811.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-22T03:33:53Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/90811.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--592bd6f6-d44e-56fe-9d52-088896af56bb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 9081951---6165.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/9081951---6165.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9081951---6165.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9081951---6165.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9fce526-4e3e-5cc3-8e1e-2879f910e9fd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-22T03:39:32Z","modified":"2026-01-22T03:39:32Z","name":"Phishing domain: 90831.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/90831.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '90831.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-22T03:39:32Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/90831.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a25bebb8-b834-54da-8191-0b9c83297657","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-23T15:30:21Z","modified":"2026-01-23T15:30:21Z","name":"Phishing domain: 90844.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/90844.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '90844.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-23T15:30:21Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/90844.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7860b95e-e223-5471-8627-9c9f68791e54","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-29T15:34:22Z","modified":"2026-01-29T15:34:22Z","name":"Phishing domain: 9085.tanaragerlach.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/9085.tanaragerlach.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9085.tanaragerlach.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-29T15:34:22Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9085.tanaragerlach.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6e8c80e-62b3-5a96-aef4-b2a3900d344e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-18T14:41:11Z","modified":"2026-06-18T14:41:11Z","name":"Phishing domain: 909wh.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/909wh.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '909wh.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-18T14:41:11Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/909wh.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aac8d778-19c0-55bc-b548-53ea82fe2fe2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-20T22:02:24Z","modified":"2025-10-20T22:02:24Z","name":"Phishing domain: 90aa014152804aa1.raydiumpro-web.shop","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Raydium. Report & evidence: https://phishdestroy.io/domain/90aa014152804aa1.raydiumpro-web.shop","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '90aa014152804aa1.raydiumpro-web.shop']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-20T22:02:24Z","labels":["malicious-activity","phishing","brand:raydium"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/90aa014152804aa1.raydiumpro-web.shop"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--59ae76ad-2657-5417-b6f4-ae3950531c4c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-15T03:53:42Z","modified":"2026-02-15T03:53:42Z","name":"Phishing domain: 90biem.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/90biem.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '90biem.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-15T03:53:42Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/90biem.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2e1feac-0d80-5e40-a4a9-1a9c92a3de4b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-12T16:30:02Z","modified":"2026-03-12T16:30:02Z","name":"Phishing domain: 90ij9m786fy543yhkonu64s.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/90ij9m786fy543yhkonu64s.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '90ij9m786fy543yhkonu64s.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-12T16:30:02Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/90ij9m786fy543yhkonu64s.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5d14e60-eec3-5b5e-8eb7-e8bcf9105590","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-28T18:07:42Z","modified":"2026-07-28T18:07:42Z","name":"Phishing domain: 90yq-laffo-o0hi-sdbre-2sc1g5.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/90yq-laffo-o0hi-sdbre-2sc1g5.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '90yq-laffo-o0hi-sdbre-2sc1g5.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-28T18:07:42Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/90yq-laffo-o0hi-sdbre-2sc1g5.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba19a3fa-a16e-5231-98e3-29d304216766","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-16T19:00:09Z","modified":"2026-03-16T19:00:09Z","name":"Phishing domain: 911idt6d-wildberries.peppemultiverse.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/911idt6d-wildberries.peppemultiverse.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '911idt6d-wildberries.peppemultiverse.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-16T19:00:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/911idt6d-wildberries.peppemultiverse.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--94c0cdbe-390a-569e-a87a-ff5a2dfb00fe","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-29T01:19:46Z","modified":"2025-08-29T01:19:46Z","name":"Phishing domain: 911trustledger.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/911trustledger.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '911trustledger.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-29T01:19:46Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/911trustledger.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7a9f84a-4674-5481-a2cb-f8e599446afc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-29T01:19:54Z","modified":"2025-08-29T01:19:54Z","name":"Phishing domain: 911trustledger.store","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/911trustledger.store","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '911trustledger.store']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-29T01:19:54Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/911trustledger.store"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdfd672b-92dd-57ad-94fc-708022592975","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 91260003.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/91260003.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '91260003.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/91260003.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--655c6e7d-1bae-5301-9603-0f5e63d78d00","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 91260007.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/91260007.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '91260007.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/91260007.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cbf2f57-fe53-59c2-b4da-dd8a275e623f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 91260505.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/91260505.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '91260505.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/91260505.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--de3bc574-9d12-5c83-9faf-a7dcb1341147","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 91261010.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/91261010.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '91261010.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/91261010.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--46892b8c-ed72-5d2d-af1c-17be1eef715b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 91261515.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/91261515.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '91261515.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/91261515.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--88fc9e42-2c94-5b38-9b42-b84eff57a390","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 91263330.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/91263330.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '91263330.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/91263330.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--afd74ebf-3c2d-5629-8320-251906593a0f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 91263332.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/91263332.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '91263332.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/91263332.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6b67e24-8a3b-5782-9df8-111176d35f38","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 91264343.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/91264343.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '91264343.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/91264343.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b25c7d05-0a4f-5a85-8ec7-0720535baf70","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 91267070.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/91267070.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '91267070.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/91267070.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--145cb990-c1b5-50bb-911b-114411ab6996","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 9126rrr.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/9126rrr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9126rrr.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9126rrr.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a8e8865-5ef5-5ecf-9f44-410b630c31ec","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-15T12:35:20Z","modified":"2025-11-15T12:35:20Z","name":"Phishing domain: 913789161621147280198065376576ipjpsvqgzrmxyey.adelon.com.br","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating outlook. Report & evidence: https://phishdestroy.io/domain/913789161621147280198065376576ipjpsvqgzrmxyey.adelon.com.br","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '913789161621147280198065376576ipjpsvqgzrmxyey.adelon.com.br']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-15T12:35:20Z","labels":["malicious-activity","phishing","brand:outlook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/913789161621147280198065376576ipjpsvqgzrmxyey.adelon.com.br"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5abc134-4be7-5424-b191-480eaef17c07","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 91590---12342893.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/91590---12342893.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '91590---12342893.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/91590---12342893.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--13c60023-5e6d-5140-a767-f69e1fd5cd51","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 91597a.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/91597a.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '91597a.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/91597a.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fc460a7-2146-5ff7-ace6-b047d1e11a17","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 91597b.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/91597b.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '91597b.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/91597b.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7616a2d-110f-57b9-acd4-fdea84232d22","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 91597c.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/91597c.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '91597c.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/91597c.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b5327b9-6d66-5b52-8e78-cf1f93d11b11","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 91597g.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/91597g.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '91597g.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/91597g.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0a78b96-a62c-5d2e-b31d-ad9d45d53f3c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 91597m.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/91597m.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '91597m.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/91597m.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9f5c74d-0037-5569-abad-6eccfd20d156","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 91597pp.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/91597pp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '91597pp.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/91597pp.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d2b8230-bf73-5137-a880-d49e81c5e1f2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 91597s.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/91597s.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '91597s.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/91597s.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd734959-5a3d-5c1e-8ced-1e5e7c2eeb45","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 91597ss.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/91597ss.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '91597ss.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/91597ss.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bef35c22-7fb4-54aa-9275-be97f801b2eb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 91597t.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/91597t.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '91597t.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/91597t.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f30b6219-943d-55a2-beba-2a77355830e6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 91597uu.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/91597uu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '91597uu.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/91597uu.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f164e5c-e076-544a-8472-d5ed18645962","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 91597v.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/91597v.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '91597v.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/91597v.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e3bafcd-fbb4-5226-8a6d-880401320e93","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 91597vv.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/91597vv.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '91597vv.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/91597vv.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdd7bb26-0a0d-57e5-975f-1d8b0fac559a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 91597ww.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/91597ww.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '91597ww.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/91597ww.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0acab44-d8bb-5d15-9248-f6cf93864132","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 91597y.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/91597y.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '91597y.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/91597y.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--81efac35-58e9-58e8-af3e-21f3906d5d3f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 91597yy.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/91597yy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '91597yy.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/91597yy.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--267e05f6-e9cc-5080-bfa7-c10fac1012b2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 91597z.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/91597z.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '91597z.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/91597z.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5ec462e-9dcb-5504-ba28-41cbcecd44b7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 91599bb.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/91599bb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '91599bb.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/91599bb.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8686b9be-5f7c-5ddb-8dce-a5e8a7fac393","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:45:14Z","modified":"2026-07-27T04:45:14Z","name":"Phishing domain: 91599cc.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/91599cc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '91599cc.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:45:14Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/91599cc.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--531c2219-4f34-509b-8c26-be0c1fc4ec18","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 91599ee.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/91599ee.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '91599ee.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/91599ee.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f041e815-5d4d-5748-a6e5-1ad9d1efccfa","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 91599ff.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/91599ff.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '91599ff.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/91599ff.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c80cfc0-9c8c-545d-82ad-c49782b78e09","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 91599rr.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/91599rr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '91599rr.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/91599rr.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b410d88c-dd15-5bd5-8443-8395fb57db76","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 91599ww.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/91599ww.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '91599ww.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/91599ww.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--865f2459-bab9-508f-90d5-646f42391777","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 91599yy.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/91599yy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '91599yy.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/91599yy.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc087298-f1de-542e-ba1b-066636fd989b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:17Z","modified":"2026-07-27T06:02:17Z","name":"Phishing domain: 9159k.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/9159k.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9159k.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9159k.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f56e75d-2779-5518-8d4f-f5ca43585666","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-26T12:14:39Z","modified":"2025-12-26T12:14:39Z","name":"Phishing domain: 916319coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/916319coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '916319coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-26T12:14:39Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/916319coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdb7cc89-7cb2-5968-8179-7a4e40709615","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-08T00:31:39Z","modified":"2025-12-08T00:31:39Z","name":"Phishing domain: 91715.business-atice-pagetick8723.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/91715.business-atice-pagetick8723.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '91715.business-atice-pagetick8723.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-08T00:31:39Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/91715.business-atice-pagetick8723.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--552e7966-7827-569b-a477-e79b782390e8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: 91777.in","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/91777.in","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '91777.in']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/91777.in"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa54ebb6-5a8f-522b-a45b-ac2cfc6f91c6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: 917spinania.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/917spinania.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '917spinania.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/917spinania.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--83d0fc51-90ff-5adf-81d0-58333caf2bd0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:06Z","modified":"2026-02-26T23:23:06Z","name":"Phishing domain: 918222-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/918222-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '918222-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:06Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/918222-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4e9dc6d-2e10-564b-b359-76b87c70527c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-18T02:36:42Z","modified":"2025-12-18T02:36:42Z","name":"Phishing domain: 918382-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/918382-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '918382-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-18T02:36:42Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/918382-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a696f7d1-e842-5675-b9f0-0c7cbe84b033","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-01T13:06:56Z","modified":"2025-11-01T13:06:56Z","name":"Phishing domain: 919xpj.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/919xpj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '919xpj.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-01T13:06:56Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/919xpj.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0d9562d-a53a-5003-824b-5a0a99793227","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: 91jaiho.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/91jaiho.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '91jaiho.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/91jaiho.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--10244b0d-272e-5590-b131-e84457a99692","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-19T15:05:54Z","modified":"2026-02-19T15:05:54Z","name":"Phishing domain: 9230541-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/9230541-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9230541-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-19T15:05:54Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9230541-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--194810a1-145e-571c-8e2f-3cc09fee9269","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-20T16:31:55Z","modified":"2026-02-20T16:31:55Z","name":"Phishing domain: 92342-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/92342-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '92342-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-20T16:31:55Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/92342-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--492d27e6-9f9f-5b9f-80f6-5c92b514c384","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-13T20:23:03Z","modified":"2026-08-13T20:23:03Z","name":"Phishing domain: 923468coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/923468coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '923468coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-13T20:23:03Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/923468coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e00c354-4575-51b7-a5bb-a31af3fb4d8f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-09T14:08:57Z","modified":"2026-07-09T14:08:57Z","name":"Phishing domain: 923826-gemini.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Gemini. Report & evidence: https://phishdestroy.io/domain/923826-gemini.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '923826-gemini.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-09T14:08:57Z","labels":["malicious-activity","phishing","brand:gemini"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/923826-gemini.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--99e7add1-1d74-50ea-a537-27d829fcb137","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-03T09:53:24Z","modified":"2025-09-03T09:53:24Z","name":"Phishing domain: 92493.my","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/92493.my","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '92493.my']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-03T09:53:24Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/92493.my"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c37250d-75ed-5512-a566-6f194b380262","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-21T11:57:20Z","modified":"2026-04-21T11:57:20Z","name":"Phishing domain: 925651-google.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/925651-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '925651-google.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-21T11:57:20Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/925651-google.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fb95ead-cc93-5a55-a83f-d61c042b8b2c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-07T01:28:20Z","modified":"2026-06-07T01:28:20Z","name":"Phishing domain: 9268365.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/9268365.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9268365.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-07T01:28:20Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9268365.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d03b5877-bb18-5165-a259-6048b86e8495","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-21T10:12:22Z","modified":"2026-03-21T10:12:22Z","name":"Phishing domain: 927163icloud.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Apple. Report & evidence: https://phishdestroy.io/domain/927163icloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '927163icloud.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-21T10:12:22Z","labels":["malicious-activity","phishing","brand:apple"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/927163icloud.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e13759da-6607-546d-9748-84421d6224f3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-30T07:43:21Z","modified":"2025-12-30T07:43:21Z","name":"Phishing domain: 9275b753.kjvhvuhutvv.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/9275b753.kjvhvuhutvv.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9275b753.kjvhvuhutvv.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-30T07:43:21Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9275b753.kjvhvuhutvv.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f50be7c8-3a2d-535f-b667-46e93da65620","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T17:29:08Z","modified":"2026-02-26T17:29:08Z","name":"Phishing domain: 928415coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/928415coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '928415coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T17:29:08Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/928415coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2324788-d642-5555-bc04-adb38106f03e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-10T10:47:06Z","modified":"2026-07-10T10:47:06Z","name":"Phishing domain: 928525coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/928525coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '928525coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-10T10:47:06Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/928525coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f949805-2c25-5b2b-8d4f-9e09c8beb357","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-26T00:13:53Z","modified":"2025-11-26T00:13:53Z","name":"Phishing domain: 92a2d4d0-14e5-4abd-ac16-054138276e0f-00-1d206ycs28hb3.kirk.replit.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/92a2d4d0-14e5-4abd-ac16-054138276e0f-00-1d206ycs28hb3.kirk.replit.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '92a2d4d0-14e5-4abd-ac16-054138276e0f-00-1d206ycs28hb3.kirk.replit.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-26T00:13:53Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/92a2d4d0-14e5-4abd-ac16-054138276e0f-00-1d206ycs28hb3.kirk.replit.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1c33f03-c58f-5d0b-b4d7-20631ac6a574","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-11T18:44:07Z","modified":"2026-08-11T18:44:07Z","name":"Phishing domain: 930898.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/930898.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '930898.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-11T18:44:07Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/930898.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--69398cb9-24c7-5296-bf26-312efa898978","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: 930952.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/930952.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '930952.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/930952.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--daf72e56-62ee-5eb8-ad9f-a3997a6310ef","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-14T20:22:19Z","modified":"2026-02-14T20:22:19Z","name":"Phishing domain: 930bahis.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/930bahis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '930bahis.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-14T20:22:19Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/930bahis.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c44f1a1-ef19-5eb7-b7a1-df2ff1784a60","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:10Z","modified":"2026-02-26T23:22:10Z","name":"Phishing domain: 93255coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/93255coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '93255coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:10Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/93255coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--01f6b794-8dc7-52f2-9af0-cc22665c940b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-02T16:07:17Z","modified":"2026-03-02T16:07:17Z","name":"Phishing domain: 932847-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/932847-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '932847-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-02T16:07:17Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/932847-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--faaad5d4-ce5f-59b7-84fe-5a57710bc8f6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-15T15:26:05Z","modified":"2025-10-15T15:26:05Z","name":"Phishing domain: 93489521-ba8b-4ab5-92ea-bd6c2196dfca-00-188x8fuf5za1d.picard.replit.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Produbanco. Report & evidence: https://phishdestroy.io/domain/93489521-ba8b-4ab5-92ea-bd6c2196dfca-00-188x8fuf5za1d.picard.replit.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '93489521-ba8b-4ab5-92ea-bd6c2196dfca-00-188x8fuf5za1d.picard.replit.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-15T15:26:05Z","labels":["malicious-activity","phishing","brand:produbanco"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/93489521-ba8b-4ab5-92ea-bd6c2196dfca-00-188x8fuf5za1d.picard.replit.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a67156e-2d17-5936-932c-fb80b40ff9f2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-27T08:21:53Z","modified":"2026-02-27T08:21:53Z","name":"Phishing domain: 934kavbet.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/934kavbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '934kavbet.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-27T08:21:53Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/934kavbet.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b8c97eb-85b7-5cb0-9f6c-e2d3d5e84c69","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-23T02:27:57Z","modified":"2026-07-23T02:27:57Z","name":"Phishing domain: 93516365756.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/93516365756.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '93516365756.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-23T02:27:57Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/93516365756.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--960a56cc-11c6-5ae5-954e-b83c477e4dca","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:51Z","modified":"2026-02-26T23:23:51Z","name":"Phishing domain: 9374.ee","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/9374.ee","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9374.ee']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:51Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9374.ee"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--17dd8842-d738-5a8b-ad05-62a0562b8967","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-12T03:11:52Z","modified":"2026-08-12T03:11:52Z","name":"Phishing domain: 938262-gemini.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Gemini. Report & evidence: https://phishdestroy.io/domain/938262-gemini.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '938262-gemini.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-12T03:11:52Z","labels":["malicious-activity","phishing","brand:gemini"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/938262-gemini.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e87a1ad1-db11-51d1-9f88-f88c718c9534","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:15Z","modified":"2026-02-26T23:21:15Z","name":"Phishing domain: 93e08f01.tdsxg-sdkf549dskfd.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/93e08f01.tdsxg-sdkf549dskfd.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '93e08f01.tdsxg-sdkf549dskfd.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:15Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/93e08f01.tdsxg-sdkf549dskfd.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8c60839-3c8a-52a5-94e9-aad92138f57a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-17T08:13:36Z","modified":"2025-09-17T08:13:36Z","name":"Phishing domain: 93prediction.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating base. Report & evidence: https://phishdestroy.io/domain/93prediction.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '93prediction.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-17T08:13:36Z","labels":["malicious-activity","phishing","brand:base"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/93prediction.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--15522278-b07f-5aec-8d69-349138929059","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-31T16:33:24Z","modified":"2026-01-31T16:33:24Z","name":"Phishing domain: 93web.whatsapwcou.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating whatsapp. Report & evidence: https://phishdestroy.io/domain/93web.whatsapwcou.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '93web.whatsapwcou.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-31T16:33:24Z","labels":["malicious-activity","phishing","brand:whatsapp"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/93web.whatsapwcou.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4eebdda6-ab30-5bd8-8ce4-f257f34bd606","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T17:31:34Z","modified":"2026-02-26T17:31:34Z","name":"Phishing domain: 942e23fc.mstest.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating binance. Report & evidence: https://phishdestroy.io/domain/942e23fc.mstest.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '942e23fc.mstest.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T17:31:34Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/942e23fc.mstest.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--454ce7ae-8200-51ec-9a0e-697b86f85a6e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-24T03:02:47Z","modified":"2026-03-24T03:02:47Z","name":"Phishing domain: 943.lol","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating discord. Report & evidence: https://phishdestroy.io/domain/943.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '943.lol']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-24T03:02:47Z","labels":["malicious-activity","phishing","brand:discord"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/943.lol"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0d044d0-5809-52ab-97ec-64ab1b1cb10f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T07:02:12Z","modified":"2026-07-27T07:02:12Z","name":"Phishing domain: 943jz.vip","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/943jz.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '943jz.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T07:02:12Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/943jz.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c344e98-6efb-5930-b84f-b8f8b5677280","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-23T18:34:02Z","modified":"2026-02-23T18:34:02Z","name":"Phishing domain: 944bettvole.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/944bettvole.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '944bettvole.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-23T18:34:02Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/944bettvole.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f679dbf8-1cb7-504d-aeb3-3a8be19fafaf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-27T07:56:41Z","modified":"2026-02-27T07:56:41Z","name":"Phishing domain: 944betvolle.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/944betvolle.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '944betvolle.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-27T07:56:41Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/944betvolle.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5bab792-d33f-5175-b31d-c99a32a8a149","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-13T14:26:44Z","modified":"2026-06-13T14:26:44Z","name":"Phishing domain: 946302365756.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/946302365756.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '946302365756.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-13T14:26:44Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/946302365756.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--011aad11-67a1-546d-9d74-7fe0caa9e44b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-25T15:57:44Z","modified":"2026-01-25T15:57:44Z","name":"Phishing domain: 947839-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/947839-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '947839-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-25T15:57:44Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/947839-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--095b784e-8464-5db8-ac05-6db83aa7c7a9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-27T12:49:55Z","modified":"2026-01-27T12:49:55Z","name":"Phishing domain: 9486.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/9486.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9486.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-27T12:49:55Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9486.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--08c34ab7-1237-5bff-be47-c32b62670842","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-14T01:31:28Z","modified":"2025-12-14T01:31:28Z","name":"Phishing domain: 948655coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/948655coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '948655coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-14T01:31:28Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/948655coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--15c9c439-4167-51a5-a076-aadf90616f64","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-01T06:08:11Z","modified":"2026-07-01T06:08:11Z","name":"Phishing domain: 949837crypto.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Crypto.com. Report & evidence: https://phishdestroy.io/domain/949837crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '949837crypto.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-01T06:08:11Z","labels":["malicious-activity","phishing","brand:crypto.com"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/949837crypto.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b06ebd71-de39-5974-b8aa-7be49f2056a0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-08T16:11:32Z","modified":"2026-06-08T16:11:32Z","name":"Phishing domain: 94fbrcapcutpro.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/94fbrcapcutpro.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '94fbrcapcutpro.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-08T16:11:32Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/94fbrcapcutpro.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d4dd737-101f-5ffb-8a17-85f9d7e5c9fd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-11T14:37:55Z","modified":"2025-10-11T14:37:55Z","name":"Phishing domain: 95003005-c0db-4f49-adc4-ec50ceb5bd6c.claim-graphtoken.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/95003005-c0db-4f49-adc4-ec50ceb5bd6c.claim-graphtoken.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '95003005-c0db-4f49-adc4-ec50ceb5bd6c.claim-graphtoken.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-11T14:37:55Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/95003005-c0db-4f49-adc4-ec50ceb5bd6c.claim-graphtoken.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c9222ed-f476-595e-ac72-46b7182bab8a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-30T19:38:34Z","modified":"2026-06-30T19:38:34Z","name":"Phishing domain: 9500yh.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/9500yh.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9500yh.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-30T19:38:34Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9500yh.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--778361c8-7d09-53c7-8e1f-12304f88fb73","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-29T13:00:31Z","modified":"2025-12-29T13:00:31Z","name":"Phishing domain: 9516.li","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/9516.li","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9516.li']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-29T13:00:31Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9516.li"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae8d6255-97a5-5b3e-a3f2-4eb73e74fe88","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-30T00:40:20Z","modified":"2025-12-30T00:40:20Z","name":"Phishing domain: 952365.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/952365.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '952365.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-30T00:40:20Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/952365.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--651f35e7-b840-570d-ba3b-1b922617bb40","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 95361652.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/95361652.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '95361652.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/95361652.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--73c97397-0fc1-5e53-bd12-ec511327e3af","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-27T01:01:44Z","modified":"2026-02-27T01:01:44Z","name":"Phishing domain: 953918coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/953918coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '953918coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-27T01:01:44Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/953918coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d086e58-d188-5dae-b08c-4008ebf9a134","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-24T09:36:31Z","modified":"2026-01-24T09:36:31Z","name":"Phishing domain: 954631coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/954631coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '954631coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-24T09:36:31Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/954631coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b76fd44e-badf-5938-b38f-b7f595e2a51f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-15T02:27:04Z","modified":"2026-07-15T02:27:04Z","name":"Phishing domain: 956848.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/956848.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '956848.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-15T02:27:04Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/956848.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3c6b565-517a-5284-87a8-da79b1f4e70b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-01T12:50:26Z","modified":"2025-11-01T12:50:26Z","name":"Phishing domain: 9569988.vip","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating generic. Report & evidence: https://phishdestroy.io/domain/9569988.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9569988.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-01T12:50:26Z","labels":["malicious-activity","phishing","brand:generic"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9569988.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e5b34f4-01e7-5f08-8c21-7fd4dd29ca4b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-19T13:36:20Z","modified":"2025-10-19T13:36:20Z","name":"Phishing domain: 956b52c2ecf347d6.raydiumpro-web.shop","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Raydium. Report & evidence: https://phishdestroy.io/domain/956b52c2ecf347d6.raydiumpro-web.shop","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '956b52c2ecf347d6.raydiumpro-web.shop']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-19T13:36:20Z","labels":["malicious-activity","phishing","brand:raydium"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/956b52c2ecf347d6.raydiumpro-web.shop"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--04e8d272-d8ed-5fde-bec4-966b5d957526","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:16Z","modified":"2026-02-26T23:20:16Z","name":"Phishing domain: 958164coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/958164coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '958164coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:16Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/958164coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--df3d90f4-5ffb-59a2-bc61-2c7d4cb3677e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-02T16:10:05Z","modified":"2026-03-02T16:10:05Z","name":"Phishing domain: 95baf.laxmus.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/95baf.laxmus.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '95baf.laxmus.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-02T16:10:05Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/95baf.laxmus.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c02aedda-be52-5124-9403-e5513e113277","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-27T02:23:33Z","modified":"2026-06-27T02:23:33Z","name":"Phishing domain: 95okcom.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/95okcom.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '95okcom.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-27T02:23:33Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/95okcom.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9b3e95a-a4b9-5888-9176-d1ed1b2da150","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-22T20:12:05Z","modified":"2026-03-22T20:12:05Z","name":"Phishing domain: 95pg09.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/95pg09.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '95pg09.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-22T20:12:05Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/95pg09.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0377150-32b4-5349-afd8-55a125927ad0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T18:28:53Z","modified":"2026-02-26T18:28:53Z","name":"Phishing domain: 96.casino","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Facebook. Report & evidence: https://phishdestroy.io/domain/96.casino","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '96.casino']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T18:28:53Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/96.casino"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--88909c40-478a-51a1-a8a5-70ca716e766b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-22T18:04:37Z","modified":"2026-04-22T18:04:37Z","name":"Phishing domain: 961.lol","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/961.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '961.lol']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-22T18:04:37Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/961.lol"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6ddd158-319a-5a7b-9a72-7b0b54e0056b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-06T13:28:48Z","modified":"2026-01-06T13:28:48Z","name":"Phishing domain: 961365.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/961365.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '961365.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-06T13:28:48Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/961365.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--73fec682-f938-5070-96be-becb36331b9f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 96165e.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/96165e.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '96165e.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/96165e.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc151a08-9276-5767-983f-e3b6df63f39a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 96165i.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/96165i.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '96165i.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/96165i.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8011c775-e430-51c3-9b3e-7c7ab4386584","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 96165k.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/96165k.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '96165k.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/96165k.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4dd81dc-11c3-5e23-ad29-889f63ffb306","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 96165r.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/96165r.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '96165r.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/96165r.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6200ea8d-0e82-5752-8ecf-5dbeba40cf0f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 96165s.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/96165s.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '96165s.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/96165s.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd3b6f1f-f11b-5697-a360-35d8faf8e12f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 96165u.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/96165u.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '96165u.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/96165u.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2661ed6-ccc3-5c0e-96ff-236a43ecd408","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-18T23:54:19Z","modified":"2026-01-18T23:54:19Z","name":"Phishing domain: 964-iq-conttact.ubpages.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Facebook. Report & evidence: https://phishdestroy.io/domain/964-iq-conttact.ubpages.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '964-iq-conttact.ubpages.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-18T23:54:19Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/964-iq-conttact.ubpages.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--358c9a61-c38e-59f3-b4db-89fe088f6fad","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-18T13:53:04Z","modified":"2026-03-18T13:53:04Z","name":"Phishing domain: 964531-cb.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/964531-cb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '964531-cb.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-18T13:53:04Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/964531-cb.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cf1b2d2-d50e-5104-91fd-3f1d9d8ca322","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-08T13:46:51Z","modified":"2026-07-08T13:46:51Z","name":"Phishing domain: 9659aap19.vip","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/9659aap19.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9659aap19.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-08T13:46:51Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9659aap19.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5af7168f-07c9-56f5-a082-df62e3c7522c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T14:15:15Z","modified":"2026-06-15T14:15:15Z","name":"Phishing domain: 9659aap29.vip","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/9659aap29.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9659aap29.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T14:15:15Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9659aap29.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1ab1571-4940-513c-8f4f-44e37971b22d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-07T21:29:02Z","modified":"2026-07-07T21:29:02Z","name":"Phishing domain: 9659aap55.vip","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/9659aap55.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9659aap55.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-07T21:29:02Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9659aap55.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b256c461-65b4-59f5-9e86-4701f4e3059a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-08T13:21:41Z","modified":"2026-07-08T13:21:41Z","name":"Phishing domain: 9659gg44.vip","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/9659gg44.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9659gg44.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-08T13:21:41Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9659gg44.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a5b3017-8910-5854-9937-c84e509332f2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-06T06:36:48Z","modified":"2025-09-06T06:36:48Z","name":"Phishing domain: 96664444324410000909987.weebly.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Yahoo. Report & evidence: https://phishdestroy.io/domain/96664444324410000909987.weebly.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '96664444324410000909987.weebly.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-06T06:36:48Z","labels":["malicious-activity","phishing","brand:yahoo"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/96664444324410000909987.weebly.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--074743f3-d6e5-52e5-a4f7-0f3c33498b1f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 96668126.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/96668126.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '96668126.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/96668126.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e7948db-ccc4-56e9-99b8-96a2f949c979","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 969208798159.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/969208798159.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '969208798159.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/969208798159.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eeb260e1-042d-5f39-9faf-5003649d2ff5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-27T12:47:08Z","modified":"2025-12-27T12:47:08Z","name":"Phishing domain: 969xpj.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/969xpj.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '969xpj.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-27T12:47:08Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/969xpj.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d984939-8e20-571d-ba93-a5917068248a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-10T03:14:46Z","modified":"2025-09-10T03:14:46Z","name":"Phishing domain: 96obsgiveaway.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/96obsgiveaway.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '96obsgiveaway.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-10T03:14:46Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/96obsgiveaway.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c50d591d-7604-5467-96e6-4c42b64e86c1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-29T09:28:05Z","modified":"2025-10-29T09:28:05Z","name":"Phishing domain: 972805coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/972805coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '972805coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-29T09:28:05Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/972805coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7c525f1-5b82-5737-9e66-907ea92381db","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-28T16:00:58Z","modified":"2026-06-28T16:00:58Z","name":"Phishing domain: 973mavibet.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/973mavibet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '973mavibet.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-28T16:00:58Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/973mavibet.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2815b062-541b-53db-a70e-d004b48af087","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-11T18:25:31Z","modified":"2026-08-11T18:25:31Z","name":"Phishing domain: 97479b.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/97479b.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '97479b.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-11T18:25:31Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/97479b.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e3dae89-c7db-577b-857b-925dec3d2124","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-29T11:23:28Z","modified":"2025-12-29T11:23:28Z","name":"Phishing domain: 97683.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating tiktok. Report & evidence: https://phishdestroy.io/domain/97683.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '97683.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-29T11:23:28Z","labels":["malicious-activity","phishing","brand:tiktok"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/97683.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--676f1cd7-e702-52ab-847a-06b7bc3d38dc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-16T13:33:45Z","modified":"2025-12-16T13:33:45Z","name":"Phishing domain: 977776i.cleansite.info","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating discord. Report & evidence: https://phishdestroy.io/domain/977776i.cleansite.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '977776i.cleansite.info']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-16T13:33:45Z","labels":["malicious-activity","phishing","brand:discord"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/977776i.cleansite.info"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--81823125-de4e-5788-8d11-d0dfe7f6aadb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-08T01:26:46Z","modified":"2026-08-08T01:26:46Z","name":"Phishing domain: 97812-kraken.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Kraken. Report & evidence: https://phishdestroy.io/domain/97812-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '97812-kraken.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-08T01:26:46Z","labels":["malicious-activity","phishing","brand:kraken"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/97812-kraken.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7de7f06-f2fe-5763-ab5d-e290c25490cb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-23T16:03:55Z","modified":"2026-07-23T16:03:55Z","name":"Phishing domain: 979216.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/979216.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '979216.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-23T16:03:55Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/979216.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2be83a2c-ef8e-5b8e-a084-0ffeb6f44777","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-13T20:00:25Z","modified":"2026-08-13T20:00:25Z","name":"Phishing domain: 979218.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating MetaMask. Report & evidence: https://phishdestroy.io/domain/979218.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '979218.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-13T20:00:25Z","labels":["malicious-activity","phishing","brand:metamask"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/979218.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2f7afbe-51cc-5944-9462-87b939789b0c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-08T01:29:22Z","modified":"2026-08-08T01:29:22Z","name":"Phishing domain: 979235.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/979235.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '979235.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-08T01:29:22Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/979235.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7dd8392-866f-5d84-86ad-e89b10a794f9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-20T12:53:23Z","modified":"2026-07-20T12:53:23Z","name":"Phishing domain: 979236.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/979236.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '979236.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-20T12:53:23Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/979236.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fad9be74-ceed-59dc-8d08-97b3bfb1990f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-12T03:25:43Z","modified":"2026-08-12T03:25:43Z","name":"Phishing domain: 979735.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating MetaMask. Report & evidence: https://phishdestroy.io/domain/979735.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '979735.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-12T03:25:43Z","labels":["malicious-activity","phishing","brand:metamask"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/979735.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--59f3396f-110b-5ebd-a112-dcf6d65d7884","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 979vns.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/979vns.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '979vns.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/979vns.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--99088776-5f07-580f-863b-c509829de8e9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:59Z","modified":"2026-02-26T23:23:59Z","name":"Phishing domain: 97a0bd1f.ajkevmslay.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/97a0bd1f.ajkevmslay.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '97a0bd1f.ajkevmslay.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:59Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/97a0bd1f.ajkevmslay.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b05487b6-6749-5a17-b53a-5e02970ddd2f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-25T03:54:30Z","modified":"2026-02-25T03:54:30Z","name":"Phishing domain: 97bal.luxente.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/97bal.luxente.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '97bal.luxente.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-25T03:54:30Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/97bal.luxente.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f493902e-86ba-569b-bece-b504ff5afc22","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-07T03:35:57Z","modified":"2026-02-07T03:35:57Z","name":"Phishing domain: 97eca.brellia.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/97eca.brellia.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '97eca.brellia.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-07T03:35:57Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/97eca.brellia.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7635f6c3-d32c-5342-a9c1-d4a6a0fedf00","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-29T15:18:12Z","modified":"2026-06-29T15:18:12Z","name":"Phishing domain: 97ee3.catex.at","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/97ee3.catex.at","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '97ee3.catex.at']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-29T15:18:12Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/97ee3.catex.at"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--62a0eb78-49ec-5d86-91d9-9f327e6a4384","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-26T14:25:16Z","modified":"2026-06-26T14:25:16Z","name":"Phishing domain: 97ee4.catex.at","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/97ee4.catex.at","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '97ee4.catex.at']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-26T14:25:16Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/97ee4.catex.at"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--21990782-6333-53a2-970c-31626b71d2bc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-21T20:42:50Z","modified":"2026-06-21T20:42:50Z","name":"Phishing domain: 97ee5.catex.at","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/97ee5.catex.at","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '97ee5.catex.at']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-21T20:42:50Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/97ee5.catex.at"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--74b7b49b-e8b1-5361-babe-dcf7baaa416e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-21T20:25:48Z","modified":"2026-07-21T20:25:48Z","name":"Phishing domain: 97ee6.blogspot.co.il","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/97ee6.blogspot.co.il","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '97ee6.blogspot.co.il']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-21T20:25:48Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/97ee6.blogspot.co.il"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cec78633-5e80-595e-a126-6a565bb6579a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-20T13:15:41Z","modified":"2026-07-20T13:15:41Z","name":"Phishing domain: 97ee6.blogspot.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/97ee6.blogspot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '97ee6.blogspot.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-20T13:15:41Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/97ee6.blogspot.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c11b1ae-a5b8-5d1c-b4c2-824f10309694","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-21T20:30:31Z","modified":"2026-07-21T20:30:31Z","name":"Phishing domain: 97ee6.blogspot.si","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/97ee6.blogspot.si","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '97ee6.blogspot.si']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-21T20:30:31Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/97ee6.blogspot.si"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca912e88-d1f5-50f5-8099-3aa9e2b2644f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-26T10:19:36Z","modified":"2026-06-26T10:19:36Z","name":"Phishing domain: 97ee6.catex.at","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/97ee6.catex.at","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '97ee6.catex.at']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-26T10:19:36Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/97ee6.catex.at"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6302ee54-5a51-5ed0-931a-4e672962e1bf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-24T12:32:20Z","modified":"2026-06-24T12:32:20Z","name":"Phishing domain: 97ee7.catex.at","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/97ee7.catex.at","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '97ee7.catex.at']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-24T12:32:20Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/97ee7.catex.at"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5711ce67-96d3-5429-8d3e-77150eccc996","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-21T21:16:10Z","modified":"2026-07-21T21:16:10Z","name":"Phishing domain: 97ee8.catex.at","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/97ee8.catex.at","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '97ee8.catex.at']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-21T21:16:10Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/97ee8.catex.at"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4405b22a-5523-5905-a0fb-661d427ab9e4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-18T19:31:08Z","modified":"2026-07-18T19:31:08Z","name":"Phishing domain: 97ee9.catex.at","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/97ee9.catex.at","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '97ee9.catex.at']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-18T19:31:08Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/97ee9.catex.at"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cfdb79b-3dec-568b-a76f-560eddb6b488","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-21T15:22:45Z","modified":"2026-02-21T15:22:45Z","name":"Phishing domain: 97far.nickles.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/97far.nickles.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '97far.nickles.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-21T15:22:45Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/97far.nickles.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3ffddef-d35e-5338-8830-f1915bf6acc5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-01T02:14:28Z","modified":"2026-07-01T02:14:28Z","name":"Phishing domain: 97tyesy.vercel.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/97tyesy.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '97tyesy.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-01T02:14:28Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/97tyesy.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc62298a-f2c7-5dfe-9e19-86592a778f2b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-20T19:33:17Z","modified":"2025-12-20T19:33:17Z","name":"Phishing domain: 9806bet.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/9806bet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9806bet.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-20T19:33:17Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9806bet.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aafe77de-d3b9-58ab-a531-38fc1b244265","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-04T14:46:25Z","modified":"2026-01-04T14:46:25Z","name":"Phishing domain: 980v6655.weebly.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/980v6655.weebly.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '980v6655.weebly.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-04T14:46:25Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/980v6655.weebly.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--159e56e0-0314-5adb-b720-eea3fb909d41","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-25T00:28:59Z","modified":"2026-02-25T00:28:59Z","name":"Phishing domain: 981722-ticket-cb.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/981722-ticket-cb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '981722-ticket-cb.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-25T00:28:59Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/981722-ticket-cb.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f66805c5-5cdb-5194-a144-c204074e770a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-07-18T06:39:20Z","modified":"2025-07-18T06:39:20Z","name":"Phishing domain: 9823712-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/9823712-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9823712-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-07-18T06:39:20Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9823712-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cc361dc-9833-5c26-aae9-235e7d4b7cdb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-12T23:21:09Z","modified":"2026-02-12T23:21:09Z","name":"Phishing domain: 982754-ticket-cb.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/982754-ticket-cb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '982754-ticket-cb.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-12T23:21:09Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/982754-ticket-cb.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--89876116-ee56-522e-a47a-4b3c3352b1e9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-27T12:40:38Z","modified":"2025-12-27T12:40:38Z","name":"Phishing domain: 98321ujr0lsl1337.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/98321ujr0lsl1337.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '98321ujr0lsl1337.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-27T12:40:38Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/98321ujr0lsl1337.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3433c78c-1ad5-5e20-b50f-c4122ad5967e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:16Z","modified":"2026-07-27T06:02:16Z","name":"Phishing domain: 98520.pet","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/98520.pet","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '98520.pet']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:16Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/98520.pet"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f49b38a0-b581-5f6f-8cd7-a78f82c27d16","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-16T15:17:12Z","modified":"2026-03-16T15:17:12Z","name":"Phishing domain: 9857.greenfrienndlypaint.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/9857.greenfrienndlypaint.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9857.greenfrienndlypaint.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-16T15:17:12Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9857.greenfrienndlypaint.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb363c9c-0be6-5306-9423-5c965197e7ee","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-22T15:16:57Z","modified":"2026-04-22T15:16:57Z","name":"Phishing domain: 986.surf","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/986.surf","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '986.surf']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-22T15:16:57Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/986.surf"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--660ea215-8892-51ca-a9a2-859d98af16e4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 986vns.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/986vns.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '986vns.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/986vns.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab4dfb8f-64e8-551e-826c-03d733f79b94","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-28T10:53:04Z","modified":"2025-10-28T10:53:04Z","name":"Phishing domain: 98734afs5.cfd","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/98734afs5.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '98734afs5.cfd']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-28T10:53:04Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/98734afs5.cfd"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d983c96-fbb8-522e-a999-6d039396b07c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-16T12:32:13Z","modified":"2025-11-16T12:32:13Z","name":"Phishing domain: 9888.pizza","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/9888.pizza","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9888.pizza']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-16T12:32:13Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9888.pizza"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--652242c6-5784-5607-976d-d2e77be9cf2d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-22T19:54:18Z","modified":"2026-07-22T19:54:18Z","name":"Phishing domain: 98tanf.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/98tanf.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '98tanf.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-22T19:54:18Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/98tanf.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e771435e-99b6-568b-b499-da55ee99f949","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-02T21:50:36Z","modified":"2026-07-02T21:50:36Z","name":"Phishing domain: 99--nights.blogspot.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/99--nights.blogspot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '99--nights.blogspot.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-02T21:50:36Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/99--nights.blogspot.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb1d3c04-29bd-50a7-bace-9cd36e54b815","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-20T19:06:34Z","modified":"2026-02-20T19:06:34Z","name":"Phishing domain: 99-drugs.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/99-drugs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '99-drugs.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-20T19:06:34Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/99-drugs.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3460a91d-68a3-531f-b90e-61284153cd0a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:09Z","modified":"2026-02-26T23:22:09Z","name":"Phishing domain: 99088.weebly.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/99088.weebly.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '99088.weebly.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/99088.weebly.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7900b0a2-a8f0-5046-af9c-721e91034595","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: 9911.lv","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/9911.lv","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9911.lv']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9911.lv"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--36cbf4cb-9fe9-533f-a9da-b3d789e93dfb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-02T15:21:23Z","modified":"2026-07-02T15:21:23Z","name":"Phishing domain: 991217.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/991217.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '991217.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-02T15:21:23Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/991217.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b4938a0-46d1-53fa-9226-d41095aa7466","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-09T09:04:54Z","modified":"2026-03-09T09:04:54Z","name":"Phishing domain: 991772coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/991772coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '991772coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-09T09:04:54Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/991772coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a4b3b10-3047-50e5-9155-e52b6a723644","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-30T06:37:21Z","modified":"2026-07-30T06:37:21Z","name":"Phishing domain: 991832-binance.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Binance. Report & evidence: https://phishdestroy.io/domain/991832-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '991832-binance.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-30T06:37:21Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/991832-binance.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--993df6aa-b00b-52a2-b633-026de1aa3e35","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:27Z","modified":"2026-02-26T23:19:27Z","name":"Phishing domain: 991ka.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/991ka.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '991ka.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:27Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/991ka.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c970fa9-fc8c-53b4-994a-edd9738f7f38","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-04T22:08:15Z","modified":"2026-02-04T22:08:15Z","name":"Phishing domain: 992back.ink","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/992back.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '992back.ink']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-04T22:08:15Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/992back.ink"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--372abd0a-6eec-569a-ad60-e8bb5ba52ce1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:00Z","modified":"2026-02-26T23:23:00Z","name":"Phishing domain: 994bac96.wollconn.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/994bac96.wollconn.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '994bac96.wollconn.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:00Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/994bac96.wollconn.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--87eff21f-8896-5f43-8376-28ab94a7eb0f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-18T06:07:26Z","modified":"2025-12-18T06:07:26Z","name":"Phishing domain: 996eth.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/996eth.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '996eth.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-18T06:07:26Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/996eth.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c17fb37-4f2f-5531-a18e-51b60dbdc7e1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-03T14:05:41Z","modified":"2025-11-03T14:05:41Z","name":"Phishing domain: 996usdc.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/996usdc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '996usdc.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-03T14:05:41Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/996usdc.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccdc1c01-c52f-5316-be21-c66adcdbcaa3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-04T02:38:17Z","modified":"2025-11-04T02:38:17Z","name":"Phishing domain: 9977-crck.vip","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/9977-crck.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9977-crck.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-04T02:38:17Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9977-crck.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--24d67fae-afd6-5153-ab16-57c26ac5e6cc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-03T18:51:33Z","modified":"2026-03-03T18:51:33Z","name":"Phishing domain: 998232coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/998232coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '998232coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-03T18:51:33Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/998232coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a2eefc3-f29c-5312-a372-59f1f353e312","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-21T19:15:12Z","modified":"2025-10-21T19:15:12Z","name":"Phishing domain: 998706chadmccann-karnsi.crabdance.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Apple. Report & evidence: https://phishdestroy.io/domain/998706chadmccann-karnsi.crabdance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '998706chadmccann-karnsi.crabdance.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-21T19:15:12Z","labels":["malicious-activity","phishing","brand:apple"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/998706chadmccann-karnsi.crabdance.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c50f8e20-c7ca-5044-b2b2-b91c2ab618ae","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-22T12:58:39Z","modified":"2025-11-22T12:58:39Z","name":"Phishing domain: 999-884.weebly.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/999-884.weebly.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '999-884.weebly.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-22T12:58:39Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/999-884.weebly.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4eafc335-4a4c-5617-9b62-501ecfa07045","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:02:17Z","modified":"2026-07-27T06:02:17Z","name":"Phishing domain: 99966.club","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/99966.club","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '99966.club']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:02:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/99966.club"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--04b6918d-8248-5e94-b0d5-d6ae1935c0d3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-07-27T06:49:18Z","modified":"2025-07-27T06:49:18Z","name":"Phishing domain: 999claimbye.live","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating telegram. Report & evidence: https://phishdestroy.io/domain/999claimbye.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '999claimbye.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-07-27T06:49:18Z","labels":["malicious-activity","phishing","brand:telegram"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/999claimbye.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1105235-7b27-5d81-9662-eebea74e6a78","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-06T18:18:33Z","modified":"2026-07-06T18:18:33Z","name":"Phishing domain: 999exbo.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Investment Scam. Report & evidence: https://phishdestroy.io/domain/999exbo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '999exbo.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-06T18:18:33Z","labels":["malicious-activity","phishing","brand:investment scam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/999exbo.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--17ca2e1f-9dc7-566d-9d25-2619bb9a68ce","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-23T15:40:57Z","modified":"2026-01-23T15:40:57Z","name":"Phishing domain: 99captcha.online","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/99captcha.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '99captcha.online']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-23T15:40:57Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/99captcha.online"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c67c7d66-977e-5a80-96a8-52f107eb5f7c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-12T02:12:26Z","modified":"2025-12-12T02:12:26Z","name":"Phishing domain: 99d04a7a-345a-48sc-8ea3-a9a626aa773e-00-3qpe7ieitscyb.live","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/99d04a7a-345a-48sc-8ea3-a9a626aa773e-00-3qpe7ieitscyb.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '99d04a7a-345a-48sc-8ea3-a9a626aa773e-00-3qpe7ieitscyb.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-12T02:12:26Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/99d04a7a-345a-48sc-8ea3-a9a626aa773e-00-3qpe7ieitscyb.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--30f9ea94-e4a8-5266-938e-ee9aea813f3f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:53Z","modified":"2026-02-26T23:22:53Z","name":"Phishing domain: 99e01fa7.wacon.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/99e01fa7.wacon.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '99e01fa7.wacon.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:53Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/99e01fa7.wacon.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--704cf7b4-8a4b-57b5-8179-39fae740e7ab","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-12T03:24:12Z","modified":"2026-08-12T03:24:12Z","name":"Phishing domain: 99fbc9.arcadejafet.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/99fbc9.arcadejafet.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '99fbc9.arcadejafet.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-12T03:24:12Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/99fbc9.arcadejafet.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7da1062e-6410-5bfd-ab73-cc837000d7aa","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-07T11:10:35Z","modified":"2026-06-07T11:10:35Z","name":"Phishing domain: 99forests.netlify.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/99forests.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '99forests.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-07T11:10:35Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/99forests.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad1133b1-97c7-5c3a-83eb-dd4d4d2bc2ac","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T07:02:12Z","modified":"2026-07-27T07:02:12Z","name":"Phishing domain: 99francs.pro","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/99francs.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '99francs.pro']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T07:02:12Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/99francs.pro"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--07de96a6-3f81-54b3-9518-e4c490b54007","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-06T23:02:33Z","modified":"2026-07-06T23:02:33Z","name":"Phishing domain: 99night-in-the-forest.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/99night-in-the-forest.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '99night-in-the-forest.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-06T23:02:33Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/99night-in-the-forest.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0626d347-0695-5d3a-bb21-6bcc5f0a9149","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-24T07:39:21Z","modified":"2026-06-24T07:39:21Z","name":"Phishing domain: 99nightforest.blogspot.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/99nightforest.blogspot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '99nightforest.blogspot.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-24T07:39:21Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/99nightforest.blogspot.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3ee4dcf-3a1e-5aad-827a-4753de8dc2af","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-07T11:10:23Z","modified":"2026-06-07T11:10:23Z","name":"Phishing domain: 99nightintheforestx7.netlify.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/99nightintheforestx7.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '99nightintheforestx7.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-07T11:10:23Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/99nightintheforestx7.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed8c0a5b-bc77-531d-be19-677743ab1a7a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-16T18:10:59Z","modified":"2026-07-16T18:10:59Z","name":"Phishing domain: 99nightsintheforest.blogspot.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/99nightsintheforest.blogspot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '99nightsintheforest.blogspot.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-16T18:10:59Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/99nightsintheforest.blogspot.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b59e07d9-89b3-5a27-aa88-557b02a1aa73","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-07T11:15:44Z","modified":"2026-06-07T11:15:44Z","name":"Phishing domain: 99nightsintheforestfree.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/99nightsintheforestfree.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '99nightsintheforestfree.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-07T11:15:44Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/99nightsintheforestfree.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cd5a11b-cccd-59a5-8022-42056eea3f7f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-16T18:32:32Z","modified":"2026-07-16T18:32:32Z","name":"Phishing domain: 99nightsscript.blogspot.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/99nightsscript.blogspot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '99nightsscript.blogspot.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-16T18:32:32Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/99nightsscript.blogspot.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--94602bd8-e458-5309-9450-30d877a1fc22","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-07T11:13:31Z","modified":"2026-06-07T11:13:31Z","name":"Phishing domain: 99nightstheforest.netlify.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/99nightstheforest.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '99nightstheforest.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-07T11:13:31Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/99nightstheforest.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d273fcc-146b-57e6-abc8-bf238b478b3f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-03T04:31:47Z","modified":"2026-07-03T04:31:47Z","name":"Phishing domain: 99nighttt.blogspot.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/99nighttt.blogspot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '99nighttt.blogspot.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-03T04:31:47Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/99nighttt.blogspot.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb404745-1872-5ea2-8918-c71396732afb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-08T23:25:22Z","modified":"2026-08-08T23:25:22Z","name":"Phishing domain: 99nt.site","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating roblox. Report & evidence: https://phishdestroy.io/domain/99nt.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '99nt.site']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-08T23:25:22Z","labels":["malicious-activity","phishing","brand:roblox"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/99nt.site"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--723a6dbe-55cf-5fae-8c7e-2df7ef6ad538","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-31T14:20:20Z","modified":"2026-07-31T14:20:20Z","name":"Phishing domain: 99rblo.blogspot.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/99rblo.blogspot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '99rblo.blogspot.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-31T14:20:20Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/99rblo.blogspot.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e1ad6da-bd2e-5e75-b4a1-a185e1f43ce5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-14T13:23:21Z","modified":"2025-12-14T13:23:21Z","name":"Phishing domain: 99rob.netlify.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating roblox. Report & evidence: https://phishdestroy.io/domain/99rob.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '99rob.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-14T13:23:21Z","labels":["malicious-activity","phishing","brand:roblox"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/99rob.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--214257de-f3cb-5875-8ff6-b871373e6780","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-24T07:45:02Z","modified":"2026-06-24T07:45:02Z","name":"Phishing domain: 99roblox.blogspot.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/99roblox.blogspot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '99roblox.blogspot.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-24T07:45:02Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/99roblox.blogspot.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--95437e09-4a31-548b-aa61-d378a25657de","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:56Z","modified":"2026-02-26T23:22:56Z","name":"Phishing domain: 99walletcrypto.kred","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/99walletcrypto.kred","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '99walletcrypto.kred']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:56Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/99walletcrypto.kred"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d10d66ba-40f8-5f57-a2b9-bfc5c3746ea7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T17:38:24Z","modified":"2026-02-26T17:38:24Z","name":"Phishing domain: 99yuanma.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/99yuanma.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '99yuanma.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T17:38:24Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/99yuanma.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--57be7bf6-27c8-5083-b8bf-33a29f598df1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-05T12:29:36Z","modified":"2026-01-05T12:29:36Z","name":"Phishing domain: 9a-win.ph","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/9a-win.ph","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9a-win.ph']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-05T12:29:36Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9a-win.ph"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fe7ede4-d432-5604-aceb-1277b4257b2e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-13T20:37:26Z","modified":"2026-08-13T20:37:26Z","name":"Phishing domain: 9a0513.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/9a0513.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9a0513.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-13T20:37:26Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9a0513.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ecac1fe-4e65-567e-81e5-50cf18691bfb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-21T23:51:15Z","modified":"2025-12-21T23:51:15Z","name":"Phishing domain: 9a44a2aa.elvsoo.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/9a44a2aa.elvsoo.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9a44a2aa.elvsoo.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-21T23:51:15Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9a44a2aa.elvsoo.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--51eff3b1-850d-5d78-914b-d79e66378e1f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T15:15:48Z","modified":"2026-02-13T15:15:48Z","name":"Phishing domain: 9au-casinoz-australia.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/9au-casinoz-australia.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9au-casinoz-australia.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T15:15:48Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9au-casinoz-australia.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f026bdf5-770c-5ff2-b0b4-dbf17691d4fa","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:00Z","modified":"2026-02-26T23:21:00Z","name":"Phishing domain: 9b71xkv8.alliegro.shop","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Apple. Report & evidence: https://phishdestroy.io/domain/9b71xkv8.alliegro.shop","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9b71xkv8.alliegro.shop']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:00Z","labels":["malicious-activity","phishing","brand:apple"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9b71xkv8.alliegro.shop"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6eea0e7d-e2bf-527b-9897-98ed7bac8a41","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-14T13:18:47Z","modified":"2025-12-14T13:18:47Z","name":"Phishing domain: 9b818c91.kjfdjfh.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating trezor. Report & evidence: https://phishdestroy.io/domain/9b818c91.kjfdjfh.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9b818c91.kjfdjfh.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-14T13:18:47Z","labels":["malicious-activity","phishing","brand:trezor"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9b818c91.kjfdjfh.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f62948f-8892-54f5-8aeb-f76744a68dca","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-13T20:11:33Z","modified":"2026-08-13T20:11:33Z","name":"Phishing domain: 9b85eb.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/9b85eb.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9b85eb.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-13T20:11:33Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9b85eb.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--984d1111-113d-5798-86d6-88cecf96b00d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:42Z","modified":"2026-02-26T23:21:42Z","name":"Phishing domain: 9be50d2b.ajkevmslay.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/9be50d2b.ajkevmslay.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9be50d2b.ajkevmslay.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:42Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9be50d2b.ajkevmslay.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--53dc157d-6c49-5bb1-a9c8-10196a5c46d8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-14T13:24:10Z","modified":"2025-12-14T13:24:10Z","name":"Phishing domain: 9bet999.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/9bet999.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9bet999.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-14T13:24:10Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9bet999.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3260032-1514-5405-8122-2f859c35f9b3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-30T08:49:01Z","modified":"2026-01-30T08:49:01Z","name":"Phishing domain: 9bferon.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating amex. Report & evidence: https://phishdestroy.io/domain/9bferon.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9bferon.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-30T08:49:01Z","labels":["malicious-activity","phishing","brand:amex"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9bferon.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1e76a90-784d-5513-887c-1419ba2f72d1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-10T06:10:14Z","modified":"2025-09-10T06:10:14Z","name":"Phishing domain: 9bpwxawrlrjt.netlify.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Facebook. Report & evidence: https://phishdestroy.io/domain/9bpwxawrlrjt.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9bpwxawrlrjt.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-10T06:10:14Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9bpwxawrlrjt.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--44ec9f93-a0e3-5872-8d64-d1d42d3b863f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-12T03:19:26Z","modified":"2026-08-12T03:19:26Z","name":"Phishing domain: 9c2cc0.arcadejafet.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/9c2cc0.arcadejafet.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9c2cc0.arcadejafet.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-12T03:19:26Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9c2cc0.arcadejafet.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--64c1c351-4031-565d-9dbb-c6861619b777","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-30T07:43:50Z","modified":"2025-12-30T07:43:50Z","name":"Phishing domain: 9cbaf2a3.rstcjscjhd.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/9cbaf2a3.rstcjscjhd.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9cbaf2a3.rstcjscjhd.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-30T07:43:50Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9cbaf2a3.rstcjscjhd.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb30d7e7-0316-5cd1-a1e4-e3a8ee2b6f8c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-12T03:45:00Z","modified":"2026-08-12T03:45:00Z","name":"Phishing domain: 9cdb7f.arcadejafet.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/9cdb7f.arcadejafet.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9cdb7f.arcadejafet.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-12T03:45:00Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9cdb7f.arcadejafet.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a766223-8e8e-5de7-81fc-3121e8f4eae0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-22T18:42:07Z","modified":"2025-12-22T18:42:07Z","name":"Phishing domain: 9cece7b9.reeeset.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/9cece7b9.reeeset.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9cece7b9.reeeset.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-22T18:42:07Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9cece7b9.reeeset.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d314059-0f05-5aa8-aa17-7880f6dedf9e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-19T02:40:36Z","modified":"2026-06-19T02:40:36Z","name":"Phishing domain: 9cmw-idx4-47fs.george-vandevorde-smithinsurancellc-com-s-account.workers.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/9cmw-idx4-47fs.george-vandevorde-smithinsurancellc-com-s-account.workers.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9cmw-idx4-47fs.george-vandevorde-smithinsurancellc-com-s-account.workers.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-19T02:40:36Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9cmw-idx4-47fs.george-vandevorde-smithinsurancellc-com-s-account.workers.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--08bb67d4-5135-5626-9ad8-ac232824d9e0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T07:33:21Z","modified":"2026-08-10T07:33:21Z","name":"Phishing domain: 9cs.fail","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating cs2. Report & evidence: https://phishdestroy.io/domain/9cs.fail","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9cs.fail']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T07:33:21Z","labels":["malicious-activity","phishing","brand:cs2"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9cs.fail"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--65145ab7-394a-5d90-94e8-7976a355e297","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-21T23:51:13Z","modified":"2025-12-21T23:51:13Z","name":"Phishing domain: 9f088313.ripsyr.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/9f088313.ripsyr.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9f088313.ripsyr.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-21T23:51:13Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9f088313.ripsyr.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--85ac7715-a098-5f35-92be-d495eac33449","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-09T10:26:26Z","modified":"2025-12-09T10:26:26Z","name":"Phishing domain: 9f5d362ddbe946e58a6faeca56170e30.vbdxe.cn","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/9f5d362ddbe946e58a6faeca56170e30.vbdxe.cn","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9f5d362ddbe946e58a6faeca56170e30.vbdxe.cn']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-09T10:26:26Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9f5d362ddbe946e58a6faeca56170e30.vbdxe.cn"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--71df6bc9-fcde-59eb-9728-7ba4bce200c1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-11T22:13:49Z","modified":"2026-06-11T22:13:49Z","name":"Phishing domain: 9g1y9t.093748coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/9g1y9t.093748coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9g1y9t.093748coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-11T22:13:49Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9g1y9t.093748coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c13e13c2-3880-56bb-a8fa-2c606c886085","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-05T08:45:17Z","modified":"2026-03-05T08:45:17Z","name":"Phishing domain: 9googllemeett.live","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/9googllemeett.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9googllemeett.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-05T08:45:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9googllemeett.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d255564-3daf-56ee-a02d-3933035e9e9c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T17:38:05Z","modified":"2026-02-26T17:38:05Z","name":"Phishing domain: 9ifashion.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/9ifashion.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9ifashion.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T17:38:05Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9ifashion.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fc392f7-b21f-5f7d-bbfc-c44700ad3552","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-21T17:56:14Z","modified":"2026-01-21T17:56:14Z","name":"Phishing domain: 9jaz8qlmy5.quantix9-modul.it","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating amex. Report & evidence: https://phishdestroy.io/domain/9jaz8qlmy5.quantix9-modul.it","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9jaz8qlmy5.quantix9-modul.it']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-21T17:56:14Z","labels":["malicious-activity","phishing","brand:amex"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9jaz8qlmy5.quantix9-modul.it"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d32b7194-19cc-59b8-95e2-cca0ee3491bb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-07-22T08:24:17Z","modified":"2025-07-22T08:24:17Z","name":"Phishing domain: 9kdefi3f.top","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/9kdefi3f.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9kdefi3f.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-07-22T08:24:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9kdefi3f.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--80a07932-62e1-514a-9cee-85826a95b828","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-15T11:23:05Z","modified":"2025-11-15T11:23:05Z","name":"Phishing domain: 9kp5.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/9kp5.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9kp5.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-15T11:23:05Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9kp5.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--89c2e8af-ccb1-5632-bda7-36f52ca452d4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-30T13:27:44Z","modified":"2025-09-30T13:27:44Z","name":"Phishing domain: 9mmis.pro","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/9mmis.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9mmis.pro']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-30T13:27:44Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9mmis.pro"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e44f949-f7ec-533f-b01f-e22558776fcb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-03T13:21:25Z","modified":"2025-12-03T13:21:25Z","name":"Phishing domain: 9mod.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating blast. Report & evidence: https://phishdestroy.io/domain/9mod.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9mod.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-03T13:21:25Z","labels":["malicious-activity","phishing","brand:blast"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9mod.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9de9a8d1-bd26-5ccb-af40-62d340abdc2e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-30T20:09:05Z","modified":"2026-06-30T20:09:05Z","name":"Phishing domain: 9nbet-pp.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/9nbet-pp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9nbet-pp.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-30T20:09:05Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9nbet-pp.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--157190a5-4ce4-57d5-8e1d-1813ec0f1046","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-12T08:32:15Z","modified":"2026-08-12T08:32:15Z","name":"Phishing domain: 9notexistsc8cb8a8-1669-4888-9584-d7052cf15662.acquency.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/9notexistsc8cb8a8-1669-4888-9584-d7052cf15662.acquency.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9notexistsc8cb8a8-1669-4888-9584-d7052cf15662.acquency.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-12T08:32:15Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9notexistsc8cb8a8-1669-4888-9584-d7052cf15662.acquency.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f12e71be-3aa7-5d50-9bb0-d912a9447bb3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-30T11:03:38Z","modified":"2025-10-30T11:03:38Z","name":"Phishing domain: 9o7v.wuaze.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating netflix. Report & evidence: https://phishdestroy.io/domain/9o7v.wuaze.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9o7v.wuaze.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-30T11:03:38Z","labels":["malicious-activity","phishing","brand:netflix"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9o7v.wuaze.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a11014c6-65d2-5395-aba1-de495a839b5a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-05T08:44:41Z","modified":"2026-03-05T08:44:41Z","name":"Phishing domain: 9ooglemeetts.live","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/9ooglemeetts.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9ooglemeetts.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-05T08:44:41Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9ooglemeetts.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d52155f8-248b-5dd8-b877-6661a31c2726","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-12T21:13:31Z","modified":"2026-07-12T21:13:31Z","name":"Phishing domain: 9pay.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/9pay.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9pay.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-12T21:13:31Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9pay.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--faca94db-f7a4-528c-afd0-25bd8a0f44a2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-07T17:42:54Z","modified":"2026-02-07T17:42:54Z","name":"Phishing domain: 9rolls.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google Analytics. Report & evidence: https://phishdestroy.io/domain/9rolls.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9rolls.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-07T17:42:54Z","labels":["malicious-activity","phishing","brand:google analytics"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9rolls.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9aeb99c-d7de-5576-ac9b-0b31b2b1a26f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T17:18:10Z","modified":"2026-02-26T17:18:10Z","name":"Phishing domain: 9scopesolana.live","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/9scopesolana.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9scopesolana.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T17:18:10Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9scopesolana.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--80db1828-68b5-5809-a616-6d98a8549b9d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-23T12:22:03Z","modified":"2026-02-23T12:22:03Z","name":"Phishing domain: 9solanascope.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/9solanascope.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9solanascope.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-23T12:22:03Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9solanascope.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--01e8aedf-f1d1-5182-bb3c-19b6814a3b05","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-18T20:09:01Z","modified":"2026-02-18T20:09:01Z","name":"Phishing domain: 9soles.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/9soles.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9soles.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-18T20:09:01Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9soles.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--53c2f843-3599-5066-a93d-18f104b88c77","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:57Z","modified":"2026-02-26T23:20:57Z","name":"Phishing domain: 9ss.me","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/9ss.me","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9ss.me']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:57Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9ss.me"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a03b6474-1e0c-53f8-a105-20ec7f7f66ad","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:49Z","modified":"2026-02-26T23:24:49Z","name":"Phishing domain: 9starline.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/9starline.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9starline.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:49Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9starline.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fc52765-f35b-55be-9625-db3b3014c2df","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-11T17:42:47Z","modified":"2025-11-11T17:42:47Z","name":"Phishing domain: 9wealthnexus.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating google. Report & evidence: https://phishdestroy.io/domain/9wealthnexus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9wealthnexus.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-11T17:42:47Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9wealthnexus.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b03d929c-496b-524f-83fa-3b4251121701","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-11T02:26:08Z","modified":"2026-07-11T02:26:08Z","name":"Phishing domain: 9y2awj2l.wsamoeesth.wefronetma4ms.ink","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Microsoft. Report & evidence: https://phishdestroy.io/domain/9y2awj2l.wsamoeesth.wefronetma4ms.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = '9y2awj2l.wsamoeesth.wefronetma4ms.ink']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-11T02:26:08Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/9y2awj2l.wsamoeesth.wefronetma4ms.ink"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7f86e0c-84a4-585a-a284-cfa27414d9c1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-27T05:32:57Z","modified":"2026-04-27T05:32:57Z","name":"Phishing domain: a-2l4.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/a-2l4.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a-2l4.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-27T05:32:57Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a-2l4.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--beb6cff6-5284-5c64-a590-915877be9c37","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-19T02:48:00Z","modified":"2025-11-19T02:48:00Z","name":"Phishing domain: a-a-v-e.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/a-a-v-e.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a-a-v-e.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-19T02:48:00Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a-a-v-e.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7ca3542-8423-500e-a528-6d48c454f05c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-20T21:42:34Z","modified":"2025-10-20T21:42:34Z","name":"Phishing domain: a-amaq.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/a-amaq.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a-amaq.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-20T21:42:34Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a-amaq.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2850b81-a7b1-5af6-90c0-f8d306bdd5de","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-25T15:15:45Z","modified":"2026-05-25T15:15:45Z","name":"Phishing domain: a-atendimento-portal.shop","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/a-atendimento-portal.shop","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a-atendimento-portal.shop']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-25T15:15:45Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a-atendimento-portal.shop"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9891167e-7fd7-5e48-a98b-ddd235373050","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-25T15:16:08Z","modified":"2026-05-25T15:16:08Z","name":"Phishing domain: a-atendimenton-online.shop","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/a-atendimenton-online.shop","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a-atendimenton-online.shop']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-25T15:16:08Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a-atendimenton-online.shop"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8f68822-e5ce-534e-bfdf-9e4db47583ac","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-18T15:34:56Z","modified":"2026-05-18T15:34:56Z","name":"Phishing domain: a-atomic.co.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/a-atomic.co.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a-atomic.co.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-18T15:34:56Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a-atomic.co.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e16579d-feb5-5d14-a116-b4be8e74ed4c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-01T17:55:29Z","modified":"2026-05-01T17:55:29Z","name":"Phishing domain: a-atomic.wixstudio.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/a-atomic.wixstudio.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a-atomic.wixstudio.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-01T17:55:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a-atomic.wixstudio.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1013a98-3e01-5fb0-b3c3-c900929845c7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-25T22:55:47Z","modified":"2026-02-25T22:55:47Z","name":"Phishing domain: a-atomicwallet.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Atomic Wallet. Report & evidence: https://phishdestroy.io/domain/a-atomicwallet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a-atomicwallet.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-25T22:55:47Z","labels":["malicious-activity","phishing","brand:atomic wallet"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a-atomicwallet.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7352056-0728-5fa5-89ce-66547e9409e6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-20T11:40:22Z","modified":"2025-08-20T11:40:22Z","name":"Phishing domain: a-ave.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aave. Report & evidence: https://phishdestroy.io/domain/a-ave.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a-ave.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-20T11:40:22Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a-ave.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ac78323-5a39-5a12-affc-9550c34906bd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-01T03:46:14Z","modified":"2026-02-01T03:46:14Z","name":"Phishing domain: a-binance.com.cn","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Binance. Report & evidence: https://phishdestroy.io/domain/a-binance.com.cn","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a-binance.com.cn']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-01T03:46:14Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a-binance.com.cn"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a55ddc44-1ba6-5070-8998-bfd0099562ec","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-02T00:44:38Z","modified":"2025-12-02T00:44:38Z","name":"Phishing domain: a-c4i.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Microsoft. Report & evidence: https://phishdestroy.io/domain/a-c4i.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a-c4i.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-02T00:44:38Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a-c4i.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef6cdb88-3773-517c-aba5-fcbec040b96e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-15T15:10:09Z","modified":"2026-04-15T15:10:09Z","name":"Phishing domain: a-creator-collab.github.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/a-creator-collab.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a-creator-collab.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-15T15:10:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a-creator-collab.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ca8d98d-6268-5fde-806a-2ab36cb55e9a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-25T17:56:35Z","modified":"2026-03-25T17:56:35Z","name":"Phishing domain: a-doc-welletesodus3.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating exodus. Report & evidence: https://phishdestroy.io/domain/a-doc-welletesodus3.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a-doc-welletesodus3.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-25T17:56:35Z","labels":["malicious-activity","phishing","brand:exodus"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a-doc-welletesodus3.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--285884ba-8689-57ad-b1fa-93ee534ca976","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-19T03:10:53Z","modified":"2026-02-19T03:10:53Z","name":"Phishing domain: a-facebook.duckdns.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Facebook. Report & evidence: https://phishdestroy.io/domain/a-facebook.duckdns.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a-facebook.duckdns.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-19T03:10:53Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a-facebook.duckdns.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fd3ae2e-2778-5b5e-a366-4bc9ee2ae582","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-07T11:22:17Z","modified":"2025-11-07T11:22:17Z","name":"Phishing domain: a-free-rewards.surge.sh","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/a-free-rewards.surge.sh","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a-free-rewards.surge.sh']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-07T11:22:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a-free-rewards.surge.sh"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--82b687b5-de14-5873-b5a7-7cd45919328e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-01T00:24:34Z","modified":"2026-02-01T00:24:34Z","name":"Phishing domain: a-i-o.online","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/a-i-o.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a-i-o.online']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-01T00:24:34Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a-i-o.online"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee0393eb-39cf-5e1c-9628-9a006d665d83","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-23T21:21:58Z","modified":"2026-03-23T21:21:58Z","name":"Phishing domain: a-lever.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/a-lever.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a-lever.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-23T21:21:58Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a-lever.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7ff0b8d-b176-58a2-8a15-0182c4481e4f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-30T03:34:36Z","modified":"2026-05-30T03:34:36Z","name":"Phishing domain: a-m-l-scan.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/a-m-l-scan.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a-m-l-scan.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-30T03:34:36Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a-m-l-scan.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--13232617-d9b3-5571-80e9-cdbb687aff26","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-03T22:24:39Z","modified":"2026-05-03T22:24:39Z","name":"Phishing domain: a-mainsecure.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/a-mainsecure.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a-mainsecure.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-03T22:24:39Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a-mainsecure.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d1212ac-dcfb-51e6-aa60-f4334e62d321","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-02T04:57:08Z","modified":"2025-08-02T04:57:08Z","name":"Phishing domain: a-maxcapital.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/a-maxcapital.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a-maxcapital.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-02T04:57:08Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a-maxcapital.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f8bd595-3be4-5b84-9b6c-9fda90004259","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-04T15:12:18Z","modified":"2025-12-04T15:12:18Z","name":"Phishing domain: a-mettamaxsk-logjiin.godaddysites.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating godaddy. Report & evidence: https://phishdestroy.io/domain/a-mettamaxsk-logjiin.godaddysites.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a-mettamaxsk-logjiin.godaddysites.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-04T15:12:18Z","labels":["malicious-activity","phishing","brand:godaddy"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a-mettamaxsk-logjiin.godaddysites.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c12ebc4-5f07-5237-a0a2-5624d59a31f3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-28T03:17:25Z","modified":"2026-02-28T03:17:25Z","name":"Phishing domain: a-mia.ch","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/a-mia.ch","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a-mia.ch']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-28T03:17:25Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a-mia.ch"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b2b5d65-ef99-532d-9401-129c97cbd5de","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-11T08:05:32Z","modified":"2026-05-11T08:05:32Z","name":"Phishing domain: a-pepecoin.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating pepecoin. Report & evidence: https://phishdestroy.io/domain/a-pepecoin.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a-pepecoin.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-11T08:05:32Z","labels":["malicious-activity","phishing","brand:pepecoin"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a-pepecoin.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2e1cf18-9196-5629-8807-d102700366a8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-30T14:03:46Z","modified":"2025-09-30T14:03:46Z","name":"Phishing domain: a-pi-web.online","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating WalletConnect. Report & evidence: https://phishdestroy.io/domain/a-pi-web.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a-pi-web.online']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-30T14:03:46Z","labels":["malicious-activity","phishing","brand:walletconnect"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a-pi-web.online"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecbb59dc-9856-53a6-9e77-2a61905b2cd1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:41Z","modified":"2026-02-26T23:19:41Z","name":"Phishing domain: a-portal-metamask.teachable.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating MetaMask. Report & evidence: https://phishdestroy.io/domain/a-portal-metamask.teachable.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a-portal-metamask.teachable.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:41Z","labels":["malicious-activity","phishing","brand:metamask"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a-portal-metamask.teachable.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--df7c5fa0-59bf-5e62-877b-cde89a0c703c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T06:26:31Z","modified":"2026-06-15T06:26:31Z","name":"Phishing domain: a-r-d-i-c.site","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/a-r-d-i-c.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a-r-d-i-c.site']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T06:26:31Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a-r-d-i-c.site"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--10ddffff-215e-55bd-b779-96ab632eead9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:48Z","modified":"2026-02-26T23:20:48Z","name":"Phishing domain: a-rodrome.gitbook.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aerodrome. Report & evidence: https://phishdestroy.io/domain/a-rodrome.gitbook.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a-rodrome.gitbook.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:48Z","labels":["malicious-activity","phishing","brand:aerodrome"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a-rodrome.gitbook.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f3bbdf3-a9be-50bf-8f24-3076202c8e39","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-30T19:26:15Z","modified":"2026-04-30T19:26:15Z","name":"Phishing domain: a-t-o-m-i-c.wixstudio.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/a-t-o-m-i-c.wixstudio.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a-t-o-m-i-c.wixstudio.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-30T19:26:15Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a-t-o-m-i-c.wixstudio.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3dc349a-42a4-51c4-815c-5b2a7ae4c41f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-23T15:50:33Z","modified":"2026-06-23T15:50:33Z","name":"Phishing domain: a-ten.obruchalka.kz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/a-ten.obruchalka.kz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a-ten.obruchalka.kz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-23T15:50:33Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a-ten.obruchalka.kz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--85d74eaf-becb-5e04-b704-e43797d9531c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-03T12:34:16Z","modified":"2026-05-03T12:34:16Z","name":"Phishing domain: a-tomic.wixstudio.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/a-tomic.wixstudio.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a-tomic.wixstudio.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-03T12:34:16Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a-tomic.wixstudio.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d682fdd-667c-5979-ad52-17bb37700056","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:43Z","modified":"2026-02-26T23:23:43Z","name":"Phishing domain: a-ve-info.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/a-ve-info.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a-ve-info.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:43Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a-ve-info.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa2e31d8-1e48-5b61-a48e-e3dbf121d26c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-05T15:31:53Z","modified":"2026-07-05T15:31:53Z","name":"Phishing domain: a-wallet.co.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/a-wallet.co.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a-wallet.co.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-05T15:31:53Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a-wallet.co.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a15f959-fa5e-5c1c-9653-b820c90b549c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-10T14:26:11Z","modified":"2026-07-10T14:26:11Z","name":"Phishing domain: a.adelaidehomes.biz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/a.adelaidehomes.biz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a.adelaidehomes.biz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-10T14:26:11Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a.adelaidehomes.biz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--091ff33f-81a5-5ebe-8330-db7901e3b7c0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-02T06:11:47Z","modified":"2025-12-02T06:11:47Z","name":"Phishing domain: a.ads-googala.help","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/a.ads-googala.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a.ads-googala.help']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-02T06:11:47Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a.ads-googala.help"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dace07e6-8fa5-559d-b004-ba6811295b31","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-05T18:40:10Z","modified":"2026-08-05T18:40:10Z","name":"Phishing domain: a.agoda333.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/a.agoda333.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a.agoda333.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-05T18:40:10Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a.agoda333.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--92ee1781-307c-5acb-bc60-8e912c328b61","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-10T01:46:39Z","modified":"2025-11-10T01:46:39Z","name":"Phishing domain: a.aml-security.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating AMLBot. Report & evidence: https://phishdestroy.io/domain/a.aml-security.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a.aml-security.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-10T01:46:39Z","labels":["malicious-activity","phishing","brand:amlbot"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a.aml-security.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--899c5192-6b62-5d43-9012-8bd4a86a42aa","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-07T01:27:10Z","modified":"2026-01-07T01:27:10Z","name":"Phishing domain: a.befi.ink","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ethereum. Report & evidence: https://phishdestroy.io/domain/a.befi.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a.befi.ink']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-07T01:27:10Z","labels":["malicious-activity","phishing","brand:ethereum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a.befi.ink"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5005d4b1-cd76-5176-92c3-55941a0d2ab6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-07T01:25:39Z","modified":"2026-01-07T01:25:39Z","name":"Phishing domain: a.befid.top","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/a.befid.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a.befid.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-07T01:25:39Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a.befid.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b17143fc-eff5-5401-a136-1f1a96eff8a0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-12T06:40:08Z","modified":"2026-08-12T06:40:08Z","name":"Phishing domain: a.bitfinex-exchange.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/a.bitfinex-exchange.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a.bitfinex-exchange.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-12T06:40:08Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a.bitfinex-exchange.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f2668c5-70f5-5400-9e5b-367bdc68bd80","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-01T16:22:46Z","modified":"2026-04-01T16:22:46Z","name":"Phishing domain: a.chainlink.gu.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/a.chainlink.gu.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a.chainlink.gu.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-01T16:22:46Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a.chainlink.gu.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--60e1cd58-2e09-52e9-8403-78305cb96975","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-20T17:00:33Z","modified":"2025-09-20T17:00:33Z","name":"Phishing domain: a.core-transtrack.info","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/a.core-transtrack.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a.core-transtrack.info']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-20T17:00:33Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a.core-transtrack.info"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4002cb9-98f4-532b-abb8-08c4c6f34bc7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-07T01:27:29Z","modified":"2026-01-07T01:27:29Z","name":"Phishing domain: a.crypto-eth.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Crypto.com. Report & evidence: https://phishdestroy.io/domain/a.crypto-eth.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a.crypto-eth.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-07T01:27:29Z","labels":["malicious-activity","phishing","brand:crypto.com"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a.crypto-eth.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcf2f458-754b-572b-9edd-4a98f38c9551","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-07T01:27:05Z","modified":"2026-01-07T01:27:05Z","name":"Phishing domain: a.crypto-wallet4.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Crypto.com. Report & evidence: https://phishdestroy.io/domain/a.crypto-wallet4.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a.crypto-wallet4.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-07T01:27:05Z","labels":["malicious-activity","phishing","brand:crypto.com"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a.crypto-wallet4.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e3601c5-b569-5b0d-82f5-6a81e97298bf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-07T01:28:14Z","modified":"2026-01-07T01:28:14Z","name":"Phishing domain: a.ethcoin.vip","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/a.ethcoin.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a.ethcoin.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-07T01:28:14Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a.ethcoin.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0aa4b46c-565e-5bf6-bddb-9b8a5fcf33aa","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-23T15:50:39Z","modified":"2026-01-23T15:50:39Z","name":"Phishing domain: a.gatavalen.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/a.gatavalen.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a.gatavalen.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-23T15:50:39Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a.gatavalen.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbad3815-9189-571b-9349-ab1cf9c893b5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-12T15:43:31Z","modified":"2026-04-12T15:43:31Z","name":"Phishing domain: a.gobookroom.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating airbnb. Report & evidence: https://phishdestroy.io/domain/a.gobookroom.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a.gobookroom.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-12T15:43:31Z","labels":["malicious-activity","phishing","brand:airbnb"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a.gobookroom.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aaa2c9a3-af21-5b4b-afbe-e5ddf69ee81f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-23T12:52:31Z","modified":"2025-11-23T12:52:31Z","name":"Phishing domain: a.hkevpower.vip","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/a.hkevpower.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a.hkevpower.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-23T12:52:31Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a.hkevpower.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--75b0faf5-5ca0-5b96-b338-e542fec24513","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-08T12:17:39Z","modified":"2025-11-08T12:17:39Z","name":"Phishing domain: a.jiquan100.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Apple. Report & evidence: https://phishdestroy.io/domain/a.jiquan100.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a.jiquan100.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-08T12:17:39Z","labels":["malicious-activity","phishing","brand:apple"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a.jiquan100.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--08edbc65-fa4b-55e5-a5e1-7d0427c025e1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:20Z","modified":"2026-02-26T23:20:20Z","name":"Phishing domain: a.kryllion.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ethereum. Report & evidence: https://phishdestroy.io/domain/a.kryllion.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a.kryllion.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:20Z","labels":["malicious-activity","phishing","brand:ethereum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a.kryllion.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ede7b1b-7066-5bc7-98ec-72cd83222bd8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-15T05:05:28Z","modified":"2026-07-15T05:05:28Z","name":"Phishing domain: a.laohaokk.vip","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating MetaMask. Report & evidence: https://phishdestroy.io/domain/a.laohaokk.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a.laohaokk.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-15T05:05:28Z","labels":["malicious-activity","phishing","brand:metamask"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a.laohaokk.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf3bb78e-2f2c-5e6f-9e42-773f72764d84","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:29Z","modified":"2026-02-26T23:19:29Z","name":"Phishing domain: a.linkairdrop.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aave. Report & evidence: https://phishdestroy.io/domain/a.linkairdrop.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a.linkairdrop.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:29Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a.linkairdrop.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4dee2408-97c3-53d8-9d98-ebe4c66df083","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:40Z","modified":"2026-02-26T23:22:40Z","name":"Phishing domain: a.linkforfree.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aave. Report & evidence: https://phishdestroy.io/domain/a.linkforfree.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a.linkforfree.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:40Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a.linkforfree.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--05e36183-9cea-53be-a3c3-52693c13d5ac","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:06Z","modified":"2026-02-26T23:20:06Z","name":"Phishing domain: a.linkgift.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aave. Report & evidence: https://phishdestroy.io/domain/a.linkgift.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a.linkgift.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:06Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a.linkgift.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3647aa51-c1b0-5a5b-be65-3637484d14f0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-06T18:06:50Z","modified":"2026-07-06T18:06:50Z","name":"Phishing domain: a.mm-comex.one","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/a.mm-comex.one","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a.mm-comex.one']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-06T18:06:50Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a.mm-comex.one"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--969833ee-7c1c-5492-9984-3d558e715b23","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-07T17:30:39Z","modified":"2025-08-07T17:30:39Z","name":"Phishing domain: a.quantumpowerpros.cam","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating base. Report & evidence: https://phishdestroy.io/domain/a.quantumpowerpros.cam","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a.quantumpowerpros.cam']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-07T17:30:39Z","labels":["malicious-activity","phishing","brand:base"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a.quantumpowerpros.cam"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--abf935b8-193d-5553-b215-93687908c0eb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:07Z","modified":"2026-02-26T23:21:07Z","name":"Phishing domain: a.resolverdashprotocol.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/a.resolverdashprotocol.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a.resolverdashprotocol.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a.resolverdashprotocol.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2b85f4f-1a68-51d5-81e8-18e4817e8176","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-12T12:41:55Z","modified":"2025-11-12T12:41:55Z","name":"Phishing domain: a.u4mcm.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating base. Report & evidence: https://phishdestroy.io/domain/a.u4mcm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a.u4mcm.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-12T12:41:55Z","labels":["malicious-activity","phishing","brand:base"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a.u4mcm.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf659a1f-cbfd-597e-86a3-51d53b88e99f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-07T01:26:19Z","modified":"2026-01-07T01:26:19Z","name":"Phishing domain: a.usd-coin.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating base. Report & evidence: https://phishdestroy.io/domain/a.usd-coin.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a.usd-coin.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-07T01:26:19Z","labels":["malicious-activity","phishing","brand:base"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a.usd-coin.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb611fe7-010b-5744-ae41-17eacb7979fc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-07T01:25:18Z","modified":"2026-01-07T01:25:18Z","name":"Phishing domain: a.usdceth.buzz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/a.usdceth.buzz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a.usdceth.buzz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-07T01:25:18Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a.usdceth.buzz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c835f34c-11fc-57d7-9a50-32b67e018631","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-07T01:23:32Z","modified":"2026-01-07T01:23:32Z","name":"Phishing domain: a.usdceth.work","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating base. Report & evidence: https://phishdestroy.io/domain/a.usdceth.work","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a.usdceth.work']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-07T01:23:32Z","labels":["malicious-activity","phishing","brand:base"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a.usdceth.work"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--83c4d4d8-4b57-57dd-a7e5-7d2812596aa5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-26T23:29:21Z","modified":"2025-10-26T23:29:21Z","name":"Phishing domain: a.usdcqwe.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/a.usdcqwe.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a.usdcqwe.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-26T23:29:21Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a.usdcqwe.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d51fc06-4e2e-5943-b571-f5b65263ef34","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-27T10:24:23Z","modified":"2026-04-27T10:24:23Z","name":"Phishing domain: a.vilo.click","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/a.vilo.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a.vilo.click']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-27T10:24:23Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a.vilo.click"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ececdf7-757f-5cd6-9c98-e770098e5c39","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-28T19:25:26Z","modified":"2026-03-28T19:25:26Z","name":"Phishing domain: a0-24x.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/a0-24x.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a0-24x.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-28T19:25:26Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a0-24x.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--086f5c0a-75e7-5286-9106-b7a123067270","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-28T18:07:30Z","modified":"2026-07-28T18:07:30Z","name":"Phishing domain: a01i-w3bm1a10.wasmer.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/a01i-w3bm1a10.wasmer.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a01i-w3bm1a10.wasmer.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-28T18:07:30Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a01i-w3bm1a10.wasmer.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1f147fa-a5a2-59f1-ba29-920ef16b52ed","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:50Z","modified":"2026-02-26T23:19:50Z","name":"Phishing domain: a0652d06-acf3-4f4c-b661-7221717de5b2.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bancolombia. Report & evidence: https://phishdestroy.io/domain/a0652d06-acf3-4f4c-b661-7221717de5b2.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a0652d06-acf3-4f4c-b661-7221717de5b2.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:50Z","labels":["malicious-activity","phishing","brand:bancolombia"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a0652d06-acf3-4f4c-b661-7221717de5b2.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0974ca11-f53d-5f55-8f92-5ebaaadac8c1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-11T18:21:45Z","modified":"2026-08-11T18:21:45Z","name":"Phishing domain: a0c31f.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/a0c31f.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a0c31f.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-11T18:21:45Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a0c31f.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e12b490d-8d53-5d54-ae94-29d4992ee423","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T12:02:03Z","modified":"2026-07-27T12:02:03Z","name":"Phishing domain: a0e6.foodle.su","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/a0e6.foodle.su","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a0e6.foodle.su']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T12:02:03Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a0e6.foodle.su"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--565a9975-a5c0-526f-98b5-c6afb5f98397","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-17T14:18:42Z","modified":"2026-06-17T14:18:42Z","name":"Phishing domain: a0lp34.weebly.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aol. Report & evidence: https://phishdestroy.io/domain/a0lp34.weebly.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a0lp34.weebly.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-17T14:18:42Z","labels":["malicious-activity","phishing","brand:aol"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a0lp34.weebly.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ab7fe0c-24b4-5d5d-8d77-e32c5e4baf56","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-11T03:07:44Z","modified":"2026-04-11T03:07:44Z","name":"Phishing domain: a0x.ai-cryptolist.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/a0x.ai-cryptolist.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a0x.ai-cryptolist.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-11T03:07:44Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a0x.ai-cryptolist.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fb1e778-03a5-50b9-a7fc-783aae7cc5f5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-30T06:33:27Z","modified":"2026-07-30T06:33:27Z","name":"Phishing domain: a1-kraken.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Kraken. Report & evidence: https://phishdestroy.io/domain/a1-kraken.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a1-kraken.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-30T06:33:27Z","labels":["malicious-activity","phishing","brand:kraken"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a1-kraken.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--323162e8-ac7e-51f0-9f72-3916cec54b35","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-12T11:05:21Z","modified":"2026-06-12T11:05:21Z","name":"Phishing domain: a1270050.xsph.ru","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/a1270050.xsph.ru","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a1270050.xsph.ru']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-12T11:05:21Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a1270050.xsph.ru"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--643ae1be-f18e-54e0-a23d-90539a241b81","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-01T15:07:41Z","modified":"2026-05-01T15:07:41Z","name":"Phishing domain: a131c.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/a131c.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a131c.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-01T15:07:41Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a131c.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--123a7484-f278-5fa8-bbfc-4977fb61e106","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-12T03:28:54Z","modified":"2026-08-12T03:28:54Z","name":"Phishing domain: a1406b.arcadejafet.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/a1406b.arcadejafet.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a1406b.arcadejafet.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-12T03:28:54Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a1406b.arcadejafet.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--70ec2c4c-b855-5401-a66d-1364da49b69d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-11T18:29:30Z","modified":"2026-08-11T18:29:30Z","name":"Phishing domain: a1a4ab.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/a1a4ab.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a1a4ab.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-11T18:29:30Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a1a4ab.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf307ec0-7c9d-58e0-862d-1155e4c0ebf4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-23T12:20:36Z","modified":"2025-12-23T12:20:36Z","name":"Phishing domain: a1ab1bf7.source-40r.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/a1ab1bf7.source-40r.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a1ab1bf7.source-40r.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-23T12:20:36Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a1ab1bf7.source-40r.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad86f753-6dba-5870-8e24-849c9367eb21","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-10T11:52:19Z","modified":"2026-06-10T11:52:19Z","name":"Phishing domain: a1expressdc.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/a1expressdc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a1expressdc.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-10T11:52:19Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a1expressdc.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6fc9de4-4685-5bae-a87b-dd442e2498d1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T19:48:18Z","modified":"2026-08-09T19:48:18Z","name":"Phishing domain: a1profx.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating google. Report & evidence: https://phishdestroy.io/domain/a1profx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a1profx.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T19:48:18Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a1profx.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c45fe3cc-f1d2-5edb-b913-df0ec34bb707","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-07T12:58:37Z","modified":"2026-03-07T12:58:37Z","name":"Phishing domain: a1rdrop.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/a1rdrop.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a1rdrop.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-07T12:58:37Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a1rdrop.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9be8e4c-f85e-5cec-8757-51e45993c7a5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-31T16:50:11Z","modified":"2026-03-31T16:50:11Z","name":"Phishing domain: a2.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/a2.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a2.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-31T16:50:11Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a2.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--57012af3-c85c-5dd5-89cf-ff835a199168","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-12T11:15:36Z","modified":"2026-06-12T11:15:36Z","name":"Phishing domain: a224t3r6nsenwjmwrhhbnup3pujo7xtqpnshddqfkdwr32z3pgba.turbo-gateway.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/a224t3r6nsenwjmwrhhbnup3pujo7xtqpnshddqfkdwr32z3pgba.turbo-gateway.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a224t3r6nsenwjmwrhhbnup3pujo7xtqpnshddqfkdwr32z3pgba.turbo-gateway.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-12T11:15:36Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a224t3r6nsenwjmwrhhbnup3pujo7xtqpnshddqfkdwr32z3pgba.turbo-gateway.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a674fe9-b516-531f-b91a-c985fa0ab45b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:25Z","modified":"2026-02-26T23:24:25Z","name":"Phishing domain: a25365.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/a25365.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a25365.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:25Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a25365.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3070af7-6730-5670-b1fc-56e1adfbc67f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:09Z","modified":"2026-02-26T23:23:09Z","name":"Phishing domain: a2683bfe.conwa.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating ledger. Report & evidence: https://phishdestroy.io/domain/a2683bfe.conwa.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a2683bfe.conwa.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:09Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a2683bfe.conwa.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--93b75a4b-60d5-500a-8871-f99c6a6bd24b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-09T15:15:37Z","modified":"2026-04-09T15:15:37Z","name":"Phishing domain: a274.outsource.dk","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/a274.outsource.dk","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a274.outsource.dk']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-09T15:15:37Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a274.outsource.dk"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5fa503c-8ff1-5ec2-9c53-32fc31c624a0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T15:53:17Z","modified":"2026-08-09T15:53:17Z","name":"Phishing domain: a28cdb.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/a28cdb.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a28cdb.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T15:53:17Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a28cdb.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8eb4fa56-f383-530c-bc6a-f13733eacfd7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T16:06:55Z","modified":"2026-08-09T16:06:55Z","name":"Phishing domain: a31b2c.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/a31b2c.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a31b2c.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T16:06:55Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a31b2c.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--74260f59-429a-5596-89d0-cf05cd9230e4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-11T18:25:33Z","modified":"2026-08-11T18:25:33Z","name":"Phishing domain: a31cf6.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/a31cf6.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a31cf6.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-11T18:25:33Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a31cf6.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba91fad0-60c4-546a-b5a7-66969beb4cad","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-07T14:58:08Z","modified":"2025-12-07T14:58:08Z","name":"Phishing domain: a34n.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/a34n.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a34n.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-07T14:58:08Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a34n.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad306c13-7680-5d8f-966a-659cdc8f552d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:51Z","modified":"2026-02-26T23:21:51Z","name":"Phishing domain: a39f.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/a39f.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a39f.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:51Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a39f.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a410e8e1-2fd8-5f8d-8bf0-e48310e3455b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-28T18:07:24Z","modified":"2026-07-28T18:07:24Z","name":"Phishing domain: a43h0-jjy-v5grc9-2ko-6sm3.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/a43h0-jjy-v5grc9-2ko-6sm3.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a43h0-jjy-v5grc9-2ko-6sm3.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-28T18:07:24Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a43h0-jjy-v5grc9-2ko-6sm3.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--90f5eb05-8d93-5530-b95d-2cca89fe6c21","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T15:50:08Z","modified":"2026-08-09T15:50:08Z","name":"Phishing domain: a4538b.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/a4538b.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a4538b.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T15:50:08Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a4538b.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--faeb75b1-8b90-5794-b3af-3b89a2b4d455","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-08T00:33:30Z","modified":"2025-12-08T00:33:30Z","name":"Phishing domain: a45l.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/a45l.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a45l.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-08T00:33:30Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a45l.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--677d4e4d-540c-5ac9-b619-22200bf0783f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-24T14:59:39Z","modified":"2026-07-24T14:59:39Z","name":"Phishing domain: a48.milikrumah.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/a48.milikrumah.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a48.milikrumah.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-24T14:59:39Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a48.milikrumah.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a67ade97-5f22-538c-a377-2e01f3569b8b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-05T20:16:50Z","modified":"2026-08-05T20:16:50Z","name":"Phishing domain: a4nvmg5g5ykbcvr4wjoj752e3spcrp2js6vr7ogzuwsnmt75ghjq.arweave.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating discord. Report & evidence: https://phishdestroy.io/domain/a4nvmg5g5ykbcvr4wjoj752e3spcrp2js6vr7ogzuwsnmt75ghjq.arweave.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a4nvmg5g5ykbcvr4wjoj752e3spcrp2js6vr7ogzuwsnmt75ghjq.arweave.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-05T20:16:50Z","labels":["malicious-activity","phishing","brand:discord"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a4nvmg5g5ykbcvr4wjoj752e3spcrp2js6vr7ogzuwsnmt75ghjq.arweave.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d88b6ac-3ddd-5358-901c-6f5c5213b82b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-13T20:10:54Z","modified":"2026-08-13T20:10:54Z","name":"Phishing domain: a51842.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/a51842.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a51842.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-13T20:10:54Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a51842.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f55de57-43de-5fc9-9ae6-e087f2d52093","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-19T03:19:46Z","modified":"2026-04-19T03:19:46Z","name":"Phishing domain: a51l.sekhemonline.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/a51l.sekhemonline.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a51l.sekhemonline.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-19T03:19:46Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a51l.sekhemonline.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--24fd589c-524a-571a-830a-664b221e0253","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-29T11:24:26Z","modified":"2025-12-29T11:24:26Z","name":"Phishing domain: a56i.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/a56i.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a56i.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-29T11:24:26Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a56i.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfa38415-45ef-55e8-b0b6-1d4474e3fa14","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:44Z","modified":"2026-02-26T23:23:44Z","name":"Phishing domain: a56x.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/a56x.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a56x.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:44Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a56x.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bf09495-53ed-5647-a77d-fa37d05b84ee","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:05Z","modified":"2026-02-26T23:24:05Z","name":"Phishing domain: a57a.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/a57a.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a57a.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:05Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a57a.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c66716b-749a-5bf9-a52a-35801a214782","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:49Z","modified":"2026-02-26T23:20:49Z","name":"Phishing domain: a57v.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/a57v.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a57v.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:49Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a57v.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddde8d6e-4619-5674-8e5f-e3e9f46a799d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-08T01:33:07Z","modified":"2026-08-08T01:33:07Z","name":"Phishing domain: a582kp.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating MetaMask. Report & evidence: https://phishdestroy.io/domain/a582kp.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a582kp.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-08T01:33:07Z","labels":["malicious-activity","phishing","brand:metamask"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a582kp.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--419f9ddf-bb79-50b4-ad19-42da7830f4f2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-08T16:37:13Z","modified":"2026-06-08T16:37:13Z","name":"Phishing domain: a5d65xpikjpcrkuot6mppkxp5dnnfefzjpldh4uqlg7svvki3zxq.arweave.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/a5d65xpikjpcrkuot6mppkxp5dnnfefzjpldh4uqlg7svvki3zxq.arweave.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a5d65xpikjpcrkuot6mppkxp5dnnfefzjpldh4uqlg7svvki3zxq.arweave.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-08T16:37:13Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a5d65xpikjpcrkuot6mppkxp5dnnfefzjpldh4uqlg7svvki3zxq.arweave.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb47c2bc-53cc-5884-8ffb-4eedb3d3a415","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-13T21:07:19Z","modified":"2026-08-13T21:07:19Z","name":"Phishing domain: a61f41.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/a61f41.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a61f41.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-13T21:07:19Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a61f41.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--78613852-868b-57b6-b1d3-2d84d2b7bb6b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T14:06:29Z","modified":"2026-01-02T14:06:29Z","name":"Phishing domain: a61y.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/a61y.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a61y.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T14:06:29Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a61y.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecc968b5-85c9-5071-89f2-2a906172def2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-05T12:18:39Z","modified":"2026-01-05T12:18:39Z","name":"Phishing domain: a63k.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/a63k.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a63k.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-05T12:18:39Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a63k.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e19ecf95-71a6-58e6-b6fa-c7bee0b9a0e4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-04T14:58:29Z","modified":"2026-01-04T14:58:29Z","name":"Phishing domain: a63t.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/a63t.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a63t.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-04T14:58:29Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a63t.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c719a5c1-7962-5996-8feb-e36cf452dd83","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:48Z","modified":"2026-02-26T23:20:48Z","name":"Phishing domain: a6622333.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/a6622333.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a6622333.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:48Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a6622333.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd75f229-638a-5d01-a088-c96270bd01b9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:05Z","modified":"2026-02-26T23:24:05Z","name":"Phishing domain: a66eaedd.connewal-330.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Trezor. Report & evidence: https://phishdestroy.io/domain/a66eaedd.connewal-330.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a66eaedd.connewal-330.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:05Z","labels":["malicious-activity","phishing","brand:trezor"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a66eaedd.connewal-330.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--650d22f4-131b-53f4-a22e-379638af9143","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:03Z","modified":"2026-02-26T23:21:03Z","name":"Phishing domain: a66g.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/a66g.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a66g.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:03Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a66g.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--10981bc4-fa8e-54a6-9d07-258e87a8eb01","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:11Z","modified":"2026-02-26T23:24:11Z","name":"Phishing domain: a67k.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/a67k.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a67k.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:11Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a67k.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--97e3e4ee-954d-5b15-b9e6-ce08dc141113","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:15Z","modified":"2026-02-26T23:21:15Z","name":"Phishing domain: a67t.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/a67t.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a67t.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:15Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a67t.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c4eb1e0-b5be-5fa2-83df-f60498767299","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-13T15:54:44Z","modified":"2025-11-13T15:54:44Z","name":"Phishing domain: a67z.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating celer. Report & evidence: https://phishdestroy.io/domain/a67z.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a67z.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-13T15:54:44Z","labels":["malicious-activity","phishing","brand:celer"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a67z.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae3fb93a-39cc-5dc8-86f8-aff3fd3d4762","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:06Z","modified":"2026-02-26T23:21:06Z","name":"Phishing domain: a69r.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/a69r.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a69r.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:06Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a69r.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f78db354-6fad-5433-9e07-02f8456f65cd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:00Z","modified":"2026-02-26T23:24:00Z","name":"Phishing domain: a6a80d41.vivewss.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/a6a80d41.vivewss.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a6a80d41.vivewss.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:00Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a6a80d41.vivewss.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a923f919-44cf-50df-a510-407786369b3a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-12T03:23:02Z","modified":"2026-08-12T03:23:02Z","name":"Phishing domain: a6c19a.arcadejafet.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/a6c19a.arcadejafet.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a6c19a.arcadejafet.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-12T03:23:02Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a6c19a.arcadejafet.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7af521e-8fa6-5390-b426-bbbe43999407","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-13T20:34:10Z","modified":"2026-08-13T20:34:10Z","name":"Phishing domain: a6e897.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/a6e897.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a6e897.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-13T20:34:10Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a6e897.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--483c15a0-02e0-5060-863c-c2cea99cc6bf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-02T00:20:49Z","modified":"2025-12-02T00:20:49Z","name":"Phishing domain: a708.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bet365. Report & evidence: https://phishdestroy.io/domain/a708.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a708.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-02T00:20:49Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a708.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a28bf3f-cb97-5398-b9ea-aec604f59c5e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-22T03:32:54Z","modified":"2026-01-22T03:32:54Z","name":"Phishing domain: a72e.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/a72e.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a72e.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-22T03:32:54Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a72e.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e40e1d31-5af7-5899-9f00-baecc9a4daa7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-07T03:35:25Z","modified":"2026-02-07T03:35:25Z","name":"Phishing domain: a72fcb49-d28a-4223-9338-f24d8ccf01b9-00-rzey68jeql2m.kirk.replit.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating AT&T. Report & evidence: https://phishdestroy.io/domain/a72fcb49-d28a-4223-9338-f24d8ccf01b9-00-rzey68jeql2m.kirk.replit.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a72fcb49-d28a-4223-9338-f24d8ccf01b9-00-rzey68jeql2m.kirk.replit.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-07T03:35:25Z","labels":["malicious-activity","phishing","brand:at&t"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a72fcb49-d28a-4223-9338-f24d8ccf01b9-00-rzey68jeql2m.kirk.replit.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0a23ab1-a40e-5859-9a0f-004f8ac09848","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-26T03:29:27Z","modified":"2026-01-26T03:29:27Z","name":"Phishing domain: a73m.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/a73m.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a73m.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-26T03:29:27Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a73m.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa47640d-06c9-51e0-b6c0-6f05cb26968d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-26T03:31:06Z","modified":"2026-01-26T03:31:06Z","name":"Phishing domain: a73o.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/a73o.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a73o.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-26T03:31:06Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a73o.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc5cb145-7346-5def-84be-409ff285cc39","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-03T04:19:19Z","modified":"2026-02-03T04:19:19Z","name":"Phishing domain: a75l.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/a75l.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a75l.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-03T04:19:19Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a75l.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c02bfc8f-f832-5c52-a967-220d7a0b875b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-11T03:32:51Z","modified":"2026-02-11T03:32:51Z","name":"Phishing domain: a77c.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/a77c.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a77c.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-11T03:32:51Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a77c.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e17bcf96-2a8e-535a-9fee-49d4f55f335e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T15:47:39Z","modified":"2026-08-09T15:47:39Z","name":"Phishing domain: a78e72.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/a78e72.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a78e72.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T15:47:39Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a78e72.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b58e4443-5f4d-59df-8007-a7596a8f1a84","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:30Z","modified":"2026-02-26T23:20:30Z","name":"Phishing domain: a79e.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/a79e.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a79e.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:30Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a79e.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d616d79-1efc-5ea6-902a-ca4a8824a948","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-23T12:31:30Z","modified":"2025-11-23T12:31:30Z","name":"Phishing domain: a7a5.exchange","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bitget. Report & evidence: https://phishdestroy.io/domain/a7a5.exchange","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a7a5.exchange']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-23T12:31:30Z","labels":["malicious-activity","phishing","brand:bitget"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a7a5.exchange"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d2c79f1-f3d2-5e71-9a73-73b39c5136ed","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-07T12:37:28Z","modified":"2025-11-07T12:37:28Z","name":"Phishing domain: a7rmm8.coinbase.property","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/a7rmm8.coinbase.property","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a7rmm8.coinbase.property']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-07T12:37:28Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a7rmm8.coinbase.property"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e2d590e-2860-5d90-be95-46615a34a314","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-08T16:37:19Z","modified":"2026-06-08T16:37:19Z","name":"Phishing domain: a7xubf3q5lehz4bwkcra5kedv6b5rmwurup6twsgnexo5k2dsniq.arweave.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/a7xubf3q5lehz4bwkcra5kedv6b5rmwurup6twsgnexo5k2dsniq.arweave.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a7xubf3q5lehz4bwkcra5kedv6b5rmwurup6twsgnexo5k2dsniq.arweave.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-08T16:37:19Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a7xubf3q5lehz4bwkcra5kedv6b5rmwurup6twsgnexo5k2dsniq.arweave.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cb66a8c-b123-57ef-8df6-ab1686f4a346","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-09T15:29:52Z","modified":"2026-02-09T15:29:52Z","name":"Phishing domain: a81i.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/a81i.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a81i.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-09T15:29:52Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a81i.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5710ad82-f171-5a22-b9b1-cd0c8676508b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-10T16:24:54Z","modified":"2026-02-10T16:24:54Z","name":"Phishing domain: a81m.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/a81m.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a81m.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-10T16:24:54Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a81m.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4c24465-ac40-55ff-8a22-1ecc631da70b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-09T03:27:40Z","modified":"2026-03-09T03:27:40Z","name":"Phishing domain: a85p.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/a85p.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a85p.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-09T03:27:40Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a85p.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bd3af80-a557-5165-b2a7-984c09a0a2da","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-07T15:48:21Z","modified":"2026-03-07T15:48:21Z","name":"Phishing domain: a85x.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/a85x.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a85x.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-07T15:48:21Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a85x.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--af103d03-8ba6-5e1c-9bbe-6f05a2eb31a3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-14T15:37:51Z","modified":"2026-03-14T15:37:51Z","name":"Phishing domain: a87y.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/a87y.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a87y.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-14T15:37:51Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a87y.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--05dad6a4-9ec9-5fdc-832c-e5262fe820ba","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:03Z","modified":"2026-02-26T23:20:03Z","name":"Phishing domain: a8a-docudcvpoint.zhenglaiselectric.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/a8a-docudcvpoint.zhenglaiselectric.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a8a-docudcvpoint.zhenglaiselectric.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:03Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a8a-docudcvpoint.zhenglaiselectric.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--645f7d27-8f3c-5d30-b303-6347b5e04fdf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-06T19:54:06Z","modified":"2026-02-06T19:54:06Z","name":"Phishing domain: a8vx.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/a8vx.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a8vx.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-06T19:54:06Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a8vx.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c80db1f-548f-5523-bbcb-f41f51e44abe","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-22T23:47:21Z","modified":"2026-06-22T23:47:21Z","name":"Phishing domain: a8xvwus.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/a8xvwus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a8xvwus.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-22T23:47:21Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a8xvwus.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea254d10-5fce-53f4-898d-cf5694dceacd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: a91597.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/a91597.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a91597.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a91597.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--31ffea55-514f-547c-b5d0-cdd158fa95cc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-19T12:41:24Z","modified":"2025-11-19T12:41:24Z","name":"Phishing domain: a91a.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/a91a.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a91a.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-19T12:41:24Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a91a.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7a5033e-422d-5f3c-a00e-c673781dd811","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-20T10:09:29Z","modified":"2025-12-20T10:09:29Z","name":"Phishing domain: a9342e21.memo-ba1.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/a9342e21.memo-ba1.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a9342e21.memo-ba1.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-20T10:09:29Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a9342e21.memo-ba1.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e298c8fa-49a1-5945-8da9-4d0319d8e7ca","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:40Z","modified":"2026-02-26T23:23:40Z","name":"Phishing domain: a957683e.ajkevmslay.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/a957683e.ajkevmslay.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a957683e.ajkevmslay.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:40Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a957683e.ajkevmslay.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c67b367-1c7d-5f29-8582-c4d3c13afabb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-11T18:26:43Z","modified":"2026-08-11T18:26:43Z","name":"Phishing domain: a95e7b.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/a95e7b.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a95e7b.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-11T18:26:43Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a95e7b.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f24930bd-5cf7-5a2e-805a-7c13202183b3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-06T14:54:27Z","modified":"2026-07-06T14:54:27Z","name":"Phishing domain: a9659b55.vip","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/a9659b55.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'a9659b55.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-06T14:54:27Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/a9659b55.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--13ab137d-bcba-55b3-87a0-0987d05ddc08","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-27T22:42:07Z","modified":"2026-03-27T22:42:07Z","name":"Phishing domain: aa-auto-sales.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aa-auto-sales.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aa-auto-sales.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-27T22:42:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aa-auto-sales.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3c22e57-9d60-5794-856d-640435d45ff3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-06T22:42:29Z","modified":"2026-07-06T22:42:29Z","name":"Phishing domain: aa-careers.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating americanairlines. Report & evidence: https://phishdestroy.io/domain/aa-careers.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aa-careers.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-06T22:42:29Z","labels":["malicious-activity","phishing","brand:americanairlines"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aa-careers.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d8bd9ba-1cad-5b9c-ba70-61178d891baa","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-24T17:43:07Z","modified":"2026-07-24T17:43:07Z","name":"Phishing domain: aa-deepseek.com.cn","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aa-deepseek.com.cn","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aa-deepseek.com.cn']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-24T17:43:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aa-deepseek.com.cn"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b1f0cb2-b6a5-5ff8-9d76-b78fd3ecaab5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-26T17:22:47Z","modified":"2025-09-26T17:22:47Z","name":"Phishing domain: aa-dex-v3.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aave. Report & evidence: https://phishdestroy.io/domain/aa-dex-v3.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aa-dex-v3.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-26T17:22:47Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aa-dex-v3.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a58263bf-e18a-5f1d-abe3-1e520400cc71","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-28T19:04:25Z","modified":"2025-08-28T19:04:25Z","name":"Phishing domain: aa-okx.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating OKX. Report & evidence: https://phishdestroy.io/domain/aa-okx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aa-okx.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-28T19:04:25Z","labels":["malicious-activity","phishing","brand:okx"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aa-okx.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc2ffb36-e68a-5b57-a76b-061f9a6729ae","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-13T02:27:12Z","modified":"2026-07-13T02:27:12Z","name":"Phishing domain: aa.levan.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating whatsapp. Report & evidence: https://phishdestroy.io/domain/aa.levan.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aa.levan.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-13T02:27:12Z","labels":["malicious-activity","phishing","brand:whatsapp"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aa.levan.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--63a12d12-761e-51e2-b962-1b51cb9501f3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-27T17:03:03Z","modified":"2025-11-27T17:03:03Z","name":"Phishing domain: aa.skinpat.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating China Central Television. Report & evidence: https://phishdestroy.io/domain/aa.skinpat.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aa.skinpat.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-27T17:03:03Z","labels":["malicious-activity","phishing","brand:china central television"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aa.skinpat.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c684176-d3fc-53e3-a923-32fa07e2bf83","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-08T17:26:41Z","modified":"2026-02-08T17:26:41Z","name":"Phishing domain: aa.solcenter.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/aa.solcenter.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aa.solcenter.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-08T17:26:41Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aa.solcenter.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--09f5c8d0-6eef-50aa-9fd2-b7c7fd098db1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-31T04:31:06Z","modified":"2025-08-31T04:31:06Z","name":"Phishing domain: aa.stnred2.sa.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating chase. Report & evidence: https://phishdestroy.io/domain/aa.stnred2.sa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aa.stnred2.sa.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-31T04:31:06Z","labels":["malicious-activity","phishing","brand:chase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aa.stnred2.sa.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c90f8185-673e-5a90-933b-1a2f356d7544","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-16T14:21:52Z","modified":"2026-06-16T14:21:52Z","name":"Phishing domain: aa1998brazil.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aa1998brazil.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aa1998brazil.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-16T14:21:52Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aa1998brazil.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--28ace8c1-9155-5952-a760-d06e466a1b21","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:52Z","modified":"2026-02-26T23:23:52Z","name":"Phishing domain: aa1ea805.connewal.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating trezor. Report & evidence: https://phishdestroy.io/domain/aa1ea805.connewal.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aa1ea805.connewal.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:52Z","labels":["malicious-activity","phishing","brand:trezor"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aa1ea805.connewal.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--25c276d6-8eed-5e76-a81c-b7ace356f3fb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:43Z","modified":"2026-02-26T23:21:43Z","name":"Phishing domain: aa44.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/aa44.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aa44.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:43Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aa44.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe8074e4-0c29-58b9-99d0-0f21d672fc2b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-03T15:38:27Z","modified":"2026-05-03T15:38:27Z","name":"Phishing domain: aa4est.daorel.ch","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aa4est.daorel.ch","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aa4est.daorel.ch']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-03T15:38:27Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aa4est.daorel.ch"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb22aae8-839b-5a51-943a-3f4e04216db1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-14T19:53:04Z","modified":"2026-02-14T19:53:04Z","name":"Phishing domain: aa666.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/aa666.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aa666.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-14T19:53:04Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aa666.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd3d83bc-70ca-55cc-9304-0b7cb05a2097","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-14T19:53:31Z","modified":"2026-02-14T19:53:31Z","name":"Phishing domain: aa667.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/aa667.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aa667.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-14T19:53:31Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aa667.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--95cf71f1-cbcb-5698-8b82-d07f62601ae9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-12T14:23:48Z","modified":"2026-07-12T14:23:48Z","name":"Phishing domain: aa88130.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aa88130.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aa88130.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-12T14:23:48Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aa88130.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccd21293-8ac6-5952-8d81-271a5aaa98fa","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:47Z","modified":"2026-02-26T23:23:47Z","name":"Phishing domain: aaa.aetbaseniorproducts.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aaa.aetbaseniorproducts.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaa.aetbaseniorproducts.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:47Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaa.aetbaseniorproducts.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--41a019c7-8322-575b-93ce-26d01ae80d7f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-08T00:33:55Z","modified":"2025-12-08T00:33:55Z","name":"Phishing domain: aaa.pfz.mybluehost.me","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aaa.pfz.mybluehost.me","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaa.pfz.mybluehost.me']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-08T00:33:55Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaa.pfz.mybluehost.me"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6f53b1c-e9e3-5469-bc79-90a03aa2505e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-24T17:50:13Z","modified":"2026-01-24T17:50:13Z","name":"Phishing domain: aaa.slerf.tools","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/aaa.slerf.tools","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaa.slerf.tools']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-24T17:50:13Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaa.slerf.tools"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb7d7f07-b982-5fbf-b737-fa972189f626","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-04T16:23:11Z","modified":"2026-03-04T16:23:11Z","name":"Phishing domain: aaa4.gotriphotel.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating airbnb. Report & evidence: https://phishdestroy.io/domain/aaa4.gotriphotel.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaa4.gotriphotel.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-04T16:23:11Z","labels":["malicious-activity","phishing","brand:airbnb"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaa4.gotriphotel.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddf7a26a-afcf-5dd9-9966-1c34b6e06c9c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:56Z","modified":"2026-02-26T23:23:56Z","name":"Phishing domain: aaaa5115.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aaaa5115.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaaa5115.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:56Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaaa5115.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9fe933c-d497-5593-b7ec-434677a2da8d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-19T17:37:48Z","modified":"2026-02-19T17:37:48Z","name":"Phishing domain: aaabtc.assetux.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aaabtc.assetux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaabtc.assetux.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-19T17:37:48Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaabtc.assetux.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--be9fc08e-6cc0-5ad6-b11d-ae610f4ae3b7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-02T21:38:49Z","modified":"2026-06-02T21:38:49Z","name":"Phishing domain: aaahub.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aaahub.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaahub.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-02T21:38:49Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaahub.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--613ffa8c-b59d-5b8d-801f-e29cb37c1900","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-20T21:01:55Z","modified":"2026-07-20T21:01:55Z","name":"Phishing domain: aaalen.de","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aaalen.de","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaalen.de']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-20T21:01:55Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaalen.de"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6935819d-f469-593e-a2ea-4b51df549c9f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-14T12:06:29Z","modified":"2026-06-14T12:06:29Z","name":"Phishing domain: aaasz.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aaasz.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaasz.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-14T12:06:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaasz.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--00c325bd-6f41-5745-b8ab-8fa0e97fa09d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-06T14:32:47Z","modified":"2026-08-06T14:32:47Z","name":"Phishing domain: aaavvveeronsss.framer.website","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aaavvveeronsss.framer.website","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaavvveeronsss.framer.website']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-06T14:32:47Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaavvveeronsss.framer.website"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--42c53106-5ee1-5d02-b461-ab6ccb0eaa4f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:05Z","modified":"2026-02-26T23:21:05Z","name":"Phishing domain: aabb.i4zhusao.icu","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aabb.i4zhusao.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aabb.i4zhusao.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:05Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aabb.i4zhusao.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--74b88686-7144-5b7f-9209-4576fa420efc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:53Z","modified":"2026-02-26T23:20:53Z","name":"Phishing domain: aabb.i4zhusao.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating google. Report & evidence: https://phishdestroy.io/domain/aabb.i4zhusao.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aabb.i4zhusao.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:53Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aabb.i4zhusao.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f20ed7aa-7e54-54cc-b4a3-950f3595173f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:58Z","modified":"2026-02-26T23:21:58Z","name":"Phishing domain: aabcd.asrka.my.id","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aabcd.asrka.my.id","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aabcd.asrka.my.id']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:58Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aabcd.asrka.my.id"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a922594-aee5-5daa-8ee4-f2c7644d4d2c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-20T21:01:51Z","modified":"2026-07-20T21:01:51Z","name":"Phishing domain: aabiz.de","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aabiz.de","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aabiz.de']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-20T21:01:51Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aabiz.de"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f25bece0-ab4f-52a9-990e-8910eb3560c5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-13T13:51:21Z","modified":"2026-06-13T13:51:21Z","name":"Phishing domain: aacdl.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aacdl.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aacdl.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-13T13:51:21Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aacdl.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--19dae4c9-ea12-5ecc-87dd-c49d7bbaea98","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:44Z","modified":"2026-02-26T23:21:44Z","name":"Phishing domain: aace-gho.it.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aace-gho.it.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aace-gho.it.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:44Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aace-gho.it.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aab3dd87-1a4c-590e-a74d-d0ebf25fa276","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: aacpublicschools.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aacpublicschools.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aacpublicschools.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aacpublicschools.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a66bd0ef-2cbe-5061-a901-516d5ef9a1a3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-29T21:25:38Z","modified":"2026-05-29T21:25:38Z","name":"Phishing domain: aacreditunioncu.co.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aacreditunioncu.co.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aacreditunioncu.co.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-29T21:25:38Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aacreditunioncu.co.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1889d00-ea8a-56d3-830d-e8baa7fe3e87","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-20T00:55:06Z","modified":"2025-11-20T00:55:06Z","name":"Phishing domain: aad.ttkshop22.vip","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Apple. Report & evidence: https://phishdestroy.io/domain/aad.ttkshop22.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aad.ttkshop22.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-20T00:55:06Z","labels":["malicious-activity","phishing","brand:apple"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aad.ttkshop22.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--094a1c2c-f1f8-52b5-a2eb-7d6259d09b96","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:34Z","modified":"2026-02-26T23:20:34Z","name":"Phishing domain: aaddons-mozilla-org.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/aaddons-mozilla-org.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaddons-mozilla-org.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:34Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaddons-mozilla-org.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--670c3c3f-eb16-5ac9-b6c3-52dcf31a4d65","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-02T02:22:50Z","modified":"2026-08-02T02:22:50Z","name":"Phishing domain: aadhyagoel011-create.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating amazon. Report & evidence: https://phishdestroy.io/domain/aadhyagoel011-create.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aadhyagoel011-create.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-02T02:22:50Z","labels":["malicious-activity","phishing","brand:amazon"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aadhyagoel011-create.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ccf0487-60b5-57b1-ac63-132a76af007a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-22T11:04:32Z","modified":"2025-10-22T11:04:32Z","name":"Phishing domain: aadimarine.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aadimarine.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aadimarine.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-22T11:04:32Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aadimarine.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f37a437-30d3-57d9-80e7-a5788337b314","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-05T04:02:02Z","modified":"2026-05-05T04:02:02Z","name":"Phishing domain: aadityayadav333.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/aadityayadav333.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aadityayadav333.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-05T04:02:02Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aadityayadav333.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0aeda7e7-d177-5241-be7c-10cad7b0a038","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-08T13:22:34Z","modified":"2026-07-08T13:22:34Z","name":"Phishing domain: aagyu.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bridge Scam. Report & evidence: https://phishdestroy.io/domain/aagyu.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aagyu.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-08T13:22:34Z","labels":["malicious-activity","phishing","brand:bridge scam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aagyu.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7ac86c7-9633-5410-8be0-501b0b7246aa","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-07-12T17:57:29Z","modified":"2025-07-12T17:57:29Z","name":"Phishing domain: aaiblondon.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Facebook. Report & evidence: https://phishdestroy.io/domain/aaiblondon.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaiblondon.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-07-12T17:57:29Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaiblondon.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--53d33b81-db7e-530a-93de-5a156d94c755","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-29T15:24:11Z","modified":"2026-05-29T15:24:11Z","name":"Phishing domain: aaincentive.us","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating allegro. Report & evidence: https://phishdestroy.io/domain/aaincentive.us","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaincentive.us']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-29T15:24:11Z","labels":["malicious-activity","phishing","brand:allegro"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaincentive.us"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8306b64f-0b5f-58ce-9781-a8def7a06ee3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-27T17:42:57Z","modified":"2026-01-27T17:42:57Z","name":"Phishing domain: aajukaann-pinjamaannnn.cerdoa.live","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/aajukaann-pinjamaannnn.cerdoa.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aajukaann-pinjamaannnn.cerdoa.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-27T17:42:57Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aajukaann-pinjamaannnn.cerdoa.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e8ecb51-9d1f-5a58-b633-b77173429842","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-15T02:20:35Z","modified":"2026-07-15T02:20:35Z","name":"Phishing domain: aakashrohtela.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating amazon. Report & evidence: https://phishdestroy.io/domain/aakashrohtela.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aakashrohtela.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-15T02:20:35Z","labels":["malicious-activity","phishing","brand:amazon"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aakashrohtela.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--27555ada-165a-5239-8176-6b6b9e761560","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-07T15:45:46Z","modified":"2026-03-07T15:45:46Z","name":"Phishing domain: aakkamfoundation.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aakkamfoundation.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aakkamfoundation.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-07T15:45:46Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aakkamfoundation.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebec607d-4216-5d97-8de2-cae36892b5fe","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-07T03:19:55Z","modified":"2026-04-07T03:19:55Z","name":"Phishing domain: aaktivsipylaterindon.prestocu.biz.id","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating dana. Report & evidence: https://phishdestroy.io/domain/aaktivsipylaterindon.prestocu.biz.id","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaktivsipylaterindon.prestocu.biz.id']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-07T03:19:55Z","labels":["malicious-activity","phishing","brand:dana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaktivsipylaterindon.prestocu.biz.id"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--10db7af8-540c-546f-9f75-9df132a610b9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T05:57:22Z","modified":"2026-02-13T05:57:22Z","name":"Phishing domain: aalfa.cash","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ethereum. Report & evidence: https://phishdestroy.io/domain/aalfa.cash","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aalfa.cash']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T05:57:22Z","labels":["malicious-activity","phishing","brand:ethereum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aalfa.cash"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8be2c597-81ac-50d8-9535-d3d233fea061","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-07T11:09:28Z","modified":"2026-06-07T11:09:28Z","name":"Phishing domain: aamaaltrade.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aamaaltrade.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aamaaltrade.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-07T11:09:28Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aamaaltrade.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f542d02b-3633-586c-a967-924bfbf3db83","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-29T18:30:43Z","modified":"2026-03-29T18:30:43Z","name":"Phishing domain: aamae.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating pumpfun. Report & evidence: https://phishdestroy.io/domain/aamae.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aamae.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-29T18:30:43Z","labels":["malicious-activity","phishing","brand:pumpfun"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aamae.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7191c319-8065-55d7-b55a-0f65190738ce","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-24T16:48:03Z","modified":"2026-02-24T16:48:03Z","name":"Phishing domain: aamazon-tolfre-nummber.webflow.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Amazon. Report & evidence: https://phishdestroy.io/domain/aamazon-tolfre-nummber.webflow.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aamazon-tolfre-nummber.webflow.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-24T16:48:03Z","labels":["malicious-activity","phishing","brand:amazon"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aamazon-tolfre-nummber.webflow.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8664657c-4f0f-5539-bea8-310784e9ba57","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-25T16:52:51Z","modified":"2026-03-25T16:52:51Z","name":"Phishing domain: aamnanoreen2.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/aamnanoreen2.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aamnanoreen2.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-25T16:52:51Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aamnanoreen2.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c951d348-6a05-5aaa-82d1-ae10ff020503","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-10T16:12:39Z","modified":"2026-04-10T16:12:39Z","name":"Phishing domain: aanchalshah2007.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating amazon. Report & evidence: https://phishdestroy.io/domain/aanchalshah2007.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aanchalshah2007.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-10T16:12:39Z","labels":["malicious-activity","phishing","brand:amazon"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aanchalshah2007.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f5275ec-733e-537c-bd16-0c4b0c452c3f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2024-03-26T15:28:08Z","modified":"2024-03-26T15:28:08Z","name":"Phishing domain: aandblawn.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aandblawn.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aandblawn.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2024-03-26T15:28:08Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aandblawn.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1239923-8247-5cec-a487-76bfec409501","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-24T21:20:59Z","modified":"2026-04-24T21:20:59Z","name":"Phishing domain: aandmenterprise.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aandmenterprise.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aandmenterprise.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-24T21:20:59Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aandmenterprise.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ecba51d-4f42-5f69-abe8-61e82ee12362","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:04Z","modified":"2026-02-26T23:22:04Z","name":"Phishing domain: aane-doshbaord.it.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aave. Report & evidence: https://phishdestroy.io/domain/aane-doshbaord.it.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aane-doshbaord.it.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:04Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aane-doshbaord.it.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e75dfaa0-ed4e-5933-a55b-cd032a65c44c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:47Z","modified":"2026-02-26T23:24:47Z","name":"Phishing domain: aane.it.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/aane.it.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aane.it.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:47Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aane.it.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d22fb710-12d7-555b-b83c-41d318709dd9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-20T13:01:08Z","modified":"2026-07-20T13:01:08Z","name":"Phishing domain: aanya900.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating amazon. Report & evidence: https://phishdestroy.io/domain/aanya900.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aanya900.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-20T13:01:08Z","labels":["malicious-activity","phishing","brand:amazon"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aanya900.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b852d3b-f99e-583b-a3b5-de8f153b018a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:48Z","modified":"2026-02-26T23:23:48Z","name":"Phishing domain: aaoe.space","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aave. Report & evidence: https://phishdestroy.io/domain/aaoe.space","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaoe.space']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:48Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaoe.space"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0b4aa5c-c122-542a-8349-b3e4b87f8f69","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-07-12T21:58:39Z","modified":"2025-07-12T21:58:39Z","name":"Phishing domain: aap-ave.bet","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aave. Report & evidence: https://phishdestroy.io/domain/aap-ave.bet","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aap-ave.bet']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-07-12T21:58:39Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aap-ave.bet"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a97fcdee-dbe1-56e8-91d1-7a38c6d063ec","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-07-12T21:59:09Z","modified":"2025-07-12T21:59:09Z","name":"Phishing domain: aap-ave.icu","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aave. Report & evidence: https://phishdestroy.io/domain/aap-ave.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aap-ave.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-07-12T21:59:09Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aap-ave.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--803f0549-c351-5125-b57e-9a0da7b2634b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-07-12T21:52:39Z","modified":"2025-07-12T21:52:39Z","name":"Phishing domain: aap-ave.run","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aave. Report & evidence: https://phishdestroy.io/domain/aap-ave.run","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aap-ave.run']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-07-12T21:52:39Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aap-ave.run"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f5dd30a-27be-5dd9-812f-5c61a888a4aa","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-07-12T23:48:16Z","modified":"2025-07-12T23:48:16Z","name":"Phishing domain: aap-ave.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aave. Report & evidence: https://phishdestroy.io/domain/aap-ave.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aap-ave.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-07-12T23:48:16Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aap-ave.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--26cf5773-1c33-5dda-80ca-1cdd3d30af8f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-22T22:29:12Z","modified":"2026-03-22T22:29:12Z","name":"Phishing domain: aap-coiledger-io.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/aap-coiledger-io.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aap-coiledger-io.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-22T22:29:12Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aap-coiledger-io.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4174f9cd-d365-5e99-a418-a940d8b67f6b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-04T15:08:32Z","modified":"2026-04-04T15:08:32Z","name":"Phishing domain: aap-live-ledgar-enus.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aap-live-ledgar-enus.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aap-live-ledgar-enus.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-04T15:08:32Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aap-live-ledgar-enus.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--874d7ab7-e2cb-5ddd-b9ea-4339c98cf78a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-07T11:02:00Z","modified":"2026-08-07T11:02:00Z","name":"Phishing domain: aaplcat.netlify.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating apple. Report & evidence: https://phishdestroy.io/domain/aaplcat.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaplcat.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-07T11:02:00Z","labels":["malicious-activity","phishing","brand:apple"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaplcat.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--562953e1-b95a-5224-9992-46881d6ba138","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:39Z","modified":"2026-02-26T23:24:39Z","name":"Phishing domain: aaproto.top","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aaproto.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaproto.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:39Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaproto.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--684592df-7061-5f79-83df-b0bae0d1beb0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-29T13:11:39Z","modified":"2026-05-29T13:11:39Z","name":"Phishing domain: aapyx.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aapyx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aapyx.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-29T13:11:39Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aapyx.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d22f353f-e15e-5b0c-ae11-b206b365a2b4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-17T19:01:14Z","modified":"2025-11-17T19:01:14Z","name":"Phishing domain: aareeeve.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aareeeve.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aareeeve.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-17T19:01:14Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aareeeve.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c40ee95d-ccb0-53a8-8579-2f94bea1fec8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:27Z","modified":"2026-02-26T23:24:27Z","name":"Phishing domain: aarkcapital.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aarkcapital.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aarkcapital.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:27Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aarkcapital.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c327dd9-6099-55bb-9e88-782e0ee65a1e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-22T21:40:26Z","modified":"2026-03-22T21:40:26Z","name":"Phishing domain: aarmachain.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aarmachain.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aarmachain.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-22T21:40:26Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aarmachain.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bd5c361-137d-5771-b1fc-0f52e3200d7b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: aarnaai.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aarnaai.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aarnaai.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aarnaai.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--218ae07d-9215-5fd2-bc81-9481b5fc0700","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-12T17:44:31Z","modified":"2026-07-12T17:44:31Z","name":"Phishing domain: aaron-doh.shop","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aaron-doh.shop","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaron-doh.shop']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-12T17:44:31Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaron-doh.shop"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fac4e9ff-9092-5ba2-9c60-0fa127f6623d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: aaron-rent-4g2nbrsdt-aaronmurillo01.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating airbnb. Report & evidence: https://phishdestroy.io/domain/aaron-rent-4g2nbrsdt-aaronmurillo01.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaron-rent-4g2nbrsdt-aaronmurillo01.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing","brand:airbnb"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaron-rent-4g2nbrsdt-aaronmurillo01.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--99a143af-023f-5e21-8b29-ea3ab1c4dadb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-01T02:05:41Z","modified":"2026-06-01T02:05:41Z","name":"Phishing domain: aaroquant.live","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aaroquant.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaroquant.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-01T02:05:41Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaroquant.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--911a7c93-48d1-5aa2-872a-587ca85d985d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T12:07:00Z","modified":"2026-08-09T12:07:00Z","name":"Phishing domain: aarotrade.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Uniswap. Report & evidence: https://phishdestroy.io/domain/aarotrade.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aarotrade.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T12:07:00Z","labels":["malicious-activity","phishing","brand:uniswap"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aarotrade.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad634978-d492-5823-83bb-c5f02712b38f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-14T13:05:22Z","modified":"2026-04-14T13:05:22Z","name":"Phishing domain: aarse2024.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aarse2024.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aarse2024.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-14T13:05:22Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aarse2024.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2f41932-15f9-514d-83a0-e5e3c175acf6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-05T22:01:38Z","modified":"2025-10-05T22:01:38Z","name":"Phishing domain: aarvzs.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/aarvzs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aarvzs.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-05T22:01:38Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aarvzs.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--03b156f6-adc1-5bc2-a2ab-c2411e6498e2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-12T14:19:18Z","modified":"2026-07-12T14:19:18Z","name":"Phishing domain: aaryan171007-cell.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating netflix. Report & evidence: https://phishdestroy.io/domain/aaryan171007-cell.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaryan171007-cell.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-12T14:19:18Z","labels":["malicious-activity","phishing","brand:netflix"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaryan171007-cell.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5e08909-9265-5251-a7d6-399fa62e651b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-20T00:54:11Z","modified":"2025-11-20T00:54:11Z","name":"Phishing domain: aas.ttkshop22.vip","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Apple. Report & evidence: https://phishdestroy.io/domain/aas.ttkshop22.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aas.ttkshop22.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-20T00:54:11Z","labels":["malicious-activity","phishing","brand:apple"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aas.ttkshop22.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc465e1e-631c-5e46-8557-fba37609180f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-24T02:52:52Z","modified":"2026-01-24T02:52:52Z","name":"Phishing domain: aaster-dex.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ethereum. Report & evidence: https://phishdestroy.io/domain/aaster-dex.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaster-dex.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-24T02:52:52Z","labels":["malicious-activity","phishing","brand:ethereum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaster-dex.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--defa55a0-a8fc-5675-b58a-330d0257d402","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:45Z","modified":"2026-02-26T23:24:45Z","name":"Phishing domain: aastverifysms.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aastverifysms.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aastverifysms.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:45Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aastverifysms.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b7177ac-b0aa-519e-8bbc-23e5ea6bf3f9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-12T22:31:43Z","modified":"2025-12-12T22:31:43Z","name":"Phishing domain: aasvault.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating telegram. Report & evidence: https://phishdestroy.io/domain/aasvault.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aasvault.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-12T22:31:43Z","labels":["malicious-activity","phishing","brand:telegram"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aasvault.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3eed7b2f-9946-53e7-a39d-7fb3cd2900f7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-24T03:17:23Z","modified":"2026-03-24T03:17:23Z","name":"Phishing domain: aatomnikkwall.webflow.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aatomnikkwall.webflow.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aatomnikkwall.webflow.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-24T03:17:23Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aatomnikkwall.webflow.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8b0e300-bc4f-5fbf-aecb-c4cbb66950d8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-26T16:51:22Z","modified":"2026-04-26T16:51:22Z","name":"Phishing domain: aatta-sa.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aatta-sa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aatta-sa.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-26T16:51:22Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aatta-sa.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0770f46f-1365-54f8-9143-514a2321974b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-10T08:46:45Z","modified":"2025-12-10T08:46:45Z","name":"Phishing domain: aatxpro.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating signal. Report & evidence: https://phishdestroy.io/domain/aatxpro.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aatxpro.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-10T08:46:45Z","labels":["malicious-activity","phishing","brand:signal"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aatxpro.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2718f4bc-0a8a-5667-8b63-cb89d603da19","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-07-26T20:00:13Z","modified":"2025-07-26T20:00:13Z","name":"Phishing domain: aaue.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aave. Report & evidence: https://phishdestroy.io/domain/aaue.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaue.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-07-26T20:00:13Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaue.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cd05e42-86f0-574c-b931-6241f3085fa7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-08T22:04:42Z","modified":"2025-10-08T22:04:42Z","name":"Phishing domain: aauevr.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aave. Report & evidence: https://phishdestroy.io/domain/aauevr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aauevr.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-08T22:04:42Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aauevr.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1c62496-da7c-5e1b-a4c6-c18f9346a7a8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-15T03:33:19Z","modified":"2026-03-15T03:33:19Z","name":"Phishing domain: aauth---g-sso-crypto--s-ap.gitbook.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating crypto.com. Report & evidence: https://phishdestroy.io/domain/aauth---g-sso-crypto--s-ap.gitbook.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aauth---g-sso-crypto--s-ap.gitbook.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-15T03:33:19Z","labels":["malicious-activity","phishing","brand:crypto.com"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aauth---g-sso-crypto--s-ap.gitbook.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e77c9eb4-aa35-5294-9b0b-d730e67364b9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T19:46:56Z","modified":"2026-06-15T19:46:56Z","name":"Phishing domain: aauth---trazorr.gitbook.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Trezor. Report & evidence: https://phishdestroy.io/domain/aauth---trazorr.gitbook.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aauth---trazorr.gitbook.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T19:46:56Z","labels":["malicious-activity","phishing","brand:trezor"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aauth---trazorr.gitbook.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--626c1a6e-66b1-5488-9738-622b90adba32","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-08T11:13:26Z","modified":"2026-05-08T11:13:26Z","name":"Phishing domain: aauth--ww--sso-crypto.gitbook.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Crypto.com. Report & evidence: https://phishdestroy.io/domain/aauth--ww--sso-crypto.gitbook.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aauth--ww--sso-crypto.gitbook.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-08T11:13:26Z","labels":["malicious-activity","phishing","brand:crypto.com"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aauth--ww--sso-crypto.gitbook.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--99a2c819-ec93-5e37-91a4-44779bbc46c7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-20T15:32:14Z","modified":"2025-11-20T15:32:14Z","name":"Phishing domain: aauth-app-lido.gitbook.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Lido. Report & evidence: https://phishdestroy.io/domain/aauth-app-lido.gitbook.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aauth-app-lido.gitbook.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-20T15:32:14Z","labels":["malicious-activity","phishing","brand:lido"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aauth-app-lido.gitbook.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f695fd4-1428-5b90-9a19-43f9f52b6cce","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-21T07:40:59Z","modified":"2025-10-21T07:40:59Z","name":"Phishing domain: aauver.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aave. Report & evidence: https://phishdestroy.io/domain/aauver.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aauver.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-21T07:40:59Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aauver.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--91c599db-5bf6-5746-b5e4-726bb6e443ce","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-06T19:44:31Z","modified":"2025-12-06T19:44:31Z","name":"Phishing domain: aav-v1.sbs","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating x.com. Report & evidence: https://phishdestroy.io/domain/aav-v1.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aav-v1.sbs']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-06T19:44:31Z","labels":["malicious-activity","phishing","brand:x.com"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aav-v1.sbs"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cc42ca0-8921-5079-b9c5-03cfde0ff874","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-21T23:53:33Z","modified":"2025-12-21T23:53:33Z","name":"Phishing domain: aav-vote.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aave. Report & evidence: https://phishdestroy.io/domain/aav-vote.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aav-vote.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-21T23:53:33Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aav-vote.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d8764c5-e08d-5485-a511-54baafd1ce0d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-08T18:46:01Z","modified":"2025-12-08T18:46:01Z","name":"Phishing domain: aav4dex.top","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aav4dex.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aav4dex.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-08T18:46:01Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aav4dex.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b6008cc-bb4c-5e2a-99c5-5ec09dcb1c18","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T13:20:45Z","modified":"2026-01-02T13:20:45Z","name":"Phishing domain: aava.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aave. Report & evidence: https://phishdestroy.io/domain/aava.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aava.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T13:20:45Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aava.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--63bf1a3c-3ac2-52e4-8564-4f8e30cf09a6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-05T18:40:10Z","modified":"2026-08-05T18:40:10Z","name":"Phishing domain: aavantacr.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aavantacr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavantacr.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-05T18:40:10Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavantacr.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--36e4892a-2cab-52ec-b8b3-64522f5a02f0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-29T13:56:18Z","modified":"2025-08-29T13:56:18Z","name":"Phishing domain: aavastech.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/aavastech.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavastech.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-29T13:56:18Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavastech.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8737367b-4da7-552f-a0b2-66ad55e03d37","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-11T13:42:58Z","modified":"2025-09-11T13:42:58Z","name":"Phishing domain: aavc.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aave. Report & evidence: https://phishdestroy.io/domain/aavc.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavc.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-11T13:42:58Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavc.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c52b8208-3a9a-587c-a2a1-19ee3c99b0e2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-01T23:47:40Z","modified":"2025-12-01T23:47:40Z","name":"Phishing domain: aavdefi.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/aavdefi.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavdefi.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-01T23:47:40Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavdefi.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f932745-ec35-59ff-8c93-c56410ab71b8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-22T23:46:31Z","modified":"2025-11-22T23:46:31Z","name":"Phishing domain: aave-access.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-access.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-access.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-22T23:46:31Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-access.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bce924b-7dfd-5df5-a343-edcecb59bead","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-24T22:33:37Z","modified":"2026-03-24T22:33:37Z","name":"Phishing domain: aave-app.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-app.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-app.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-24T22:33:37Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-app.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--acd0e3d3-14e3-5886-94cf-270baab02f2f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T07:02:12Z","modified":"2026-07-27T07:02:12Z","name":"Phishing domain: aave-app.to","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-app.to","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-app.to']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T07:02:12Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-app.to"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--854904f4-eba4-5762-9b7c-fce92a201adc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-24T07:13:30Z","modified":"2025-08-24T07:13:30Z","name":"Phishing domain: aave-app.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-app.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-app.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-24T07:13:30Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-app.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c08cb571-c119-5700-8c7d-7eb4cc9eb61b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-24T12:58:19Z","modified":"2026-06-24T12:58:19Z","name":"Phishing domain: aave-bank.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-bank.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-bank.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-24T12:58:19Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-bank.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a452dea8-0d79-5047-9ae3-73d94bbdfd54","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-22T15:50:19Z","modified":"2026-04-22T15:50:19Z","name":"Phishing domain: aave-bloggy.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-bloggy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-bloggy.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-22T15:50:19Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-bloggy.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--871ccf55-41ef-5854-936c-14a035df7cea","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-25T10:25:17Z","modified":"2026-06-25T10:25:17Z","name":"Phishing domain: aave-boost-stake.web3-openhub.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-boost-stake.web3-openhub.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-boost-stake.web3-openhub.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-25T10:25:17Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-boost-stake.web3-openhub.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ded0f2ab-e988-56f5-8825-a16691051156","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-26T16:16:17Z","modified":"2026-04-26T16:16:17Z","name":"Phishing domain: aave-capital.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-capital.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-capital.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-26T16:16:17Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-capital.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c878e374-ce2d-5821-a292-f2be459a950c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-13T13:40:56Z","modified":"2026-06-13T13:40:56Z","name":"Phishing domain: aave-check.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-check.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-check.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-13T13:40:56Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-check.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--79d211d5-528c-5750-9023-91918bc71049","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:55:37Z","modified":"2026-06-15T00:55:37Z","name":"Phishing domain: aave-checker.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-checker.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-checker.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:55:37Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-checker.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cae5d02-ffe7-5408-962c-ba9bae50b3f7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:27Z","modified":"2026-02-26T23:19:27Z","name":"Phishing domain: aave-claim.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-claim.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-claim.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:27Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-claim.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--756a7e27-244b-5b2a-8a4f-c0d26336c3d7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-25T23:00:09Z","modified":"2026-04-25T23:00:09Z","name":"Phishing domain: aave-com-help.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-com-help.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-com-help.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-25T23:00:09Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-com-help.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bd16f2f-0d16-5f46-9597-4f48cf139429","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-02T06:25:45Z","modified":"2026-05-02T06:25:45Z","name":"Phishing domain: aave-compensation.eth.limo","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-compensation.eth.limo","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-compensation.eth.limo']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-02T06:25:45Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-compensation.eth.limo"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--14b5572b-d247-5482-a519-8da2defe5d51","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-24T08:44:24Z","modified":"2026-05-24T08:44:24Z","name":"Phishing domain: aave-compensationss.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-compensationss.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-compensationss.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-24T08:44:24Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-compensationss.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1439eb59-44a0-5428-be22-3d4b0ab7cf9e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T07:24:49Z","modified":"2026-08-10T07:24:49Z","name":"Phishing domain: aave-core-v3.ink","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-core-v3.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-core-v3.ink']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T07:24:49Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-core-v3.ink"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--313c523d-e0d5-5ac4-afb1-974dce2dad4d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T07:17:21Z","modified":"2026-08-10T07:17:21Z","name":"Phishing domain: aave-core-v3.pro","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-core-v3.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-core-v3.pro']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T07:17:21Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-core-v3.pro"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e64ebee2-2a9d-5189-ad19-354f258ed368","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:57Z","modified":"2026-02-26T23:20:57Z","name":"Phishing domain: aave-crypto.biz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-crypto.biz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-crypto.biz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:57Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-crypto.biz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--218ff495-b99e-5573-91ba-4045ef6bb8ee","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:39Z","modified":"2026-02-26T23:22:39Z","name":"Phishing domain: aave-crypto.co","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-crypto.co","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-crypto.co']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:39Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-crypto.co"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca739ce4-892a-51db-ac5c-d7926f2c883b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:24Z","modified":"2026-02-26T23:20:24Z","name":"Phishing domain: aave-crypto.us","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-crypto.us","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-crypto.us']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:24Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-crypto.us"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--de4a0b25-ebf7-5650-b179-9172c5079c1b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-24T15:48:13Z","modified":"2025-12-24T15:48:13Z","name":"Phishing domain: aave-dao.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-dao.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-dao.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-24T15:48:13Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-dao.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f34eda22-9a19-5239-b562-210a498cd8fb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T12:36:57Z","modified":"2026-02-13T12:36:57Z","name":"Phishing domain: aave-dapp.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-dapp.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-dapp.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T12:36:57Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-dapp.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--68c99007-13dc-532f-a5b2-15e57b7cb0ef","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-29T01:03:16Z","modified":"2025-10-29T01:03:16Z","name":"Phishing domain: aave-dappx.sh","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-dappx.sh","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-dappx.sh']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-29T01:03:16Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-dappx.sh"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--28b356f8-65b9-5d4a-a208-9ee4eca5113e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:56Z","modified":"2026-02-26T23:20:56Z","name":"Phishing domain: aave-dashbaord.it.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-dashbaord.it.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-dashbaord.it.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:56Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-dashbaord.it.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d666a6fa-1328-5aa7-9dd6-0ea4f4930c86","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-25T05:25:57Z","modified":"2026-06-25T05:25:57Z","name":"Phishing domain: aave-dashboard-en.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-dashboard-en.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-dashboard-en.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-25T05:25:57Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-dashboard-en.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--39fa46bc-7790-5f5a-bc28-e368e88ce910","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T23:40:46Z","modified":"2026-01-02T23:40:46Z","name":"Phishing domain: aave-dashboard.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-dashboard.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-dashboard.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T23:40:46Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-dashboard.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--82e00631-38fe-5922-8bf8-360347fc55fd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:23Z","modified":"2026-02-26T23:20:23Z","name":"Phishing domain: aave-dashboards.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-dashboards.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-dashboards.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:23Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-dashboards.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3b01e3f-c8c0-5564-978b-9310d9c0fe7a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-25T05:28:55Z","modified":"2026-06-25T05:28:55Z","name":"Phishing domain: aave-dashbooard-en.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-dashbooard-en.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-dashbooard-en.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-25T05:28:55Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-dashbooard-en.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5dd74b1-a84c-5acd-b29e-9b92c1f6b57b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:36Z","modified":"2026-02-26T23:20:36Z","name":"Phishing domain: aave-defi.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-defi.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-defi.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:36Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-defi.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2cd243b-70ce-5ff7-a50f-0a794df88563","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-19T18:59:48Z","modified":"2026-04-19T18:59:48Z","name":"Phishing domain: aave-defi.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-defi.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-defi.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-19T18:59:48Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-defi.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1b1f7fe-fa2f-59f5-976f-dff6a1a78788","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-21T10:59:22Z","modified":"2026-04-21T10:59:22Z","name":"Phishing domain: aave-desktopwalletinstaller.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-desktopwalletinstaller.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-desktopwalletinstaller.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-21T10:59:22Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-desktopwalletinstaller.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9cf5ec3-91b0-50e1-b0dc-60f956ef5fa4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-12T22:12:32Z","modified":"2026-03-12T22:12:32Z","name":"Phishing domain: aave-earn.layeroffer.online","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-earn.layeroffer.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-earn.layeroffer.online']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-12T22:12:32Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-earn.layeroffer.online"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b588d72b-fdcf-5303-9dbe-ab470047eb78","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-12T19:46:36Z","modified":"2026-03-12T19:46:36Z","name":"Phishing domain: aave-earning.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-earning.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-earning.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-12T19:46:36Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-earning.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b02f140a-ccd7-541a-a419-29d56c6a25ff","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T06:45:54Z","modified":"2026-06-15T06:45:54Z","name":"Phishing domain: aave-eligibility.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-eligibility.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-eligibility.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T06:45:54Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-eligibility.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--08073728-9710-55e7-81e5-dc5241fc3d70","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-02T15:14:14Z","modified":"2026-05-02T15:14:14Z","name":"Phishing domain: aave-en-wallet.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-en-wallet.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-en-wallet.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-02T15:14:14Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-en-wallet.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcf668e1-98df-5e7d-80ea-a1f36d6e0ef2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:19Z","modified":"2026-02-26T23:22:19Z","name":"Phishing domain: aave-eta.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-eta.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-eta.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:19Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-eta.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b99c2954-5e31-5fc3-96ba-5e1b52e728a5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-21T11:01:54Z","modified":"2026-04-21T11:01:54Z","name":"Phishing domain: aave-eth-v3.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-eth-v3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-eth-v3.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-21T11:01:54Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-eth-v3.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c45fcf46-cf9b-582b-a02d-8e4b4d88ce58","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-21T12:13:11Z","modified":"2026-04-21T12:13:11Z","name":"Phishing domain: aave-eth-v3.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-eth-v3.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-eth-v3.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-21T12:13:11Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-eth-v3.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eea12699-e5f1-5348-86bc-7fa24a561658","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-29T01:07:38Z","modified":"2025-08-29T01:07:38Z","name":"Phishing domain: aave-eth-v3.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-eth-v3.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-eth-v3.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-29T01:07:38Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-eth-v3.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa815f46-ae95-564e-8e54-d448135edd17","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-03T14:28:23Z","modified":"2026-08-03T14:28:23Z","name":"Phishing domain: aave-event.live","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-event.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-event.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-03T14:28:23Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-event.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ff1a98b-1b34-5542-ac5f-6655b6b8eac5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T10:56:42Z","modified":"2026-02-13T10:56:42Z","name":"Phishing domain: aave-fdn.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-fdn.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-fdn.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T10:56:42Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-fdn.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa0c289f-fc0a-5a58-9b3a-a730e33a86d0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-03T14:31:10Z","modified":"2026-08-03T14:31:10Z","name":"Phishing domain: aave-fi.live","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-fi.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-fi.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-03T14:31:10Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-fi.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--71369b26-184b-53a3-bab1-47a3125ee875","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-09T15:39:09Z","modified":"2026-04-09T15:39:09Z","name":"Phishing domain: aave-finance.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-finance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-finance.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-09T15:39:09Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-finance.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c83a8027-d8a2-5875-be42-bb9c5757dd66","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T10:50:48Z","modified":"2026-02-13T10:50:48Z","name":"Phishing domain: aave-foundation.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-foundation.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-foundation.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T10:50:48Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-foundation.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bed7a09-a299-5ece-8b12-d7037f7b2b3b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-29T01:08:46Z","modified":"2025-08-29T01:08:46Z","name":"Phishing domain: aave-gho.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-gho.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-gho.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-29T01:08:46Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-gho.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b798cecb-e55b-5140-a082-07e14198d61a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:51Z","modified":"2026-02-26T23:20:51Z","name":"Phishing domain: aave-gho.eu.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-gho.eu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-gho.eu.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:51Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-gho.eu.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--49f34469-c068-5022-9952-1948bd4fdcdc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-02T18:41:04Z","modified":"2026-08-02T18:41:04Z","name":"Phishing domain: aave-gov.pro","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-gov.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-gov.pro']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-02T18:41:04Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-gov.pro"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d27ec2f-b3ab-57cc-b171-08f0232132c2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-28T12:47:45Z","modified":"2025-09-28T12:47:45Z","name":"Phishing domain: aave-governance.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-governance.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-governance.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-28T12:47:45Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-governance.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba6a0780-76d8-568e-826b-174555ef6163","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-02T13:07:49Z","modified":"2026-08-02T13:07:49Z","name":"Phishing domain: aave-governance.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-governance.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-governance.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-02T13:07:49Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-governance.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dce407d-6b3a-55a8-a9c0-0efdc13cae9b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-03T12:55:15Z","modified":"2026-08-03T12:55:15Z","name":"Phishing domain: aave-lend-protocol-dex-relay-v109.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-lend-protocol-dex-relay-v109.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-lend-protocol-dex-relay-v109.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-03T12:55:15Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-lend-protocol-dex-relay-v109.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d867353-a3dc-56c0-a972-7374a05614c9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:29Z","modified":"2026-02-26T23:20:29Z","name":"Phishing domain: aave-lending.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-lending.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-lending.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:29Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-lending.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5913539-9ada-50b9-9927-817b4411bcf7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-23T12:03:44Z","modified":"2026-07-23T12:03:44Z","name":"Phishing domain: aave-liquidity.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-liquidity.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-liquidity.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-23T12:03:44Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-liquidity.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--248f3f90-5219-5b61-b105-6bbd78a66112","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-03T12:55:32Z","modified":"2026-08-03T12:55:32Z","name":"Phishing domain: aave-live.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-live.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-live.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-03T12:55:32Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-live.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3266bd86-0d57-52ca-9631-9ea933bcc463","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-18T17:42:45Z","modified":"2026-04-18T17:42:45Z","name":"Phishing domain: aave-logis.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-logis.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-logis.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-18T17:42:45Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-logis.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3cdc63d-2b53-5a35-8a10-d6f20a24aef2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-30T19:58:16Z","modified":"2026-04-30T19:58:16Z","name":"Phishing domain: aave-official-websiite-us.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-official-websiite-us.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-official-websiite-us.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-30T19:58:16Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-official-websiite-us.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a29b976-26c0-5690-a40d-0c3b558d2124","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: aave-paperwalet.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-paperwalet.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-paperwalet.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-paperwalet.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--010214ab-3dc8-5791-b204-a45594d49a2a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-24T22:56:23Z","modified":"2026-06-24T22:56:23Z","name":"Phishing domain: aave-pool.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-pool.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-pool.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-24T22:56:23Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-pool.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf17bb85-08fb-580d-ad86-e9fc7805cb97","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: aave-portals.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-portals.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-portals.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-portals.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--56fe11dd-19e8-51f4-95cf-3a38081b8acf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: aave-pro.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-pro.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-pro.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-pro.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c80a59a0-3444-5716-b067-5bc0f91fe09c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-05T15:57:33Z","modified":"2026-04-05T15:57:33Z","name":"Phishing domain: aave-protocoll.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-protocoll.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-protocoll.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-05T15:57:33Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-protocoll.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0680291f-84c6-5d50-a0b2-4b87a1a85556","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-30T21:23:50Z","modified":"2026-07-30T21:23:50Z","name":"Phishing domain: aave-risk-lake.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-risk-lake.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-risk-lake.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-30T21:23:50Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-risk-lake.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c90823c0-3c5b-5e04-876c-031db6cdfd5c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T06:41:07Z","modified":"2026-06-15T06:41:07Z","name":"Phishing domain: aave-snapshot.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-snapshot.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-snapshot.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T06:41:07Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-snapshot.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cac693e1-1d38-5dd1-983a-df3e86360870","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:16Z","modified":"2026-02-26T23:24:16Z","name":"Phishing domain: aave-stake.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-stake.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-stake.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:16Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-stake.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eaf5d6ad-d235-50d1-be8a-721f0a328d27","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:29Z","modified":"2026-02-26T23:19:29Z","name":"Phishing domain: aave-stake.web.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-stake.web.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-stake.web.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:29Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-stake.web.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b689448c-446a-5873-8a26-fb95bdf15aa4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-21T10:54:51Z","modified":"2026-04-21T10:54:51Z","name":"Phishing domain: aave-staking-markets-defi-v3-v2-aave-swap.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-staking-markets-defi-v3-v2-aave-swap.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-staking-markets-defi-v3-v2-aave-swap.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-21T10:54:51Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-staking-markets-defi-v3-v2-aave-swap.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a050dbb6-dd46-54e5-aefa-439d3a503c67","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-21T10:54:51Z","modified":"2026-04-21T10:54:51Z","name":"Phishing domain: aave-staking-markets-defi-v3-v2-aave-swap.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-staking-markets-defi-v3-v2-aave-swap.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-staking-markets-defi-v3-v2-aave-swap.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-21T10:54:51Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-staking-markets-defi-v3-v2-aave-swap.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--034a6584-6c76-5b3a-bf95-7c487f71034d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-21T10:57:23Z","modified":"2026-04-21T10:57:23Z","name":"Phishing domain: aave-staking-markets-defi-v3-v2-aave-swap.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-staking-markets-defi-v3-v2-aave-swap.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-staking-markets-defi-v3-v2-aave-swap.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-21T10:57:23Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-staking-markets-defi-v3-v2-aave-swap.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--87741e46-aa35-56ef-97ff-f521fbb4c3be","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-21T12:13:03Z","modified":"2026-04-21T12:13:03Z","name":"Phishing domain: aave-staking-markets-defi-v3-v2.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-staking-markets-defi-v3-v2.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-staking-markets-defi-v3-v2.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-21T12:13:03Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-staking-markets-defi-v3-v2.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--50cec5c3-3f9b-538f-8b79-1505161e5543","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-10T18:31:21Z","modified":"2026-06-10T18:31:21Z","name":"Phishing domain: aave-swap.click","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-swap.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-swap.click']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-10T18:31:21Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-swap.click"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2377c047-829c-51a4-8b7b-164975061028","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-26T13:55:35Z","modified":"2026-01-26T13:55:35Z","name":"Phishing domain: aave-v3-eth.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-v3-eth.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-v3-eth.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-26T13:55:35Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-v3-eth.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1bf73c1-2a68-5354-af21-81954ed9cd34","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-09T11:15:41Z","modified":"2026-05-09T11:15:41Z","name":"Phishing domain: aave-v3.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-v3.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-v3.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-09T11:15:41Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-v3.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec083536-de1b-5c51-b4d8-974b0471f655","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: aave-v3swap.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-v3swap.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-v3swap.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-v3swap.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1b15469-6dc2-57a6-8846-7a35322acef1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-28T06:06:16Z","modified":"2026-03-28T06:06:16Z","name":"Phishing domain: aave-v4.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-v4.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-v4.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-28T06:06:16Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-v4.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab825569-1be7-5cd8-ae0e-350dd7de2994","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-05T15:54:09Z","modified":"2026-04-05T15:54:09Z","name":"Phishing domain: aave-wallet-us-en.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-wallet-us-en.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-wallet-us-en.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-05T15:54:09Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-wallet-us-en.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--807def7c-9067-5c6a-a292-9f9d35ec420c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:19Z","modified":"2026-02-26T23:20:19Z","name":"Phishing domain: aave-wallet.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-wallet.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-wallet.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:19Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-wallet.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d60058fe-40a8-5faf-b014-89be64054815","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-24T02:47:58Z","modified":"2026-01-24T02:47:58Z","name":"Phishing domain: aave-yields.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave-yields.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave-yields.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-24T02:47:58Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave-yields.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--31308d1b-de8f-57c5-ab62-12c0960eec75","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:49Z","modified":"2026-02-26T23:20:49Z","name":"Phishing domain: aave.3v-gho.it.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.3v-gho.it.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.3v-gho.it.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:49Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.3v-gho.it.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a863782-38a7-5f92-bbcf-1d4e5e67089c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:45Z","modified":"2026-02-26T23:21:45Z","name":"Phishing domain: aave.aave-coin.it.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.aave-coin.it.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.aave-coin.it.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:45Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.aave-coin.it.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--815e974c-6bbf-5382-8287-b2af01e9b8f5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-26T11:31:20Z","modified":"2025-09-26T11:31:20Z","name":"Phishing domain: aave.airdropalert.cfd","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.airdropalert.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.airdropalert.cfd']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-26T11:31:20Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.airdropalert.cfd"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--286d710c-912b-59dd-82d9-709d9be4df91","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-16T20:21:08Z","modified":"2025-09-16T20:21:08Z","name":"Phishing domain: aave.aiweb3.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.aiweb3.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.aiweb3.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-16T20:21:08Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.aiweb3.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cbca34e-7762-564b-8c67-e45c9a270231","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-19T06:25:01Z","modified":"2025-10-19T06:25:01Z","name":"Phishing domain: aave.bet","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.bet","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.bet']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-19T06:25:01Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.bet"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--683ef6ce-93cc-5ffc-a73a-6b1f44b83c83","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-07T10:37:46Z","modified":"2026-08-07T10:37:46Z","name":"Phishing domain: aave.cam","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.cam","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.cam']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-07T10:37:46Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.cam"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cb641fa-75f4-5c74-bc24-f0a62cc91b8d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: aave.cm","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.cm","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.cm']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.cm"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--24616578-fe71-5bc7-b145-8edcdf4686e3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-04T03:42:42Z","modified":"2025-11-04T03:42:42Z","name":"Phishing domain: aave.com-api-gateway-connect-alpha.cloud","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.com-api-gateway-connect-alpha.cloud","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.com-api-gateway-connect-alpha.cloud']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-04T03:42:42Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.com-api-gateway-connect-alpha.cloud"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--793dfa4a-dfa9-5480-851d-492a118eab85","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-01T12:56:59Z","modified":"2025-11-01T12:56:59Z","name":"Phishing domain: aave.com-api-gateway-wallets-v1-edge.cloud","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.com-api-gateway-wallets-v1-edge.cloud","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.com-api-gateway-wallets-v1-edge.cloud']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-01T12:56:59Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.com-api-gateway-wallets-v1-edge.cloud"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d636bda-50a5-5a54-8a3b-ec259713c292","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-13T01:35:11Z","modified":"2025-10-13T01:35:11Z","name":"Phishing domain: aave.com-api-online-secure-dex.cloud","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.com-api-online-secure-dex.cloud","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.com-api-online-secure-dex.cloud']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-13T01:35:11Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.com-api-online-secure-dex.cloud"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--78bf1b57-750d-5d30-8c15-5dc8415c55d4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:55Z","modified":"2026-02-26T23:22:55Z","name":"Phishing domain: aave.com-api-v2-wallet.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.com-api-v2-wallet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.com-api-v2-wallet.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:55Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.com-api-v2-wallet.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cd76dd2-7455-58a8-8831-705e4af1f8a4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:24Z","modified":"2026-02-26T23:22:24Z","name":"Phishing domain: aave.com-api-v3-app.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.com-api-v3-app.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.com-api-v3-app.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:24Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.com-api-v3-app.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e605b95-ea5b-59f0-b050-e7611819e1ce","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:42Z","modified":"2026-02-26T23:22:42Z","name":"Phishing domain: aave.com-apiv3-app-connect.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.com-apiv3-app-connect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.com-apiv3-app-connect.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:42Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.com-apiv3-app-connect.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--09717ba5-be88-5dd1-9db8-e86b8df48ebf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:31Z","modified":"2026-02-26T23:23:31Z","name":"Phishing domain: aave.com-app-apiv2-connect-wallet.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.com-app-apiv2-connect-wallet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.com-app-apiv2-connect-wallet.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:31Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.com-app-apiv2-connect-wallet.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--137b57f4-cb32-5de9-82e0-4bc2a32bb509","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:54Z","modified":"2026-02-26T23:23:54Z","name":"Phishing domain: aave.com-app-apiv2-connect.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.com-app-apiv2-connect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.com-app-apiv2-connect.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:54Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.com-app-apiv2-connect.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf59c146-0bf5-5309-866d-31e7b7bd4cfe","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:49Z","modified":"2026-02-26T23:22:49Z","name":"Phishing domain: aave.com-app-connect-v2-wallet.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.com-app-connect-v2-wallet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.com-app-connect-v2-wallet.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:49Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.com-app-connect-v2-wallet.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8faa8b3c-52bd-58d0-bb07-bbbde8d3e57c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:02Z","modified":"2026-02-26T23:21:02Z","name":"Phishing domain: aave.com-app-connect-v2com.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.com-app-connect-v2com.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.com-app-connect-v2com.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:02Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.com-app-connect-v2com.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff50d2bf-1da2-5aaa-9905-c6490e631c19","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:28Z","modified":"2026-02-26T23:19:28Z","name":"Phishing domain: aave.com-app-v2-connect-wailet.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.com-app-v2-connect-wailet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.com-app-v2-connect-wailet.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:28Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.com-app-v2-connect-wailet.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e4d0074-2e4c-59ed-a14b-676a4ba2eef1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:59Z","modified":"2026-02-26T23:22:59Z","name":"Phishing domain: aave.com-app-v2-wailets-connect.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.com-app-v2-wailets-connect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.com-app-v2-wailets-connect.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:59Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.com-app-v2-wailets-connect.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c153d58d-c0f0-5a23-8694-3b21f838be16","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:59Z","modified":"2026-02-26T23:23:59Z","name":"Phishing domain: aave.com-app-v3-connect-api-wailet.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.com-app-v3-connect-api-wailet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.com-app-v3-connect-api-wailet.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:59Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.com-app-v3-connect-api-wailet.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--53eb4875-1f77-57a0-b794-33d629e651b4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:49Z","modified":"2026-02-26T23:24:49Z","name":"Phishing domain: aave.com-app-v5-wallet-connect.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.com-app-v5-wallet-connect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.com-app-v5-wallet-connect.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:49Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.com-app-v5-wallet-connect.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a9863a3-30be-566f-ab4a-3e3d8464d56f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:19Z","modified":"2026-02-26T23:20:19Z","name":"Phishing domain: aave.com-app-wailets-connects-v2.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.com-app-wailets-connects-v2.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.com-app-wailets-connects-v2.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:19Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.com-app-wailets-connects-v2.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5aa46c2c-958b-5c99-9a52-4271df8f4eb5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:47Z","modified":"2026-02-26T23:21:47Z","name":"Phishing domain: aave.com-app-wallet-api-v3-connect.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.com-app-wallet-api-v3-connect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.com-app-wallet-api-v3-connect.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:47Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.com-app-wallet-api-v3-connect.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d8ddd11-3f71-55d3-bca1-15c3bc48f2ef","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:47Z","modified":"2026-02-26T23:23:47Z","name":"Phishing domain: aave.com-app-wallet-connect-v2-api.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.com-app-wallet-connect-v2-api.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.com-app-wallet-connect-v2-api.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:47Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.com-app-wallet-connect-v2-api.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bdc1fbc-c76a-5376-96bd-a0a0697b9ae1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:00Z","modified":"2026-02-26T23:20:00Z","name":"Phishing domain: aave.com-app-wallet-v2-connect-api.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.com-app-wallet-v2-connect-api.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.com-app-wallet-v2-connect-api.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:00Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.com-app-wallet-v2-connect-api.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0da006b5-b443-559b-b30c-0e5b2005483c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:06Z","modified":"2026-02-26T23:20:06Z","name":"Phishing domain: aave.com-app-wallet-v2-connect.info","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.com-app-wallet-v2-connect.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.com-app-wallet-v2-connect.info']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:06Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.com-app-wallet-v2-connect.info"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b85f2afd-714a-553e-b936-4f4e57375582","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:28Z","modified":"2026-02-26T23:19:28Z","name":"Phishing domain: aave.com-app-wallets-connects-v4.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.com-app-wallets-connects-v4.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.com-app-wallets-connects-v4.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:28Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.com-app-wallets-connects-v4.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--47d10f21-e180-5524-ab68-8c529289c58c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:53Z","modified":"2026-02-26T23:21:53Z","name":"Phishing domain: aave.com-apps-connect-wallets-v3.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.com-apps-connect-wallets-v3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.com-apps-connect-wallets-v3.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:53Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.com-apps-connect-wallets-v3.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b71d06c8-9745-5dfc-bce5-41667226d110","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:39Z","modified":"2026-02-26T23:19:39Z","name":"Phishing domain: aave.com-appv2-connect-api.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.com-appv2-connect-api.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.com-appv2-connect-api.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:39Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.com-appv2-connect-api.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e09e9be-a5c1-535b-84f1-a54519d4449e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:37Z","modified":"2026-02-26T23:20:37Z","name":"Phishing domain: aave.com-appv3-connect-api.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.com-appv3-connect-api.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.com-appv3-connect-api.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:37Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.com-appv3-connect-api.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9c8bdac-82ef-5795-9283-0981af7253ec","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-29T01:03:25Z","modified":"2025-10-29T01:03:25Z","name":"Phishing domain: aave.com-auth-api-gateway-beta-online.cloud","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.com-auth-api-gateway-beta-online.cloud","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.com-auth-api-gateway-beta-online.cloud']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-29T01:03:25Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.com-auth-api-gateway-beta-online.cloud"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf91910a-b3ff-5ae2-be6d-68860dcaa620","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-12T02:04:18Z","modified":"2025-12-12T02:04:18Z","name":"Phishing domain: aave.com-auth-swap-dex-apps.pro","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.com-auth-swap-dex-apps.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.com-auth-swap-dex-apps.pro']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-12T02:04:18Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.com-auth-swap-dex-apps.pro"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--63d9e05e-9bb1-5ba9-bc9b-ae4dab6d2252","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:14Z","modified":"2026-02-26T23:23:14Z","name":"Phishing domain: aave.com-auth-wallets-dex-connect.cloud","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.com-auth-wallets-dex-connect.cloud","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.com-auth-wallets-dex-connect.cloud']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:14Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.com-auth-wallets-dex-connect.cloud"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d346799b-d32e-5104-a225-f5052c5739d1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:02Z","modified":"2026-02-26T23:24:02Z","name":"Phishing domain: aave.com-chain-web-v3.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.com-chain-web-v3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.com-chain-web-v3.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:02Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.com-chain-web-v3.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f521680c-46b5-5285-bf16-88aa9a379fcc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:06Z","modified":"2026-02-26T23:20:06Z","name":"Phishing domain: aave.com-chain-web3-app.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.com-chain-web3-app.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.com-chain-web3-app.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:06Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.com-chain-web3-app.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9e22afb-771e-5ef9-8c5b-601faf4db85c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:46Z","modified":"2026-02-26T23:22:46Z","name":"Phishing domain: aave.com-connect-apps-wallets-v2.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.com-connect-apps-wallets-v2.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.com-connect-apps-wallets-v2.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:46Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.com-connect-apps-wallets-v2.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--49f5cca4-57e6-548f-b7c2-78616e5659cc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:21Z","modified":"2026-02-26T23:21:21Z","name":"Phishing domain: aave.com-connect-dappv3.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.com-connect-dappv3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.com-connect-dappv3.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:21Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.com-connect-dappv3.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f16ca3ed-a3cc-5246-b435-211b552ae30f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:34Z","modified":"2026-02-26T23:22:34Z","name":"Phishing domain: aave.com-connect-v3-api-app.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.com-connect-v3-api-app.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.com-connect-v3-api-app.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:34Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.com-connect-v3-api-app.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8770426-659b-58a8-8b07-4450f298704a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-05T23:16:14Z","modified":"2026-02-05T23:16:14Z","name":"Phishing domain: aave.com-connect-wallet.pro","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.com-connect-wallet.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.com-connect-wallet.pro']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-05T23:16:14Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.com-connect-wallet.pro"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bed0877f-34ea-557b-b340-148722c89c89","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:22Z","modified":"2026-02-26T23:21:22Z","name":"Phishing domain: aave.com-dapp-swap.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.com-dapp-swap.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.com-dapp-swap.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:22Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.com-dapp-swap.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d532e66f-7514-5482-89d8-77cef4aec5be","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:51Z","modified":"2026-02-26T23:21:51Z","name":"Phishing domain: aave.com-dapp-v2-fast.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.com-dapp-v2-fast.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.com-dapp-v2-fast.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:51Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.com-dapp-v2-fast.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d04d6fff-c091-5d5c-a5bb-2846f16ced54","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:36Z","modified":"2026-02-26T23:23:36Z","name":"Phishing domain: aave.com-dappv2-connect.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.com-dappv2-connect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.com-dappv2-connect.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:36Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.com-dappv2-connect.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2138511-677b-5466-ab2a-18ddca98738e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:41Z","modified":"2026-02-26T23:21:41Z","name":"Phishing domain: aave.com-defi-app-connet.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.com-defi-app-connet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.com-defi-app-connet.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:41Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.com-defi-app-connet.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f14eceb0-0376-5e53-b53f-f2a43755ac69","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-18T00:17:28Z","modified":"2025-12-18T00:17:28Z","name":"Phishing domain: aave.com-gateway-v1-api-gateway-auth.pro","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.com-gateway-v1-api-gateway-auth.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.com-gateway-v1-api-gateway-auth.pro']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-18T00:17:28Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.com-gateway-v1-api-gateway-auth.pro"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1bffae9-5c2a-5f43-a240-b0d5258d7fb2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-20T19:33:16Z","modified":"2025-12-20T19:33:16Z","name":"Phishing domain: aave.com-online-beta-wallets-services.pro","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.com-online-beta-wallets-services.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.com-online-beta-wallets-services.pro']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-20T19:33:16Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.com-online-beta-wallets-services.pro"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d378a5c9-6067-5b69-9908-6a297ec2609b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:41Z","modified":"2026-02-26T23:23:41Z","name":"Phishing domain: aave.com-protocol-connect-appv3.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.com-protocol-connect-appv3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.com-protocol-connect-appv3.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:41Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.com-protocol-connect-appv3.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--353b39cc-0960-59a5-aecf-2215a90eb963","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:57Z","modified":"2026-02-26T23:22:57Z","name":"Phishing domain: aave.com-protocol-connect-dapp.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.com-protocol-connect-dapp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.com-protocol-connect-dapp.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:57Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.com-protocol-connect-dapp.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c2a58fc-56da-5c77-90d6-a9bfab12406e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-19T04:17:58Z","modified":"2025-10-19T04:17:58Z","name":"Phishing domain: aave.com-secure-wallets-service-app.cloud","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.com-secure-wallets-service-app.cloud","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.com-secure-wallets-service-app.cloud']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-19T04:17:58Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.com-secure-wallets-service-app.cloud"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--81a9264d-7ce9-5b2e-961d-668fd8885e64","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:46Z","modified":"2026-02-26T23:19:46Z","name":"Phishing domain: aave.com-swap-v2-fast.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.com-swap-v2-fast.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.com-swap-v2-fast.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:46Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.com-swap-v2-fast.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bad3e0da-531f-5296-9a83-210c7214906a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:09Z","modified":"2026-02-26T23:24:09Z","name":"Phishing domain: aave.com-v2-app-connect-api-wailet.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.com-v2-app-connect-api-wailet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.com-v2-app-connect-api-wailet.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:09Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.com-v2-app-connect-api-wailet.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a059736d-cee4-52dd-a482-3688f6afaa7a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-23T22:18:05Z","modified":"2025-11-23T22:18:05Z","name":"Phishing domain: aave.com-v3-airdrop.live","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.com-v3-airdrop.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.com-v3-airdrop.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-23T22:18:05Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.com-v3-airdrop.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--59f80a3b-4924-5786-a190-bff627b1be03","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:51Z","modified":"2026-02-26T23:19:51Z","name":"Phishing domain: aave.com-v3-api.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.com-v3-api.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.com-v3-api.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:51Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.com-v3-api.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--52a8ee6c-553f-53fe-910f-bf49eb61ea21","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-24T03:24:42Z","modified":"2025-11-24T03:24:42Z","name":"Phishing domain: aave.com-v3-claim.live","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.com-v3-claim.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.com-v3-claim.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-24T03:24:42Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.com-v3-claim.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7a5fbec-0ae1-59cc-b706-3eb1cf0f2172","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-23T23:36:59Z","modified":"2025-11-23T23:36:59Z","name":"Phishing domain: aave.com-v3-claims.live","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.com-v3-claims.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.com-v3-claims.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-23T23:36:59Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.com-v3-claims.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--52bf4d1a-7a37-5014-b57c-749718d1c24c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-26T10:39:59Z","modified":"2026-01-26T10:39:59Z","name":"Phishing domain: aave.com-wallet-cornect.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.com-wallet-cornect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.com-wallet-cornect.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-26T10:39:59Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.com-wallet-cornect.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8aeecd3-ef9a-5f07-9828-588fa05af09a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:57Z","modified":"2026-02-26T23:22:57Z","name":"Phishing domain: aave.com-web-app-connet.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.com-web-app-connet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.com-web-app-connet.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:57Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.com-web-app-connet.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d33c793-197d-5df4-89d1-cd4b76360045","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:14Z","modified":"2026-02-26T23:22:14Z","name":"Phishing domain: aave.com.ghovaults.eu.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.com.ghovaults.eu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.com.ghovaults.eu.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:14Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.com.ghovaults.eu.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0d76490-fdd6-5363-9e6b-b09729874555","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:49Z","modified":"2026-02-26T23:22:49Z","name":"Phishing domain: aave.com.ghv.eu.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.com.ghv.eu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.com.ghv.eu.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:49Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.com.ghv.eu.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d62d4bc-31ac-5ea4-893e-c59b29f09cd8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:40Z","modified":"2026-02-26T23:20:40Z","name":"Phishing domain: aave.com.lists.eu.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.com.lists.eu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.com.lists.eu.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:40Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.com.lists.eu.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--61f7799c-f0aa-5dfb-8dac-9dc9b4dded24","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:16Z","modified":"2026-02-26T23:20:16Z","name":"Phishing domain: aave.defi.blch.ru","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.defi.blch.ru","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.defi.blch.ru']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:16Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.defi.blch.ru"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--049034f4-c25d-588f-ba54-4239022554f0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-01T00:50:20Z","modified":"2026-04-01T00:50:20Z","name":"Phishing domain: aave.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-01T00:50:20Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad413eff-02df-5ae2-99dc-4d417235ea1d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-03T16:17:08Z","modified":"2025-12-03T16:17:08Z","name":"Phishing domain: aave.events","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.events","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.events']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-03T16:17:08Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.events"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--21daedde-a016-5e01-9969-d7ade492678a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:42Z","modified":"2026-02-26T23:19:42Z","name":"Phishing domain: aave.exchain.it.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.exchain.it.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.exchain.it.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:42Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.exchain.it.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8698b25-4896-5ccd-afbf-1c49242c88ef","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:20Z","modified":"2026-02-26T23:24:20Z","name":"Phishing domain: aave.exchan.it.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.exchan.it.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.exchan.it.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:20Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.exchan.it.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c424c3b2-6b80-5ce1-a851-0848ee8ee91a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:52Z","modified":"2026-02-26T23:22:52Z","name":"Phishing domain: aave.gho-v3.it.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.gho-v3.it.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.gho-v3.it.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:52Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.gho-v3.it.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--915c502e-bc0b-5fbb-96c1-8f3c5972a74d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:43Z","modified":"2026-02-26T23:21:43Z","name":"Phishing domain: aave.ghosmart.it.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.ghosmart.it.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.ghosmart.it.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:43Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.ghosmart.it.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a934a84a-0f11-5fd8-91d9-77b4185192c5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: aave.global","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.global","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.global']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.global"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9a38e4c-b42a-5594-b7d2-52dfe63a394f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:59Z","modified":"2026-02-26T23:20:59Z","name":"Phishing domain: aave.kgen.team","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.kgen.team","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.kgen.team']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:59Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.kgen.team"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad5ca2ea-d9eb-5976-b2eb-c4d722dd3915","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:33Z","modified":"2026-02-26T23:20:33Z","name":"Phishing domain: aave.life","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.life']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:33Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.life"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--46206941-1fd4-52e3-95d7-6a0ae1565bea","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:14Z","modified":"2026-02-26T23:20:14Z","name":"Phishing domain: aave.ltd","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.ltd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.ltd']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:14Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.ltd"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b3d2474-20e9-5a98-896c-db7797a1609a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-17T08:13:49Z","modified":"2026-06-17T08:13:49Z","name":"Phishing domain: aave.media","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.media","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.media']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-17T08:13:49Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.media"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb7ba672-cf25-5d32-8539-6f50ec216663","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:03Z","modified":"2026-02-26T23:22:03Z","name":"Phishing domain: aave.new-gho.it.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.new-gho.it.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.new-gho.it.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:03Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.new-gho.it.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1f2b216-53fc-5aed-905a-7e40632732fc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:35Z","modified":"2026-02-26T23:19:35Z","name":"Phishing domain: aave.protocol-v3.it.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.protocol-v3.it.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.protocol-v3.it.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:35Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.protocol-v3.it.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ae55f75-f994-5f3a-bd7b-4a3e6ae31510","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-26T22:08:37Z","modified":"2026-01-26T22:08:37Z","name":"Phishing domain: aave.report","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.report","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.report']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-26T22:08:37Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.report"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c47cc66c-961e-5027-bb51-3e68f6555983","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-09T07:08:08Z","modified":"2025-08-09T07:08:08Z","name":"Phishing domain: aave.smart-update.it.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.smart-update.it.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.smart-update.it.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-09T07:08:08Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.smart-update.it.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--37372f8a-9e01-5317-a33a-2cb7af4be966","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-07T09:24:47Z","modified":"2026-05-07T09:24:47Z","name":"Phishing domain: aave.srvincs.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.srvincs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.srvincs.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-07T09:24:47Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.srvincs.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--81a2dd32-08e4-5e6b-9cdc-88cbe5f342c0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:56Z","modified":"2026-02-26T23:20:56Z","name":"Phishing domain: aave.stake-3v.it.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.stake-3v.it.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.stake-3v.it.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:56Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.stake-3v.it.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--60fe5a0e-9fb5-57d0-b576-3469aa074014","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:56Z","modified":"2026-02-26T23:21:56Z","name":"Phishing domain: aave.stake-smart.it.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.stake-smart.it.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.stake-smart.it.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:56Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.stake-smart.it.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd7a47b2-c55e-50e0-bc01-d5a539b64f76","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-24T11:15:05Z","modified":"2025-09-24T11:15:05Z","name":"Phishing domain: aave.sushistakes.biz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.sushistakes.biz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.sushistakes.biz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-24T11:15:05Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.sushistakes.biz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f927ccea-4904-5e5b-9d9d-d883f6d203e0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-24T11:13:40Z","modified":"2025-09-24T11:13:40Z","name":"Phishing domain: aave.sushistakes.info","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.sushistakes.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.sushistakes.info']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-24T11:13:40Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.sushistakes.info"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cc68d91-43f9-53b8-a9f6-62bda5ff7316","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-24T11:12:03Z","modified":"2025-09-24T11:12:03Z","name":"Phishing domain: aave.sushistakes.us","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.sushistakes.us","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.sushistakes.us']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-24T11:12:03Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.sushistakes.us"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1985ceff-b36c-59ee-b7b6-00f4185f4e90","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:04Z","modified":"2026-02-26T23:23:04Z","name":"Phishing domain: aave.teachable.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.teachable.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.teachable.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:04Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.teachable.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a360fc29-723b-5948-9836-35e45ba492f8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:23Z","modified":"2026-02-26T23:23:23Z","name":"Phishing domain: aave.v3-gho.it.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.v3-gho.it.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.v3-gho.it.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:23Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.v3-gho.it.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f890dc7-9816-5b6c-84c6-683ea0d7794b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-04T13:16:32Z","modified":"2025-10-04T13:16:32Z","name":"Phishing domain: aave.vote","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.vote","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.vote']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-04T13:16:32Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.vote"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--761c8c7d-6f53-5608-a09d-f161a665e2b3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:57Z","modified":"2026-02-26T23:19:57Z","name":"Phishing domain: aave.web-stake.it.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave.web-stake.it.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave.web-stake.it.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:57Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave.web-stake.it.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--61973a3e-6850-5e58-949d-1e7d9f9bc617","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-29T01:38:39Z","modified":"2025-08-29T01:38:39Z","name":"Phishing domain: aave2.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aave2.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aave2.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-29T01:38:39Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aave2.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--39bc4986-eb76-5e96-a157-1b6579ff9ca5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-28T12:55:19Z","modified":"2026-06-28T12:55:19Z","name":"Phishing domain: aavea.cfd","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavea.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavea.cfd']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-28T12:55:19Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavea.cfd"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--90924518-6837-5663-b219-0fc4dd52ee4a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-07T09:30:47Z","modified":"2026-05-07T09:30:47Z","name":"Phishing domain: aaveapp.club","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aaveapp.club","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaveapp.club']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-07T09:30:47Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaveapp.club"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--37ecb745-4570-5219-8a6c-20d191c99e36","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-01T15:43:35Z","modified":"2026-05-01T15:43:35Z","name":"Phishing domain: aaveapp.co.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aaveapp.co.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaveapp.co.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-01T15:43:35Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaveapp.co.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--816489ad-23ef-57f7-8ccd-b33f33c853a1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-07T09:18:48Z","modified":"2026-05-07T09:18:48Z","name":"Phishing domain: aaveapp.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aaveapp.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaveapp.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-07T09:18:48Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaveapp.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff856c3b-224f-5c73-9bbe-e4756946ad8d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-21T14:28:35Z","modified":"2026-05-21T14:28:35Z","name":"Phishing domain: aaveapp.pro","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aaveapp.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaveapp.pro']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-21T14:28:35Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaveapp.pro"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--87fc4a93-fa3b-58a0-8547-4df562f6da2a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-01T17:22:36Z","modified":"2026-06-01T17:22:36Z","name":"Phishing domain: aaveapp.us","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aaveapp.us","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaveapp.us']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-01T17:22:36Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaveapp.us"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ede3f446-9af9-5eac-9541-b91eeb3506ac","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-29T01:08:24Z","modified":"2025-08-29T01:08:24Z","name":"Phishing domain: aavebank.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavebank.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavebank.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-29T01:08:24Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavebank.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--24dfc0cc-4cd2-5120-b70a-1de9b7baf270","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-29T21:22:16Z","modified":"2026-05-29T21:22:16Z","name":"Phishing domain: aavebaseapp.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavebaseapp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavebaseapp.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-29T21:22:16Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavebaseapp.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcf24ed3-057a-5b2b-8d07-2c2d893cab9a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-12T22:12:40Z","modified":"2026-03-12T22:12:40Z","name":"Phishing domain: aavebeta.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavebeta.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavebeta.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-12T22:12:40Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavebeta.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--511d99ed-10aa-528a-8946-8406374c9f17","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-29T01:38:35Z","modified":"2025-08-29T01:38:35Z","name":"Phishing domain: aavecasifreespins.click","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavecasifreespins.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavecasifreespins.click']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-29T01:38:35Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavecasifreespins.click"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--04e75826-85b8-55ce-9447-c9d6a2bf1fa6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-29T01:38:44Z","modified":"2025-08-29T01:38:44Z","name":"Phishing domain: aavecasinonodeposit.click","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavecasinonodeposit.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavecasinonodeposit.click']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-29T01:38:44Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavecasinonodeposit.click"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--757ff915-44de-5f0b-a978-373ab83f9cdd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-07T09:25:28Z","modified":"2026-05-07T09:25:28Z","name":"Phishing domain: aavechan.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavechan.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavechan.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-07T09:25:28Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavechan.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2e8948f-9bdc-5423-9955-b41ee74d1ba6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-23T03:01:30Z","modified":"2025-09-23T03:01:30Z","name":"Phishing domain: aavechan.stkaaveclaim.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavechan.stkaaveclaim.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavechan.stkaaveclaim.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-23T03:01:30Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavechan.stkaaveclaim.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--69941843-6387-56f1-97b3-6c48b07ebf50","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-01T10:50:03Z","modified":"2026-07-01T10:50:03Z","name":"Phishing domain: aaveclaimss.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aaveclaimss.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaveclaimss.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-01T10:50:03Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaveclaimss.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fe3981e-c355-5831-b8bf-24a362904935","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:04Z","modified":"2026-02-26T23:21:04Z","name":"Phishing domain: aaveclassic.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aaveclassic.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaveclassic.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:04Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaveclassic.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--612aa4b8-aabb-5fac-8861-060269c3e9c9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:57Z","modified":"2026-02-26T23:19:57Z","name":"Phishing domain: aaveclassic.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aaveclassic.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaveclassic.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:57Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaveclassic.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--78c3bde5-2071-51d5-aa82-60c113201de0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:54Z","modified":"2026-02-26T23:21:54Z","name":"Phishing domain: aaveclassic.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aaveclassic.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaveclassic.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:54Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaveclassic.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--39a4ff5b-f86c-5bdc-a88d-4e2188787339","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-30T11:46:21Z","modified":"2025-12-30T11:46:21Z","name":"Phishing domain: aaveconnect.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aaveconnect.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaveconnect.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-30T11:46:21Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaveconnect.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4f00aa5-248b-5986-95e1-5c6ff07a74ce","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-12T22:12:50Z","modified":"2026-03-12T22:12:50Z","name":"Phishing domain: aavecore.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavecore.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavecore.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-12T22:12:50Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavecore.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fa6d84b-2619-5831-ba69-00a786bbb597","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-14T16:40:13Z","modified":"2026-06-14T16:40:13Z","name":"Phishing domain: aavedashboardapp.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavedashboardapp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavedashboardapp.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-14T16:40:13Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavedashboardapp.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e078fe95-05a3-574c-90e5-fc04d80ef1d2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-29T01:07:40Z","modified":"2025-08-29T01:07:40Z","name":"Phishing domain: aavedefi.live","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavedefi.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavedefi.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-29T01:07:40Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavedefi.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6ef220a-1cd9-575a-9e0d-7fff36a54708","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T07:02:12Z","modified":"2026-07-27T07:02:12Z","name":"Phishing domain: aavedefi.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavedefi.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavedefi.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T07:02:12Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavedefi.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--967f363d-8a1d-5e94-a434-234e1fe2d913","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-21T10:59:22Z","modified":"2026-04-21T10:59:22Z","name":"Phishing domain: aavedesktop.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavedesktop.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavedesktop.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-21T10:59:22Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavedesktop.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--edd0b19e-0a8d-5083-bf34-b1329be4250d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:57Z","modified":"2026-02-26T23:19:57Z","name":"Phishing domain: aavedrop.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavedrop.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavedrop.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:57Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavedrop.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--104f66b8-7243-516b-8bb7-b078a4ef9c33","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T10:56:53Z","modified":"2026-02-13T10:56:53Z","name":"Phishing domain: aavedropslive.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavedropslive.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavedropslive.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T10:56:53Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavedropslive.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--934f4802-9fba-59b8-9901-79bd07d6ed39","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-20T10:03:45Z","modified":"2026-06-20T10:03:45Z","name":"Phishing domain: aavee-defi.club","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavee-defi.club","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavee-defi.club']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-20T10:03:45Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavee-defi.club"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--88f66348-122b-5900-930b-6fb598ca5f9f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-12T22:13:41Z","modified":"2026-03-12T22:13:41Z","name":"Phishing domain: aavee.at","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavee.at","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavee.at']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-12T22:13:41Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavee.at"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f9054bc-27af-531b-bd19-ff3c5efb4e83","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-12T22:13:09Z","modified":"2026-03-12T22:13:09Z","name":"Phishing domain: aavee.bet","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavee.bet","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavee.bet']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-12T22:13:09Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavee.bet"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba214754-ccde-540a-8ae0-af7236edf501","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-29T01:07:56Z","modified":"2025-08-29T01:07:56Z","name":"Phishing domain: aavee.live","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavee.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavee.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-29T01:07:56Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavee.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--df9faf66-1c4d-5725-b763-1cd6691de0eb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-07T09:25:19Z","modified":"2026-05-07T09:25:19Z","name":"Phishing domain: aavee.run","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavee.run","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavee.run']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-07T09:25:19Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavee.run"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fb84f8b-c103-5409-bc72-14c6d0a333ec","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:59Z","modified":"2026-02-26T23:22:59Z","name":"Phishing domain: aavef.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavef.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavef.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:59Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavef.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4443964b-d5d9-57c7-b851-0a85d349418b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-12T22:14:52Z","modified":"2026-03-12T22:14:52Z","name":"Phishing domain: aavefi.one","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavefi.one","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavefi.one']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-12T22:14:52Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavefi.one"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fdbc6e1-0df1-5361-aeef-27795248c81f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-08T14:04:21Z","modified":"2026-07-08T14:04:21Z","name":"Phishing domain: aavefinance.live","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavefinance.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavefinance.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-08T14:04:21Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavefinance.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccdfd826-745c-5592-b705-27d4e58b9191","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-12T22:15:04Z","modified":"2026-03-12T22:15:04Z","name":"Phishing domain: aavefinance.one","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavefinance.one","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavefinance.one']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-12T22:15:04Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavefinance.one"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--927d4cd2-7199-58c8-a594-4f1f1d015425","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-15T09:30:44Z","modified":"2026-07-15T09:30:44Z","name":"Phishing domain: aavefinance.sbs","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavefinance.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavefinance.sbs']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-15T09:30:44Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavefinance.sbs"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b810dbe-2659-5337-8208-33c904f777e2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-16T13:06:12Z","modified":"2026-07-16T13:06:12Z","name":"Phishing domain: aavefinance.store","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavefinance.store","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavefinance.store']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-16T13:06:12Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavefinance.store"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7138a38a-3093-503b-8670-5275300f2a7b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-18T15:01:02Z","modified":"2026-07-18T15:01:02Z","name":"Phishing domain: aavefinances.pw","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavefinances.pw","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavefinances.pw']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-18T15:01:02Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavefinances.pw"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--81bb1b9f-8b94-5abc-a6c9-78d12bbad1ca","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-15T09:33:05Z","modified":"2026-07-15T09:33:05Z","name":"Phishing domain: aavefinances.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavefinances.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavefinances.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-15T09:33:05Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavefinances.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8578f090-bd4c-5c5a-9c21-82d14f08543b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:20Z","modified":"2026-02-26T23:22:20Z","name":"Phishing domain: aavefork.miexs.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavefork.miexs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavefork.miexs.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:20Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavefork.miexs.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae217122-0a4e-53eb-81c2-a2682b51b51d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-29T01:08:23Z","modified":"2025-08-29T01:08:23Z","name":"Phishing domain: aaveg.biz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aaveg.biz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaveg.biz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-29T01:08:23Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaveg.biz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cc61cf4-267c-5d1c-9e94-d5de05cd3b89","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-29T01:08:26Z","modified":"2025-08-29T01:08:26Z","name":"Phishing domain: aaveg.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aaveg.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaveg.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-29T01:08:26Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaveg.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f355b71b-637f-5f41-bc06-19a8df2ff73f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:24Z","modified":"2026-02-26T23:24:24Z","name":"Phishing domain: aavegain.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavegain.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavegain.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:24Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavegain.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1668c34-1a8f-57d7-8607-5fa41bcf4777","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:08Z","modified":"2026-02-26T23:23:08Z","name":"Phishing domain: aaveget.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aaveget.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaveget.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:08Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaveget.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6492b764-2561-59b9-8808-99dafbbc3c0c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:03Z","modified":"2026-02-26T23:21:03Z","name":"Phishing domain: aavegotchighst.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavegotchighst.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavegotchighst.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:03Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavegotchighst.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--67c77dc9-ece3-55c0-875b-bc2d59e2ebe6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-07-29T08:02:54Z","modified":"2025-07-29T08:02:54Z","name":"Phishing domain: aavegotchimigrate.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavegotchimigrate.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavegotchimigrate.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-07-29T08:02:54Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavegotchimigrate.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--87ae86a1-96ce-50bb-ab46-ffab89b3280b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T13:31:53Z","modified":"2026-06-15T13:31:53Z","name":"Phishing domain: aavegotchis.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavegotchis.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavegotchis.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T13:31:53Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavegotchis.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7d82071-9daf-57d0-a4fc-fa3f1afbf1c6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-07T09:26:10Z","modified":"2026-05-07T09:26:10Z","name":"Phishing domain: aavegov.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavegov.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavegov.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-07T09:26:10Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavegov.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b08e0061-e806-56a6-8b6c-2760b98d6d61","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-16T16:17:46Z","modified":"2025-09-16T16:17:46Z","name":"Phishing domain: aavegovernance.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavegovernance.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavegovernance.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-16T16:17:46Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavegovernance.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6254cc8c-6f47-5727-9b1e-e13ef85ca44d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:47Z","modified":"2026-02-26T23:19:47Z","name":"Phishing domain: aavegsystem.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavegsystem.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavegsystem.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:47Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavegsystem.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--222c3df3-9c6e-5a23-9456-8a59d3098b13","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:49Z","modified":"2026-02-26T23:19:49Z","name":"Phishing domain: aaveinvestment.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aaveinvestment.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaveinvestment.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:49Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaveinvestment.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a01dc0d4-2b60-5733-99e9-c10633fd332f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-17T08:11:52Z","modified":"2026-06-17T08:11:52Z","name":"Phishing domain: aavejob.tech","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavejob.tech","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavejob.tech']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-17T08:11:52Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavejob.tech"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e62b9ef-5c04-5243-9793-ac322f0f9232","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-29T01:08:47Z","modified":"2025-08-29T01:08:47Z","name":"Phishing domain: aavelab.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavelab.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavelab.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-29T01:08:47Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavelab.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0df445dd-c113-58ae-9a1a-08939930ff6a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-29T01:08:43Z","modified":"2025-08-29T01:08:43Z","name":"Phishing domain: aavelabs.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavelabs.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavelabs.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-29T01:08:43Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavelabs.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2992d2c7-4796-5ed3-bfbf-268e9c60b547","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-07T09:18:48Z","modified":"2026-05-07T09:18:48Z","name":"Phishing domain: aavelabs.vip","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavelabs.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavelabs.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-07T09:18:48Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavelabs.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--765cddba-95d3-50df-ae79-37519c05f133","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:41Z","modified":"2026-02-26T23:24:41Z","name":"Phishing domain: aavelaunch.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavelaunch.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavelaunch.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:41Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavelaunch.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf76ebbd-b7fe-59a5-8fb3-c818635beaca","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-24T01:37:59Z","modified":"2025-11-24T01:37:59Z","name":"Phishing domain: aavelegacy.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavelegacy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavelegacy.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-24T01:37:59Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavelegacy.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a646adda-67e7-5bbe-ae12-4c4a3d9446f8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-26T13:55:32Z","modified":"2026-01-26T13:55:32Z","name":"Phishing domain: aavelendservice.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavelendservice.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavelendservice.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-26T13:55:32Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavelendservice.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--85167110-ef27-546d-b7fb-7e92e7c01539","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:39Z","modified":"2026-02-26T23:22:39Z","name":"Phishing domain: aavelikei.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavelikei.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavelikei.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:39Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavelikei.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccc0a306-080c-5218-aa37-c66620ca236e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:32Z","modified":"2026-02-26T23:20:32Z","name":"Phishing domain: aavemigrate.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavemigrate.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavemigrate.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:32Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavemigrate.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--09820964-24c2-57b2-a651-deb33656b381","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:02Z","modified":"2026-02-26T23:24:02Z","name":"Phishing domain: aaveminers.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aaveminers.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaveminers.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:02Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaveminers.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d7469eb-a698-50f5-aa73-ecf2d0599a29","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-12T17:16:44Z","modified":"2026-05-12T17:16:44Z","name":"Phishing domain: aavemini.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavemini.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavemini.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-12T17:16:44Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavemini.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bc0492a-96a8-5d2b-92db-45c9c28e4d8f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-22T13:19:32Z","modified":"2026-06-22T13:19:32Z","name":"Phishing domain: aavenodedelegator.site","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavenodedelegator.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavenodedelegator.site']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-22T13:19:32Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavenodedelegator.site"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2042fcf-ae28-5448-9f7c-2af204eff3b2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-12T22:14:33Z","modified":"2026-03-12T22:14:33Z","name":"Phishing domain: aaveo.at","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aaveo.at","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaveo.at']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-12T22:14:33Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaveo.at"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1c28b6a-2822-50dc-ad71-f37daaf48d83","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: aaveplatform.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aaveplatform.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaveplatform.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaveplatform.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b3ee403-0392-5cf9-9fef-3480a2ae885d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T10:58:55Z","modified":"2026-02-13T10:58:55Z","name":"Phishing domain: aavepools.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavepools.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavepools.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T10:58:55Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavepools.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4413bc62-85a3-5990-9910-09eaaea2ac69","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:42Z","modified":"2026-02-26T23:20:42Z","name":"Phishing domain: aaveprize.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aaveprize.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaveprize.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:42Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaveprize.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--67bcf443-6507-5df6-a6b7-993077893007","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-14T02:07:51Z","modified":"2026-06-14T02:07:51Z","name":"Phishing domain: aavepro.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavepro.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavepro.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-14T02:07:51Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavepro.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--18d102f9-9151-58f3-9643-34b201cccf3d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-12T22:14:59Z","modified":"2026-03-12T22:14:59Z","name":"Phishing domain: aavepro.one","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavepro.one","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavepro.one']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-12T22:14:59Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavepro.one"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--15763867-3f00-5714-871a-a0c28d376ac9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-12T22:13:41Z","modified":"2026-03-12T22:13:41Z","name":"Phishing domain: aaveqrcode.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aaveqrcode.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaveqrcode.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-12T22:13:41Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaveqrcode.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e563728-975a-581e-9864-f624913a6111","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-13T07:29:02Z","modified":"2026-06-13T07:29:02Z","name":"Phishing domain: aaverage.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aaverage.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaverage.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-13T07:29:02Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaverage.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b4a23b2-d1a2-55a2-9b38-d89b97d8766a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-28T06:55:41Z","modified":"2026-03-28T06:55:41Z","name":"Phishing domain: aaverelaydapp.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aaverelaydapp.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaverelaydapp.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-28T06:55:41Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaverelaydapp.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bd3f700-e00f-5162-a695-4df985c525b8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-13T15:30:47Z","modified":"2025-11-13T15:30:47Z","name":"Phishing domain: aaverewardslive.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aaverewardslive.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaverewardslive.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-13T15:30:47Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaverewardslive.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f998b90-e1b0-53d4-aff5-d86260709530","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-09T11:15:40Z","modified":"2026-05-09T11:15:40Z","name":"Phishing domain: aaveroot.cyou","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aaveroot.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaveroot.cyou']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-09T11:15:40Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaveroot.cyou"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8849469f-eb46-5c6c-9a80-65692a18e4b6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-04T05:13:52Z","modified":"2026-08-04T05:13:52Z","name":"Phishing domain: aaves-vote.cam","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aaves-vote.cam","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaves-vote.cam']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-04T05:13:52Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaves-vote.cam"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--50762698-1cd0-5c22-9bac-18c46f8c7183","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:03Z","modified":"2026-02-26T23:20:03Z","name":"Phishing domain: aaves.co.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aaves.co.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaves.co.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:03Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaves.co.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--73f1c2f2-559d-5fcd-a3a8-83342dc0ad4e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-12T13:25:15Z","modified":"2026-07-12T13:25:15Z","name":"Phishing domain: aaves.events","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aaves.events","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaves.events']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-12T13:25:15Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaves.events"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1b33371-65db-56e9-a5c1-89c1739717fe","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-04T05:16:04Z","modified":"2026-08-04T05:16:04Z","name":"Phishing domain: aaves.news","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aaves.news","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaves.news']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-04T05:16:04Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaves.news"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--588deb3f-41d9-5a83-8c9e-a2b8673f17d6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-12T22:13:41Z","modified":"2026-03-12T22:13:41Z","name":"Phishing domain: aavesh.vidway.site","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavesh.vidway.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavesh.vidway.site']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-12T22:13:41Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavesh.vidway.site"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2658f7f-9b87-53a9-8caf-6eba67d9d383","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-02T06:54:39Z","modified":"2026-08-02T06:54:39Z","name":"Phishing domain: aavestake-protocol.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavestake-protocol.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavestake-protocol.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-02T06:54:39Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavestake-protocol.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ff41bea-f04d-5ed3-9cf6-c3cd0c89e068","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-29T01:37:07Z","modified":"2025-08-29T01:37:07Z","name":"Phishing domain: aavestake.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavestake.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavestake.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-29T01:37:07Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavestake.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--085a0c4b-d921-5911-a7ff-2af875b2528a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-04T17:07:02Z","modified":"2026-02-04T17:07:02Z","name":"Phishing domain: aavestaking.site","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavestaking.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavestaking.site']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-04T17:07:02Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavestaking.site"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2de34d1b-4533-5a52-97c2-36fe7171ba7e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-18T10:50:04Z","modified":"2025-09-18T10:50:04Z","name":"Phishing domain: aavesushi.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavesushi.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavesushi.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-18T10:50:04Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavesushi.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a6c133a-f90b-5984-a474-9ac043d57af6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:05Z","modified":"2026-02-26T23:20:05Z","name":"Phishing domain: aavesvap.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavesvap.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavesvap.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:05Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavesvap.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--254bc48b-6970-5230-9fb4-6ce92429e8d4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-21T14:24:36Z","modified":"2026-05-21T14:24:36Z","name":"Phishing domain: aaveswap.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aaveswap.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaveswap.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-21T14:24:36Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaveswap.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eaf51e35-5995-57f7-90fd-ebd71b823156","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-10T14:42:54Z","modified":"2026-07-10T14:42:54Z","name":"Phishing domain: aaveswap.at","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aaveswap.at","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaveswap.at']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-10T14:42:54Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaveswap.at"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1eb38f9-9558-5de0-8204-01c9a5ccfbcf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-01T15:38:56Z","modified":"2026-05-01T15:38:56Z","name":"Phishing domain: aaveswap.co.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aaveswap.co.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaveswap.co.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-01T15:38:56Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaveswap.co.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--80169979-c028-5b4f-80d6-53f8b05ec552","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-01T17:27:30Z","modified":"2026-06-01T17:27:30Z","name":"Phishing domain: aaveswap.us","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aaveswap.us","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaveswap.us']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-01T17:27:30Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaveswap.us"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1087fd9-c568-572c-96de-573ba5321b35","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-03T07:32:09Z","modified":"2026-04-03T07:32:09Z","name":"Phishing domain: aaveswapes-5cl.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aaveswapes-5cl.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaveswapes-5cl.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-03T07:32:09Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaveswapes-5cl.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c0a4e4a-8406-5e58-a27f-a2ec2b48b9fb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-15T00:24:18Z","modified":"2026-03-15T00:24:18Z","name":"Phishing domain: aaveswz.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aave. Report & evidence: https://phishdestroy.io/domain/aaveswz.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaveswz.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-15T00:24:18Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaveswz.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e3c00e4-6b80-5035-9768-c964bf8c1972","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:29Z","modified":"2026-02-26T23:20:29Z","name":"Phishing domain: aavetrades.community","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavetrades.community","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavetrades.community']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:29Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavetrades.community"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e2ce218-f8ef-5580-a225-38d0f5cf69f0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-29T01:37:15Z","modified":"2025-08-29T01:37:15Z","name":"Phishing domain: aavetrading.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavetrading.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavetrading.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-29T01:37:15Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavetrading.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1c506ef-63d5-5473-8d9d-f152244ddfbe","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T10:48:38Z","modified":"2026-02-13T10:48:38Z","name":"Phishing domain: aaveu.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aaveu.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaveu.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T10:48:38Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaveu.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e97831eb-4f66-5af1-bbc3-ccd01e4c0675","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-23T06:00:23Z","modified":"2026-04-23T06:00:23Z","name":"Phishing domain: aaveupdate.live","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aaveupdate.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaveupdate.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-23T06:00:23Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaveupdate.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c868afc-d74f-5001-adde-302380da3c58","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-05T23:19:42Z","modified":"2025-10-05T23:19:42Z","name":"Phishing domain: aaveur.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aaveur.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaveur.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-05T23:19:42Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaveur.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--59684af7-1841-548e-8e7c-c174815ab904","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-16T20:25:54Z","modified":"2025-09-16T20:25:54Z","name":"Phishing domain: aavev4.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavev4.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavev4.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-16T20:25:54Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavev4.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfe0e808-0138-5d3e-80e5-4484b7de9453","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:58Z","modified":"2026-02-26T23:19:58Z","name":"Phishing domain: aaveve.eu.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aaveve.eu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaveve.eu.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:58Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaveve.eu.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--99e394a0-90d1-5190-93a3-6963fe984476","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-08T06:35:41Z","modified":"2025-09-08T06:35:41Z","name":"Phishing domain: aavevevev2.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavevevev2.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavevevev2.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-08T06:35:41Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavevevev2.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a85bd0b3-8cdb-5e56-be07-e2b939dcf4a5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-31T07:01:47Z","modified":"2026-05-31T07:01:47Z","name":"Phishing domain: aavevote.pro","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavevote.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavevote.pro']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-31T07:01:47Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavevote.pro"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1da60662-1836-5dcf-885c-1fdfa2516ef9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-12T23:06:55Z","modified":"2026-04-12T23:06:55Z","name":"Phishing domain: aavewallet-dfg.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavewallet-dfg.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavewallet-dfg.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-12T23:06:55Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavewallet-dfg.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7940af4-4853-5883-88be-16683c10a13a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-07T09:28:10Z","modified":"2026-05-07T09:28:10Z","name":"Phishing domain: aavewebrewards.icu","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavewebrewards.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavewebrewards.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-07T09:28:10Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavewebrewards.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c019eeaf-fb1c-5083-b23e-f687419101a7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:00Z","modified":"2026-02-26T23:23:00Z","name":"Phishing domain: aaveyield.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aaveyield.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaveyield.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:00Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaveyield.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9e0879a-6f95-5d10-bc40-611618f51d1f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:30Z","modified":"2026-02-26T23:22:30Z","name":"Phishing domain: aavf.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aave. Report & evidence: https://phishdestroy.io/domain/aavf.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavf.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:30Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavf.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bed3e5d-7cee-514e-a5c8-94acf0ae5693","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-24T15:07:27Z","modified":"2025-11-24T15:07:27Z","name":"Phishing domain: aavids.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aave. Report & evidence: https://phishdestroy.io/domain/aavids.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavids.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-24T15:07:27Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavids.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7feda5b5-363b-5484-a881-49a0e4935b31","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-11T13:42:56Z","modified":"2025-09-11T13:42:56Z","name":"Phishing domain: aavk.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aave. Report & evidence: https://phishdestroy.io/domain/aavk.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavk.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-11T13:42:56Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavk.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--254223ab-d4eb-5861-8755-0a8d58ac3d17","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-24T17:50:13Z","modified":"2026-01-24T17:50:13Z","name":"Phishing domain: aavleaderboard.assetavenue.capital","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aavleaderboard.assetavenue.capital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavleaderboard.assetavenue.capital']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-24T17:50:13Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavleaderboard.assetavenue.capital"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcf1108e-d210-56de-ad2f-3be86ff94011","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-11T13:42:46Z","modified":"2025-09-11T13:42:46Z","name":"Phishing domain: aavn.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aave. Report & evidence: https://phishdestroy.io/domain/aavn.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavn.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-11T13:42:46Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavn.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d264610-52d0-553d-a6d0-abf418b7d978","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:57Z","modified":"2026-02-26T23:21:57Z","name":"Phishing domain: aavo.co.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavo.co.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavo.co.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:57Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavo.co.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6578c8c1-80d3-550c-9c31-da00f19335fc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-09T03:30:12Z","modified":"2025-10-09T03:30:12Z","name":"Phishing domain: aavonad.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aave. Report & evidence: https://phishdestroy.io/domain/aavonad.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavonad.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-09T03:30:12Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavonad.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed06e53f-fa3c-5cbc-957c-f442abb8976d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:37Z","modified":"2026-02-26T23:22:37Z","name":"Phishing domain: aavrcs.eu.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating x.com. Report & evidence: https://phishdestroy.io/domain/aavrcs.eu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavrcs.eu.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:37Z","labels":["malicious-activity","phishing","brand:x.com"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavrcs.eu.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9ec7020-46ac-5572-b5d1-ed30c41db1b1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:48Z","modified":"2026-02-26T23:19:48Z","name":"Phishing domain: aavu.co.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aave. Report & evidence: https://phishdestroy.io/domain/aavu.co.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavu.co.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:48Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavu.co.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--194bada8-2f54-5e58-a7de-659b63512377","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:36Z","modified":"2026-02-26T23:22:36Z","name":"Phishing domain: aavu.eu.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aave. Report & evidence: https://phishdestroy.io/domain/aavu.eu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavu.eu.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:36Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavu.eu.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc26936b-5645-5ebb-88fa-b63012944fbd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:28Z","modified":"2026-02-26T23:21:28Z","name":"Phishing domain: aavue.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/aavue.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavue.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:28Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavue.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--731021fc-eb6e-56cc-98ae-44e35858f5b2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:07Z","modified":"2026-02-26T23:24:07Z","name":"Phishing domain: aavve-dachboard.it.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aavve-dachboard.it.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavve-dachboard.it.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavve-dachboard.it.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eef3b618-26cc-59fd-bebc-c90f76a3e4d1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:36Z","modified":"2026-02-26T23:24:36Z","name":"Phishing domain: aavvr.eu.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aavvr.eu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavvr.eu.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:36Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavvr.eu.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--31a2ce6e-000e-522c-b8d0-acd3e761778b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-08T21:56:40Z","modified":"2025-10-08T21:56:40Z","name":"Phishing domain: aavx.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aavx.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavx.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-08T21:56:40Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavx.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce3da1fc-c215-5d60-82dd-7e820508efe5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-05T22:30:56Z","modified":"2025-10-05T22:30:56Z","name":"Phishing domain: aavxs.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/aavxs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavxs.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-05T22:30:56Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavxs.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--14d93aca-6040-551e-b9eb-fb4b5488fe7b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-24T16:27:41Z","modified":"2026-01-24T16:27:41Z","name":"Phishing domain: aavy.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/aavy.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavy.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-24T16:27:41Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavy.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7772b242-68ec-562b-b895-8c28453703c8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-11T13:42:54Z","modified":"2025-09-11T13:42:54Z","name":"Phishing domain: aavz.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aave. Report & evidence: https://phishdestroy.io/domain/aavz.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aavz.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-11T13:42:54Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aavz.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--853bf4be-76f9-554c-86b8-8dac668ce1b0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:50Z","modified":"2026-02-26T23:24:50Z","name":"Phishing domain: aawe.co.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aave. Report & evidence: https://phishdestroy.io/domain/aawe.co.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aawe.co.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:50Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aawe.co.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--220c1362-04f0-5a8e-bb87-454bce9164c5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-01T12:56:59Z","modified":"2025-11-01T12:56:59Z","name":"Phishing domain: aawe.finance","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bnb chain. Report & evidence: https://phishdestroy.io/domain/aawe.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aawe.finance']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-01T12:56:59Z","labels":["malicious-activity","phishing","brand:bnb chain"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aawe.finance"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--449ee5d8-759e-58d7-819a-6504664a1a45","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:36Z","modified":"2026-02-26T23:19:36Z","name":"Phishing domain: aaye.co.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aave. Report & evidence: https://phishdestroy.io/domain/aaye.co.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaye.co.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:36Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaye.co.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4c59027-59fe-5ef3-940c-bb9c04a968ef","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-19T08:06:46Z","modified":"2025-10-19T08:06:46Z","name":"Phishing domain: aayinvestmentsloanpty.co.za","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating whatsapp. Report & evidence: https://phishdestroy.io/domain/aayinvestmentsloanpty.co.za","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aayinvestmentsloanpty.co.za']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-19T08:06:46Z","labels":["malicious-activity","phishing","brand:whatsapp"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aayinvestmentsloanpty.co.za"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e136cb07-21a6-5f90-b2b2-f7e4aee93ab8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-27T12:46:35Z","modified":"2025-12-27T12:46:35Z","name":"Phishing domain: aayush4725.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Netflix. Report & evidence: https://phishdestroy.io/domain/aayush4725.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aayush4725.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-27T12:46:35Z","labels":["malicious-activity","phishing","brand:netflix"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aayush4725.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fb3f631-5fbb-5deb-b5d2-30ed19d6a8ec","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-14T20:22:08Z","modified":"2026-02-14T20:22:08Z","name":"Phishing domain: aaztec.network","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Facebook. Report & evidence: https://phishdestroy.io/domain/aaztec.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aaztec.network']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-14T20:22:08Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aaztec.network"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--02af6412-ce38-51aa-bfb1-75d27bc98393","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-05T21:16:27Z","modified":"2025-10-05T21:16:27Z","name":"Phishing domain: aazvc.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/aazvc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aazvc.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-05T21:16:27Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aazvc.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9b225d7-0677-5d54-affe-e1a496cefd2c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-14T20:16:05Z","modified":"2026-02-14T20:16:05Z","name":"Phishing domain: ab.sol-lib.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Phantom Wallet. Report & evidence: https://phishdestroy.io/domain/ab.sol-lib.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ab.sol-lib.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-14T20:16:05Z","labels":["malicious-activity","phishing","brand:phantom wallet"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ab.sol-lib.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0578369b-050c-5bfa-9803-04e1661361ca","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: ab2.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ab2.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ab2.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ab2.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b83df7b-765b-5318-a8c1-e54c4bb16365","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-01T03:19:16Z","modified":"2026-04-01T03:19:16Z","name":"Phishing domain: ab2660713.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating netflix. Report & evidence: https://phishdestroy.io/domain/ab2660713.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ab2660713.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-01T03:19:16Z","labels":["malicious-activity","phishing","brand:netflix"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ab2660713.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--798d8ef9-9cb3-5206-a376-940e761ef509","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-17T14:13:50Z","modified":"2025-11-17T14:13:50Z","name":"Phishing domain: ab2b8199-087a-4833-ad46-5f5354260933.botmetis.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aave. Report & evidence: https://phishdestroy.io/domain/ab2b8199-087a-4833-ad46-5f5354260933.botmetis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ab2b8199-087a-4833-ad46-5f5354260933.botmetis.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-17T14:13:50Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ab2b8199-087a-4833-ad46-5f5354260933.botmetis.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b3b379c-e542-5bed-9fbd-8eb79b961d94","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: ab3.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ab3.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ab3.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ab3.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3171acb-426b-54b6-a0c2-e22830df3c76","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-28T06:23:34Z","modified":"2026-03-28T06:23:34Z","name":"Phishing domain: ab7.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ab7.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ab7.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-28T06:23:34Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ab7.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b73e57e8-0d38-5d4f-b30a-afa2b640e1b5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-24T16:41:59Z","modified":"2026-04-24T16:41:59Z","name":"Phishing domain: aba4eb18d31bb5e782be8ac545deb9d7.netlify.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aba4eb18d31bb5e782be8ac545deb9d7.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aba4eb18d31bb5e782be8ac545deb9d7.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-24T16:41:59Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aba4eb18d31bb5e782be8ac545deb9d7.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c5d3e63-090f-5349-9b1c-0c774c0835ab","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-16T07:30:44Z","modified":"2025-12-16T07:30:44Z","name":"Phishing domain: ababase.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ababase.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ababase.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-16T07:30:44Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ababase.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--657d77ed-bc87-5796-b6cb-3767bf55da17","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-27T15:18:28Z","modified":"2026-06-27T15:18:28Z","name":"Phishing domain: abacus-market.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abacus-market.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abacus-market.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-27T15:18:28Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abacus-market.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7c84106-6c6e-548f-baf3-82cfd4eca2dd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-23T21:36:51Z","modified":"2026-05-23T21:36:51Z","name":"Phishing domain: abacus5m27pzz3i6cfh7cg7tjt43lkiur6gjqjrwym2avv4uvgfmabad.online","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abacus5m27pzz3i6cfh7cg7tjt43lkiur6gjqjrwym2avv4uvgfmabad.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abacus5m27pzz3i6cfh7cg7tjt43lkiur6gjqjrwym2avv4uvgfmabad.online']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-23T21:36:51Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abacus5m27pzz3i6cfh7cg7tjt43lkiur6gjqjrwym2avv4uvgfmabad.online"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e83c82c-40a0-51e8-a327-f6c3bf9b6f41","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-01T09:08:35Z","modified":"2026-07-01T09:08:35Z","name":"Phishing domain: abacusdarkhub.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/abacusdarkhub.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abacusdarkhub.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-01T09:08:35Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abacusdarkhub.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f9213f3-a94f-5cad-b135-182f2f45eb22","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T03:46:52Z","modified":"2026-06-15T03:46:52Z","name":"Phishing domain: abacusdarknet.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abacusdarknet.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abacusdarknet.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T03:46:52Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abacusdarknet.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9224648-0422-59b7-b239-402c5d19244b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-17T22:27:42Z","modified":"2026-05-17T22:27:42Z","name":"Phishing domain: abacusdarknet.to","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/abacusdarknet.to","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abacusdarknet.to']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-17T22:27:42Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abacusdarknet.to"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e25c9cff-1957-585a-bdb6-5973d1a55cf1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-12T18:57:55Z","modified":"2026-06-12T18:57:55Z","name":"Phishing domain: abacuseeettcn3n2zxo7tqy5vsxhqpna2jtjqs7cgdjzl2jascr4liad.top","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abacuseeettcn3n2zxo7tqy5vsxhqpna2jtjqs7cgdjzl2jascr4liad.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abacuseeettcn3n2zxo7tqy5vsxhqpna2jtjqs7cgdjzl2jascr4liad.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-12T18:57:55Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abacuseeettcn3n2zxo7tqy5vsxhqpna2jtjqs7cgdjzl2jascr4liad.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c11445e8-394a-5908-8050-9f0fda5d3ff6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-30T04:36:02Z","modified":"2026-06-30T04:36:02Z","name":"Phishing domain: abacusmarket.to","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abacusmarket.to","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abacusmarket.to']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-30T04:36:02Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abacusmarket.to"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f87a3605-3f0d-53a5-ae95-2a1d82bdf7cf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-17T22:27:59Z","modified":"2026-05-17T22:27:59Z","name":"Phishing domain: abacusmarketcrypt.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abacusmarketcrypt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abacusmarketcrypt.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-17T22:27:59Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abacusmarketcrypt.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a1c8e52-32a7-56e2-8ae9-02819afe757e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-27T22:42:40Z","modified":"2026-03-27T22:42:40Z","name":"Phishing domain: abacusmarketmirror.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/abacusmarketmirror.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abacusmarketmirror.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-27T22:42:40Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abacusmarketmirror.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--946a57eb-5f6c-5c72-88dd-26f193711c22","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-28T00:13:19Z","modified":"2026-03-28T00:13:19Z","name":"Phishing domain: abacusmarketplace.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abacusmarketplace.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abacusmarketplace.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-28T00:13:19Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abacusmarketplace.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4c04d1d-96aa-51ca-b497-9003061e4d2e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-27T22:42:59Z","modified":"2026-03-27T22:42:59Z","name":"Phishing domain: abacusmarketurl.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abacusmarketurl.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abacusmarketurl.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-27T22:42:59Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abacusmarketurl.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa208db1-abbb-5e3b-a61d-3761b59368d8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-27T01:18:10Z","modified":"2026-03-27T01:18:10Z","name":"Phishing domain: abacusmarketweb.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/abacusmarketweb.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abacusmarketweb.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-27T01:18:10Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abacusmarketweb.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8984d21-656c-5667-9608-4eb1e7a448e4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-27T22:43:44Z","modified":"2026-03-27T22:43:44Z","name":"Phishing domain: abacusonionmarket.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/abacusonionmarket.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abacusonionmarket.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-27T22:43:44Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abacusonionmarket.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1af6f5a9-3a39-5567-9417-ddc09260ff95","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-28T10:30:32Z","modified":"2026-01-28T10:30:32Z","name":"Phishing domain: abadonbet.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/abadonbet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abadonbet.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-28T10:30:32Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abadonbet.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3820a76-cfcc-53bd-afcc-7a9586807514","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-20T21:05:33Z","modified":"2026-07-20T21:05:33Z","name":"Phishing domain: abal.my","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abal.my","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abal.my']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-20T21:05:33Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abal.my"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef768a2c-1eda-5d91-b53d-bcb02e14cdab","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-19T06:12:28Z","modified":"2025-09-19T06:12:28Z","name":"Phishing domain: abanto-ia.trade","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/abanto-ia.trade","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abanto-ia.trade']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-19T06:12:28Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abanto-ia.trade"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba253105-b1aa-5108-8651-1b04e50e5391","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-03T16:08:34Z","modified":"2026-04-03T16:08:34Z","name":"Phishing domain: abaraxx-wllets-clouds.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abaraxx-wllets-clouds.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abaraxx-wllets-clouds.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-03T16:08:34Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abaraxx-wllets-clouds.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c37a90a6-16eb-5d5f-b50a-5e7f75fb0f08","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-02T14:01:37Z","modified":"2026-07-02T14:01:37Z","name":"Phishing domain: abarrotodo.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abarrotodo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abarrotodo.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-02T14:01:37Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abarrotodo.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f58e9396-2125-53a2-b5fd-db3cce605f85","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-22T15:18:12Z","modified":"2026-01-22T15:18:12Z","name":"Phishing domain: abaschoolpay.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abaschoolpay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abaschoolpay.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-22T15:18:12Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abaschoolpay.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--74256ee5-c1ee-5e11-909c-68a02e5da859","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-14T01:44:50Z","modified":"2025-11-14T01:44:50Z","name":"Phishing domain: abasecoin.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abasecoin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abasecoin.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-14T01:44:50Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abasecoin.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--78cff498-a581-5f09-bb6d-573f042669df","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-19T01:11:02Z","modified":"2025-10-19T01:11:02Z","name":"Phishing domain: abaselama.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating facebook. Report & evidence: https://phishdestroy.io/domain/abaselama.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abaselama.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-19T01:11:02Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abaselama.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c21663c2-faf4-5a87-a9d2-fe918fd92d28","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-13T23:44:09Z","modified":"2026-04-13T23:44:09Z","name":"Phishing domain: abashscrap.com.ng","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/abashscrap.com.ng","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abashscrap.com.ng']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-13T23:44:09Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abashscrap.com.ng"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7d9dfde-8aef-5954-afbe-5be85b8a306e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:55Z","modified":"2026-02-26T23:23:55Z","name":"Phishing domain: abatraders.acetchapp.link","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abatraders.acetchapp.link","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abatraders.acetchapp.link']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:55Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abatraders.acetchapp.link"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--76611080-330f-57fe-854f-1453080b304a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-14T20:16:09Z","modified":"2026-02-14T20:16:09Z","name":"Phishing domain: abb.soluniverse.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/abb.soluniverse.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abb.soluniverse.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-14T20:16:09Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abb.soluniverse.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8dcebc5c-5777-5531-89f8-a988e9fd939d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-09T15:18:02Z","modified":"2026-04-09T15:18:02Z","name":"Phishing domain: abba-unick.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating wetransfer. Report & evidence: https://phishdestroy.io/domain/abba-unick.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abba-unick.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-09T15:18:02Z","labels":["malicious-activity","phishing","brand:wetransfer"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abba-unick.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--904b41a9-6011-5768-883c-d3325ce515e9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-17T11:58:31Z","modified":"2025-09-17T11:58:31Z","name":"Phishing domain: abbastrademining.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating base. Report & evidence: https://phishdestroy.io/domain/abbastrademining.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abbastrademining.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-17T11:58:31Z","labels":["malicious-activity","phishing","brand:base"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abbastrademining.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--49ea8796-51f5-59d2-a0e4-7f402009b4b0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-23T13:01:58Z","modified":"2025-09-23T13:01:58Z","name":"Phishing domain: abbeynursinghome.co.uk","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Facebook. Report & evidence: https://phishdestroy.io/domain/abbeynursinghome.co.uk","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abbeynursinghome.co.uk']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-23T13:01:58Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abbeynursinghome.co.uk"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f7076e3-26ba-5ea4-bf2b-dddc470648e2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-10T23:58:04Z","modified":"2026-02-10T23:58:04Z","name":"Phishing domain: abbitac.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abbitac.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abbitac.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-10T23:58:04Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abbitac.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9192173-99ee-5e69-89b4-dca1f223d598","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T05:10:16Z","modified":"2026-07-27T05:10:16Z","name":"Phishing domain: abbotkinneycapital.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abbotkinneycapital.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abbotkinneycapital.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T05:10:16Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abbotkinneycapital.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--405a7b4a-5387-5982-957e-68a7db0287a9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-07T01:21:37Z","modified":"2026-02-07T01:21:37Z","name":"Phishing domain: abc-test-10.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abc-test-10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abc-test-10.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-07T01:21:37Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abc-test-10.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c515b53d-fa25-5f4f-96a3-281a700aa224","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-18T17:55:34Z","modified":"2026-07-18T17:55:34Z","name":"Phishing domain: abc.ilptour.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abc.ilptour.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abc.ilptour.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-18T17:55:34Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abc.ilptour.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b6bd626-698c-5482-8bdd-d8769bf16852","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-13T22:15:23Z","modified":"2026-08-13T22:15:23Z","name":"Phishing domain: abc62a.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/abc62a.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abc62a.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-13T22:15:23Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abc62a.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b8923cf-9973-5721-9772-bdc68068f08b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-07-12T17:35:24Z","modified":"2025-07-12T17:35:24Z","name":"Phishing domain: abccargocourier.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/abccargocourier.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abccargocourier.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-07-12T17:35:24Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abccargocourier.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf14acc6-ed94-5ab8-9d7d-d56bce259837","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-09T15:36:43Z","modified":"2026-03-09T15:36:43Z","name":"Phishing domain: abcdefg.lat","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abcdefg.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abcdefg.lat']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-09T15:36:43Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abcdefg.lat"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e584fa9e-6463-5203-bb2a-bdb4fe5c4ad2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-07-12T17:35:04Z","modified":"2025-07-12T17:35:04Z","name":"Phishing domain: abcexpress.online","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/abcexpress.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abcexpress.online']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-07-12T17:35:04Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abcexpress.online"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--15de6715-357d-5c75-a515-0b015f4a9067","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-25T00:13:13Z","modified":"2025-10-25T00:13:13Z","name":"Phishing domain: abcsllt6.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating ebay. Report & evidence: https://phishdestroy.io/domain/abcsllt6.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abcsllt6.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-25T00:13:13Z","labels":["malicious-activity","phishing","brand:ebay"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abcsllt6.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--83cc4274-6154-5908-8d5e-5a01fdc86a33","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-25T00:13:34Z","modified":"2025-10-25T00:13:34Z","name":"Phishing domain: abcsllt8.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating ebay. Report & evidence: https://phishdestroy.io/domain/abcsllt8.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abcsllt8.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-25T00:13:34Z","labels":["malicious-activity","phishing","brand:ebay"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abcsllt8.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7729c1d-990f-51de-b5d0-d3e9188bcada","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:04Z","modified":"2026-02-26T23:21:04Z","name":"Phishing domain: abcxbit.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abcxbit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abcxbit.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:04Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abcxbit.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--79bf200f-4e63-5be1-b9c3-58c496595d61","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-08T14:47:55Z","modified":"2026-03-08T14:47:55Z","name":"Phishing domain: abcyourdreamshop.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating tiktokshop. Report & evidence: https://phishdestroy.io/domain/abcyourdreamshop.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abcyourdreamshop.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-08T14:47:55Z","labels":["malicious-activity","phishing","brand:tiktokshop"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abcyourdreamshop.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d11beb70-c14d-5773-97ff-07ced1fba27a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-15T15:31:17Z","modified":"2026-07-15T15:31:17Z","name":"Phishing domain: abd-elsamad.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating facebook. Report & evidence: https://phishdestroy.io/domain/abd-elsamad.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abd-elsamad.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-15T15:31:17Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abd-elsamad.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--51c078c5-bd77-5bde-808f-adbc25946cb5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-10T14:37:21Z","modified":"2026-06-10T14:37:21Z","name":"Phishing domain: abdel505-001-site1.ltempurl.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating swisscom. Report & evidence: https://phishdestroy.io/domain/abdel505-001-site1.ltempurl.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abdel505-001-site1.ltempurl.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-10T14:37:21Z","labels":["malicious-activity","phishing","brand:swisscom"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abdel505-001-site1.ltempurl.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--65e2d5b6-a635-57ae-8fa3-18be07c547da","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-24T03:25:03Z","modified":"2026-03-24T03:25:03Z","name":"Phishing domain: abdo267.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating netflix. Report & evidence: https://phishdestroy.io/domain/abdo267.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abdo267.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-24T03:25:03Z","labels":["malicious-activity","phishing","brand:netflix"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abdo267.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc7ddc41-e698-5a35-97a4-37e4fa4625ff","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:27Z","modified":"2026-02-26T23:20:27Z","name":"Phishing domain: abduazim10.github.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abduazim10.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abduazim10.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:27Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abduazim10.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d8add0d-a651-57de-b0ae-583d6bae5a52","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-08T14:59:55Z","modified":"2026-06-08T14:59:55Z","name":"Phishing domain: abdullah-2r.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/abdullah-2r.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abdullah-2r.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-08T14:59:55Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abdullah-2r.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c818668-71eb-5a46-b289-e11bdc4d41df","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-11T02:32:22Z","modified":"2026-05-11T02:32:22Z","name":"Phishing domain: abdullah23890.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating amazon. Report & evidence: https://phishdestroy.io/domain/abdullah23890.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abdullah23890.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-11T02:32:22Z","labels":["malicious-activity","phishing","brand:amazon"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abdullah23890.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c1bd34e-eb6a-5a8f-a3ff-9d6448c9e1e3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-02T14:48:43Z","modified":"2026-04-02T14:48:43Z","name":"Phishing domain: abdullahzaheer147.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating netflix. Report & evidence: https://phishdestroy.io/domain/abdullahzaheer147.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abdullahzaheer147.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-02T14:48:43Z","labels":["malicious-activity","phishing","brand:netflix"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abdullahzaheer147.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8637c329-9895-5709-b7cc-8bdaf144373c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-29T07:53:53Z","modified":"2026-06-29T07:53:53Z","name":"Phishing domain: abdulloxx-mexc.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating MEXC. Report & evidence: https://phishdestroy.io/domain/abdulloxx-mexc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abdulloxx-mexc.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-29T07:53:53Z","labels":["malicious-activity","phishing","brand:mexc"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abdulloxx-mexc.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ebaaaf0-f58a-5338-9559-da5b854815d9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-03T11:15:34Z","modified":"2025-09-03T11:15:34Z","name":"Phishing domain: abdulmazidakash.netlify.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/abdulmazidakash.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abdulmazidakash.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-03T11:15:34Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abdulmazidakash.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--85ac09ac-692a-50b4-abd2-974fe215c1b0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-15T15:16:13Z","modified":"2026-04-15T15:16:13Z","name":"Phishing domain: abdulrahman-medhat.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating netflix. Report & evidence: https://phishdestroy.io/domain/abdulrahman-medhat.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abdulrahman-medhat.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-15T15:16:13Z","labels":["malicious-activity","phishing","brand:netflix"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abdulrahman-medhat.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7018fb2f-2afb-571c-8084-1e8ebea48ae0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-11T03:07:28Z","modified":"2026-04-11T03:07:28Z","name":"Phishing domain: abe-cto.ai-cryptolist.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abe-cto.ai-cryptolist.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abe-cto.ai-cryptolist.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-11T03:07:28Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abe-cto.ai-cryptolist.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a319256-2ef8-5110-8137-ed355cab4f27","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-27T16:00:08Z","modified":"2026-03-27T16:00:08Z","name":"Phishing domain: abedinbybit2-arch.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bybit. Report & evidence: https://phishdestroy.io/domain/abedinbybit2-arch.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abedinbybit2-arch.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-27T16:00:08Z","labels":["malicious-activity","phishing","brand:bybit"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abedinbybit2-arch.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef0e65ce-9396-5f6e-8d7a-40c7254318d7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-06T23:54:17Z","modified":"2026-02-06T23:54:17Z","name":"Phishing domain: abegb2.riotsys.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Facebook. Report & evidence: https://phishdestroy.io/domain/abegb2.riotsys.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abegb2.riotsys.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-06T23:54:17Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abegb2.riotsys.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--90f1af51-fa31-58d7-a340-5867a78ff42a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-11T14:15:02Z","modified":"2026-07-11T14:15:02Z","name":"Phishing domain: abegibarta.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abegibarta.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abegibarta.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-11T14:15:02Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abegibarta.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9dc84fdc-e793-5cec-848f-831c83322941","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-20T10:24:43Z","modified":"2026-05-20T10:24:43Z","name":"Phishing domain: abel-asmelash.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating netflix. Report & evidence: https://phishdestroy.io/domain/abel-asmelash.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abel-asmelash.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-20T10:24:43Z","labels":["malicious-activity","phishing","brand:netflix"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abel-asmelash.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d031694b-4421-5e11-ac5e-33e7669a39eb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-28T17:30:27Z","modified":"2026-04-28T17:30:27Z","name":"Phishing domain: abet.bot","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abet.bot","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abet.bot']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-28T17:30:27Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abet.bot"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6060fb6b-aff0-5f00-8048-c05955e1d303","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-27T13:56:13Z","modified":"2026-03-27T13:56:13Z","name":"Phishing domain: abfarmacia-europea.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abfarmacia-europea.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abfarmacia-europea.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-27T13:56:13Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abfarmacia-europea.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d0b14da-8d49-5e10-8419-bfdc6a44d6a0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-08T11:19:05Z","modified":"2025-08-08T11:19:05Z","name":"Phishing domain: abfex-globalsltd.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating celer. Report & evidence: https://phishdestroy.io/domain/abfex-globalsltd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abfex-globalsltd.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-08T11:19:05Z","labels":["malicious-activity","phishing","brand:celer"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abfex-globalsltd.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d74b9894-5007-5c44-9c41-fdd5bb5ce4e3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-18T14:40:54Z","modified":"2026-06-18T14:40:54Z","name":"Phishing domain: abg1818s.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bet365. Report & evidence: https://phishdestroy.io/domain/abg1818s.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abg1818s.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-18T14:40:54Z","labels":["malicious-activity","phishing","brand:bet365"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abg1818s.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--63b33276-ebe6-5961-9778-af612621f8de","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:23Z","modified":"2026-02-26T23:22:23Z","name":"Phishing domain: abg276.it","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/abg276.it","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abg276.it']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:23Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abg276.it"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3dbefec-8edc-54ee-abe2-4b7835f3c87b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-24T15:17:02Z","modified":"2025-12-24T15:17:02Z","name":"Phishing domain: abguu-3aaaa-aaaag-albkq-cai.icp0.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abguu-3aaaa-aaaag-albkq-cai.icp0.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abguu-3aaaa-aaaag-albkq-cai.icp0.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-24T15:17:02Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abguu-3aaaa-aaaag-albkq-cai.icp0.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--139795ed-17c9-532e-99ba-9395ff52dc92","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-08T15:29:45Z","modified":"2026-04-08T15:29:45Z","name":"Phishing domain: abhaysinghtomar97.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating netflix. Report & evidence: https://phishdestroy.io/domain/abhaysinghtomar97.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abhaysinghtomar97.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-08T15:29:45Z","labels":["malicious-activity","phishing","brand:netflix"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abhaysinghtomar97.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dce3d197-036e-5d4c-ad34-e2fd270cbcd1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-31T16:48:23Z","modified":"2026-03-31T16:48:23Z","name":"Phishing domain: abhi-jeet-singh-0267.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating netflix. Report & evidence: https://phishdestroy.io/domain/abhi-jeet-singh-0267.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abhi-jeet-singh-0267.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-31T16:48:23Z","labels":["malicious-activity","phishing","brand:netflix"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abhi-jeet-singh-0267.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc1e197b-9a14-5cc0-94ff-b219748ffd90","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-24T03:31:58Z","modified":"2026-03-24T03:31:58Z","name":"Phishing domain: abhi72609.github.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abhi72609.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abhi72609.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-24T03:31:58Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abhi72609.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbc745d2-c124-570f-b23c-da99ef098cd7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-24T14:09:55Z","modified":"2026-07-24T14:09:55Z","name":"Phishing domain: abhi99271.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating netflix. Report & evidence: https://phishdestroy.io/domain/abhi99271.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abhi99271.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-24T14:09:55Z","labels":["malicious-activity","phishing","brand:netflix"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abhi99271.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--64a3ac83-4ab9-510a-a163-874ccf6dbbe6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-07-09T23:43:18Z","modified":"2025-07-09T23:43:18Z","name":"Phishing domain: abhienergetic.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating steam. Report & evidence: https://phishdestroy.io/domain/abhienergetic.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abhienergetic.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-07-09T23:43:18Z","labels":["malicious-activity","phishing","brand:steam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abhienergetic.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e832554-c65d-52db-b306-ae5b1e8aabbb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-14T14:18:25Z","modified":"2026-07-14T14:18:25Z","name":"Phishing domain: abhijeetkumartiwari.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating amazon. Report & evidence: https://phishdestroy.io/domain/abhijeetkumartiwari.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abhijeetkumartiwari.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-14T14:18:25Z","labels":["malicious-activity","phishing","brand:amazon"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abhijeetkumartiwari.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2630a1bd-1f13-5394-aa82-4c2415c3d6c1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-07T15:20:45Z","modified":"2026-08-07T15:20:45Z","name":"Phishing domain: abhijeetrajput9.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating amazon. Report & evidence: https://phishdestroy.io/domain/abhijeetrajput9.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abhijeetrajput9.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-07T15:20:45Z","labels":["malicious-activity","phishing","brand:amazon"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abhijeetrajput9.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3410cd9-0634-5f58-8e29-8a88a21a9b02","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-18T15:31:50Z","modified":"2026-04-18T15:31:50Z","name":"Phishing domain: abhijeetsingh79.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating amazon. Report & evidence: https://phishdestroy.io/domain/abhijeetsingh79.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abhijeetsingh79.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-18T15:31:50Z","labels":["malicious-activity","phishing","brand:amazon"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abhijeetsingh79.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a940328-a91f-52f0-a3da-3b0285042da9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-08T14:40:45Z","modified":"2026-07-08T14:40:45Z","name":"Phishing domain: abhimanyu-labs.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating netflix. Report & evidence: https://phishdestroy.io/domain/abhimanyu-labs.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abhimanyu-labs.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-08T14:40:45Z","labels":["malicious-activity","phishing","brand:netflix"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abhimanyu-labs.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ce549e6-603d-5961-986f-6bd06bfbf9c4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-26T16:18:02Z","modified":"2026-04-26T16:18:02Z","name":"Phishing domain: abhimanyu088.github.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abhimanyu088.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abhimanyu088.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-26T16:18:02Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abhimanyu088.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--752e9863-216c-543a-8231-863eaf916faa","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-14T16:21:28Z","modified":"2026-04-14T16:21:28Z","name":"Phishing domain: abhinav-345.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating netflix. Report & evidence: https://phishdestroy.io/domain/abhinav-345.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abhinav-345.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-14T16:21:28Z","labels":["malicious-activity","phishing","brand:netflix"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abhinav-345.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7baeee98-4a38-59f2-8ba8-a18ba5426d5e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-12T15:54:08Z","modified":"2026-04-12T15:54:08Z","name":"Phishing domain: abhinav5383.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating netflix. Report & evidence: https://phishdestroy.io/domain/abhinav5383.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abhinav5383.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-12T15:54:08Z","labels":["malicious-activity","phishing","brand:netflix"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abhinav5383.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5911079-4174-5096-82bb-f8fe7de3c994","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-04T03:00:53Z","modified":"2026-08-04T03:00:53Z","name":"Phishing domain: abhinav962173.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating near. Report & evidence: https://phishdestroy.io/domain/abhinav962173.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abhinav962173.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-04T03:00:53Z","labels":["malicious-activity","phishing","brand:near"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abhinav962173.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--80823871-257b-5a56-9e6a-354f1c46b705","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-02T15:26:51Z","modified":"2026-05-02T15:26:51Z","name":"Phishing domain: abhinavsingh1404.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating netflix. Report & evidence: https://phishdestroy.io/domain/abhinavsingh1404.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abhinavsingh1404.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-02T15:26:51Z","labels":["malicious-activity","phishing","brand:netflix"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abhinavsingh1404.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c6cc742-20a2-509e-a2b0-75936f6bd1d9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-20T13:09:12Z","modified":"2026-07-20T13:09:12Z","name":"Phishing domain: abhiramk18.github.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abhiramk18.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abhiramk18.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-20T13:09:12Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abhiramk18.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dabf1e3a-5e81-5d14-807f-2cce307558a5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-24T03:23:04Z","modified":"2026-03-24T03:23:04Z","name":"Phishing domain: abhis-kumar.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating netflix. Report & evidence: https://phishdestroy.io/domain/abhis-kumar.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abhis-kumar.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-24T03:23:04Z","labels":["malicious-activity","phishing","brand:netflix"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abhis-kumar.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--845047f2-41d5-5a65-b41a-ad5d2600f50e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-31T16:05:36Z","modified":"2026-05-31T16:05:36Z","name":"Phishing domain: abhisahu-infer.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Netflix. Report & evidence: https://phishdestroy.io/domain/abhisahu-infer.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abhisahu-infer.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-31T16:05:36Z","labels":["malicious-activity","phishing","brand:netflix"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abhisahu-infer.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--66ae8448-eb2f-5085-bfc7-c270ea4c9e92","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-22T15:26:03Z","modified":"2026-04-22T15:26:03Z","name":"Phishing domain: abhishek-akkal.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating amazon. Report & evidence: https://phishdestroy.io/domain/abhishek-akkal.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abhishek-akkal.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-22T15:26:03Z","labels":["malicious-activity","phishing","brand:amazon"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abhishek-akkal.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ea7c5b9-b3a6-52ff-bb7a-1a8983d65193","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-07T02:12:14Z","modified":"2026-06-07T02:12:14Z","name":"Phishing domain: abhishek-codelab.github.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abhishek-codelab.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abhishek-codelab.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-07T02:12:14Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abhishek-codelab.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--983071d0-dea4-534e-bef5-901aa1009ebb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-23T02:19:12Z","modified":"2026-07-23T02:19:12Z","name":"Phishing domain: abhishek-kumawat26.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating amazon. Report & evidence: https://phishdestroy.io/domain/abhishek-kumawat26.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abhishek-kumawat26.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-23T02:19:12Z","labels":["malicious-activity","phishing","brand:amazon"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abhishek-kumawat26.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--22902ac8-7274-5c6c-a004-fa5ec28bc81e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-09T15:15:39Z","modified":"2026-04-09T15:15:39Z","name":"Phishing domain: abhishek040906.github.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abhishek040906.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abhishek040906.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-09T15:15:39Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abhishek040906.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d2afdb8-3a36-543a-937c-0d0b986d920e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-28T04:04:58Z","modified":"2026-03-28T04:04:58Z","name":"Phishing domain: abhishek20-prog.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating netflix. Report & evidence: https://phishdestroy.io/domain/abhishek20-prog.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abhishek20-prog.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-28T04:04:58Z","labels":["malicious-activity","phishing","brand:netflix"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abhishek20-prog.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e974503c-3e2d-5dea-b5ec-1b225050ac66","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-30T15:12:42Z","modified":"2026-03-30T15:12:42Z","name":"Phishing domain: abhishekkumar2114.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating netflix. Report & evidence: https://phishdestroy.io/domain/abhishekkumar2114.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abhishekkumar2114.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-30T15:12:42Z","labels":["malicious-activity","phishing","brand:netflix"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abhishekkumar2114.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c09c1378-700b-5984-9a9d-7941c0a2ca0c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-14T16:20:34Z","modified":"2026-04-14T16:20:34Z","name":"Phishing domain: abhishekkumarguptadev.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating netflix. Report & evidence: https://phishdestroy.io/domain/abhishekkumarguptadev.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abhishekkumarguptadev.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-14T16:20:34Z","labels":["malicious-activity","phishing","brand:netflix"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abhishekkumarguptadev.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--91f895a3-a88b-5935-8621-223eb5a6fff8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-27T16:00:09Z","modified":"2026-03-27T16:00:09Z","name":"Phishing domain: abhishekprasad963.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating amazon. Report & evidence: https://phishdestroy.io/domain/abhishekprasad963.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abhishekprasad963.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-27T16:00:09Z","labels":["malicious-activity","phishing","brand:amazon"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abhishekprasad963.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--01b8087b-524c-5ecc-b2c9-c870bca25e79","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-05T02:37:53Z","modified":"2026-07-05T02:37:53Z","name":"Phishing domain: abhishektyagipro.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating netflix. Report & evidence: https://phishdestroy.io/domain/abhishektyagipro.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abhishektyagipro.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-05T02:37:53Z","labels":["malicious-activity","phishing","brand:netflix"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abhishektyagipro.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--264f5957-9d8e-55d6-8afd-3e339669ab37","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-20T13:33:21Z","modified":"2026-04-20T13:33:21Z","name":"Phishing domain: abhisingh1262.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating netflix. Report & evidence: https://phishdestroy.io/domain/abhisingh1262.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abhisingh1262.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-20T13:33:21Z","labels":["malicious-activity","phishing","brand:netflix"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abhisingh1262.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--df66559a-f07d-5a30-a2f7-7f2a4fb79fe0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-26T15:41:10Z","modified":"2026-03-26T15:41:10Z","name":"Phishing domain: abhistudio-cloud.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating netflix. Report & evidence: https://phishdestroy.io/domain/abhistudio-cloud.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abhistudio-cloud.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-26T15:41:10Z","labels":["malicious-activity","phishing","brand:netflix"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abhistudio-cloud.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f28e256-e5dd-58b6-a969-498fc15c5faa","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-21T14:22:57Z","modified":"2026-01-21T14:22:57Z","name":"Phishing domain: abhodlblock.support","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating [\"across\"]. Report & evidence: https://phishdestroy.io/domain/abhodlblock.support","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abhodlblock.support']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-21T14:22:57Z","labels":["malicious-activity","phishing","brand:[\"across\"]"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abhodlblock.support"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--312d71c7-295a-580f-988d-03edbced4103","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-03T02:04:25Z","modified":"2026-07-03T02:04:25Z","name":"Phishing domain: abi-databasex.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Base. Report & evidence: https://phishdestroy.io/domain/abi-databasex.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abi-databasex.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-03T02:04:25Z","labels":["malicious-activity","phishing","brand:base"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abi-databasex.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2639b35b-28bb-5dae-a603-0e195ac52075","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-03T11:56:33Z","modified":"2026-07-03T11:56:33Z","name":"Phishing domain: abi-engine.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abi-engine.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abi-engine.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-03T11:56:33Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abi-engine.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3987f03e-503a-5f70-b062-9a327346e7ff","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-06T12:10:27Z","modified":"2026-07-06T12:10:27Z","name":"Phishing domain: abi-optimizer.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abi-optimizer.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abi-optimizer.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-06T12:10:27Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abi-optimizer.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--599df018-722b-5068-b4bd-d003ab468615","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-06T22:11:18Z","modified":"2026-07-06T22:11:18Z","name":"Phishing domain: abi-pipeline.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abi-pipeline.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abi-pipeline.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-06T22:11:18Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abi-pipeline.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--33c02e0f-f8f0-58e7-9f84-bca75ce84d77","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-07T06:49:36Z","modified":"2026-07-07T06:49:36Z","name":"Phishing domain: abi-queue.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abi-queue.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abi-queue.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-07T06:49:36Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abi-queue.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2c21efe-3e80-5420-99d7-4904a2c43ea6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-08T16:15:52Z","modified":"2026-07-08T16:15:52Z","name":"Phishing domain: abi-sign.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abi-sign.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abi-sign.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-08T16:15:52Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abi-sign.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f582a64-2340-506d-a75a-05a72179c651","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-08T16:12:28Z","modified":"2026-07-08T16:12:28Z","name":"Phishing domain: abi-signature.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abi-signature.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abi-signature.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-08T16:12:28Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abi-signature.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--93ff1d4a-0d16-5db4-a594-0ec202cfb493","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-09T03:35:27Z","modified":"2026-07-09T03:35:27Z","name":"Phishing domain: abi-suite.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Sui. Report & evidence: https://phishdestroy.io/domain/abi-suite.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abi-suite.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-09T03:35:27Z","labels":["malicious-activity","phishing","brand:sui"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abi-suite.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9390358c-9664-59b6-8ed1-d89ac872cc2c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-12T14:03:18Z","modified":"2026-07-12T14:03:18Z","name":"Phishing domain: abi-vm.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abi-vm.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abi-vm.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-12T14:03:18Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abi-vm.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--54bdee6f-6f64-5ee3-bf58-d9f3a0ec0285","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-01T03:46:15Z","modified":"2026-02-01T03:46:15Z","name":"Phishing domain: abigcandy.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating ankr. Report & evidence: https://phishdestroy.io/domain/abigcandy.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abigcandy.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-01T03:46:15Z","labels":["malicious-activity","phishing","brand:ankr"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abigcandy.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a926674f-9723-5ad9-b8bb-ac98a6aac268","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-01T16:16:25Z","modified":"2025-12-01T16:16:25Z","name":"Phishing domain: abiikvehbbqtqiuujvtmwvzniohbgkiodsnw.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Kamino. Report & evidence: https://phishdestroy.io/domain/abiikvehbbqtqiuujvtmwvzniohbgkiodsnw.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abiikvehbbqtqiuujvtmwvzniohbgkiodsnw.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-01T16:16:25Z","labels":["malicious-activity","phishing","brand:kamino"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abiikvehbbqtqiuujvtmwvzniohbgkiodsnw.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed08c227-bc9f-571a-98da-b47c3fb28968","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-22T11:23:06Z","modified":"2025-10-22T11:23:06Z","name":"Phishing domain: abiinic.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/abiinic.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abiinic.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-22T11:23:06Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abiinic.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eec929bc-a1c5-532e-b1fa-2e39a4177c17","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-23T13:02:03Z","modified":"2025-09-23T13:02:03Z","name":"Phishing domain: abilitytradehub.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/abilitytradehub.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abilitytradehub.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-23T13:02:03Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abilitytradehub.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d5782f1-9f44-5327-a2e3-65d10dcd6904","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-10T16:13:48Z","modified":"2026-04-10T16:13:48Z","name":"Phishing domain: abindevpm.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating netflix. Report & evidence: https://phishdestroy.io/domain/abindevpm.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abindevpm.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-10T16:13:48Z","labels":["malicious-activity","phishing","brand:netflix"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abindevpm.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--67dc759c-4c19-5956-8331-de3d90eaeaf2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-24T03:29:32Z","modified":"2026-03-24T03:29:32Z","name":"Phishing domain: abinrajesh.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating netflix. Report & evidence: https://phishdestroy.io/domain/abinrajesh.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abinrajesh.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-24T03:29:32Z","labels":["malicious-activity","phishing","brand:netflix"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abinrajesh.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--03521f50-375a-5059-8b59-cf28d043b0f3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-07T17:33:07Z","modified":"2025-08-07T17:33:07Z","name":"Phishing domain: abiodunogundejiandco.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Facebook. Report & evidence: https://phishdestroy.io/domain/abiodunogundejiandco.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abiodunogundejiandco.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-07T17:33:07Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abiodunogundejiandco.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--37e86099-750c-5ee4-b650-bb36fcebb315","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-25T03:49:15Z","modified":"2026-02-25T03:49:15Z","name":"Phishing domain: abirigroupofschools.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating panini. Report & evidence: https://phishdestroy.io/domain/abirigroupofschools.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abirigroupofschools.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-25T03:49:15Z","labels":["malicious-activity","phishing","brand:panini"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abirigroupofschools.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b346d6a-fe3a-5c38-a325-c70f2bd122ed","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:42Z","modified":"2026-02-26T23:21:42Z","name":"Phishing domain: abistrust.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating facebook. Report & evidence: https://phishdestroy.io/domain/abistrust.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abistrust.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:42Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abistrust.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--369e1397-7591-536d-8de2-cb250c542406","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-07T12:39:06Z","modified":"2025-08-07T12:39:06Z","name":"Phishing domain: abitterchain.tech","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ethereum. Report & evidence: https://phishdestroy.io/domain/abitterchain.tech","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abitterchain.tech']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-07T12:39:06Z","labels":["malicious-activity","phishing","brand:ethereum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abitterchain.tech"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b7fb951-e493-5efe-bf8a-1a44fa406f96","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-11T14:42:10Z","modified":"2026-06-11T14:42:10Z","name":"Phishing domain: abiturratgeber.de","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/abiturratgeber.de","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abiturratgeber.de']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-11T14:42:10Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abiturratgeber.de"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bba43d4a-6eb9-5255-afe6-38ee9f1c96bf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-23T12:35:42Z","modified":"2025-11-23T12:35:42Z","name":"Phishing domain: abjectvpm14zudp3ug1vdvhedtnl239kiyel1smarket.surge.sh","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Yahoo. Report & evidence: https://phishdestroy.io/domain/abjectvpm14zudp3ug1vdvhedtnl239kiyel1smarket.surge.sh","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abjectvpm14zudp3ug1vdvhedtnl239kiyel1smarket.surge.sh']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-23T12:35:42Z","labels":["malicious-activity","phishing","brand:yahoo"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abjectvpm14zudp3ug1vdvhedtnl239kiyel1smarket.surge.sh"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1476f948-0311-5a7a-b7db-1e8c174b3a99","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-04T17:22:52Z","modified":"2026-08-04T17:22:52Z","name":"Phishing domain: abjurists.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abjurists.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abjurists.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-04T17:22:52Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abjurists.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a61b25d8-4a24-522d-9472-68ec80df791e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-28T11:44:23Z","modified":"2026-05-28T11:44:23Z","name":"Phishing domain: ablawcompany.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ablawcompany.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ablawcompany.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-28T11:44:23Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ablawcompany.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb3139db-44e2-5c40-a8bf-c731886bab2f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-26T15:58:05Z","modified":"2026-04-26T15:58:05Z","name":"Phishing domain: able-neptune-166625.framer.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/able-neptune-166625.framer.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'able-neptune-166625.framer.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-26T15:58:05Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/able-neptune-166625.framer.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e90893d-68aa-546f-8885-ef0cdbbd1106","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-04T19:41:13Z","modified":"2026-05-04T19:41:13Z","name":"Phishing domain: able-startapp.wixstudio.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/able-startapp.wixstudio.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'able-startapp.wixstudio.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-04T19:41:13Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/able-startapp.wixstudio.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc8f37ba-0021-5153-97da-8ebfe8d0e858","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: abletouchpiptool.icu","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abletouchpiptool.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abletouchpiptool.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abletouchpiptool.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f3773ae-729e-50e1-b625-c46f9d9ccfec","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:16Z","modified":"2026-02-26T23:20:16Z","name":"Phishing domain: ablevtu.ng","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ablevtu.ng","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ablevtu.ng']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:16Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ablevtu.ng"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfb2c409-fed9-5167-8db2-ac11cd821b60","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-06T20:01:24Z","modified":"2026-02-06T20:01:24Z","name":"Phishing domain: abm888s.online","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abm888s.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abm888s.online']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-06T20:01:24Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abm888s.online"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d03b5c81-de12-5e8c-90f7-90858f2bd437","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-27T05:31:19Z","modified":"2025-10-27T05:31:19Z","name":"Phishing domain: abokidevelopers.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abokidevelopers.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abokidevelopers.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-27T05:31:19Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abokidevelopers.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--377946eb-3cce-553a-a7cf-a8ce126a8454","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-05T16:48:17Z","modified":"2026-02-05T16:48:17Z","name":"Phishing domain: abonek.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/abonek.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abonek.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-05T16:48:17Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abonek.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--881b385d-51e4-5c92-ac8d-1fb95b329297","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-01T12:09:56Z","modified":"2025-12-01T12:09:56Z","name":"Phishing domain: aboo-facebook.blogspot.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Facebook. Report & evidence: https://phishdestroy.io/domain/aboo-facebook.blogspot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aboo-facebook.blogspot.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-01T12:09:56Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aboo-facebook.blogspot.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3825c91-448d-5238-96b2-993904882aca","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-07T21:09:21Z","modified":"2025-11-07T21:09:21Z","name":"Phishing domain: aborean-checker.world","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating WalletConnect. Report & evidence: https://phishdestroy.io/domain/aborean-checker.world","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aborean-checker.world']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-07T21:09:21Z","labels":["malicious-activity","phishing","brand:walletconnect"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aborean-checker.world"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2853c34a-f65d-58ae-bb89-0acb48584241","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-08T21:32:51Z","modified":"2025-10-08T21:32:51Z","name":"Phishing domain: aborean.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aborean.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aborean.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-08T21:32:51Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aborean.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f792585-9002-525f-a595-6c5f05de8ce2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-18T19:24:29Z","modified":"2026-06-18T19:24:29Z","name":"Phishing domain: aboren.finance","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aboren.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aboren.finance']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-18T19:24:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aboren.finance"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--711ae066-fa30-55cf-9202-ffd944a0dd4b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-17T18:59:40Z","modified":"2025-11-17T18:59:40Z","name":"Phishing domain: aboreon.finance","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating WalletConnect. Report & evidence: https://phishdestroy.io/domain/aboreon.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aboreon.finance']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-17T18:59:40Z","labels":["malicious-activity","phishing","brand:walletconnect"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aboreon.finance"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b582c9fd-0acc-593b-83fa-73a53ffc8367","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-07T04:26:51Z","modified":"2026-03-07T04:26:51Z","name":"Phishing domain: aborigenivsehebyt.lol","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aborigenivsehebyt.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aborigenivsehebyt.lol']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-07T04:26:51Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aborigenivsehebyt.lol"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb234b2a-3e39-5af3-a3c6-a5fce6745860","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-07T12:47:57Z","modified":"2026-06-07T12:47:57Z","name":"Phishing domain: aborking999.web.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aborking999.web.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aborking999.web.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-07T12:47:57Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aborking999.web.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbfd29e6-6cc7-579b-aeb5-d6b51ba2fa04","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-05T14:54:09Z","modified":"2025-12-05T14:54:09Z","name":"Phishing domain: about-coinbasehelp-cdn.daftpage.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/about-coinbasehelp-cdn.daftpage.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'about-coinbasehelp-cdn.daftpage.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-05T14:54:09Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/about-coinbasehelp-cdn.daftpage.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4eebba8e-028c-53bb-8f4b-28676a091f6f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-16T08:27:15Z","modified":"2025-12-16T08:27:15Z","name":"Phishing domain: about-coinbse.wstd.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/about-coinbse.wstd.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'about-coinbse.wstd.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-16T08:27:15Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/about-coinbse.wstd.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--315f68cc-f9e7-5ba6-814b-a0bd915272b5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-11T15:01:08Z","modified":"2026-04-11T15:01:08Z","name":"Phishing domain: about-conbase.gitbook.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/about-conbase.gitbook.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'about-conbase.gitbook.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-11T15:01:08Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/about-conbase.gitbook.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cf693aa-ccd4-5062-83ee-bb247827634a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-13T04:39:11Z","modified":"2026-04-13T04:39:11Z","name":"Phishing domain: about-e1t.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bitcoin. Report & evidence: https://phishdestroy.io/domain/about-e1t.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'about-e1t.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-13T04:39:11Z","labels":["malicious-activity","phishing","brand:bitcoin"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/about-e1t.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--44b8707c-91e5-5ddf-9543-e28b152895d0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-21T12:13:13Z","modified":"2026-04-21T12:13:13Z","name":"Phishing domain: about-hyper-liquid.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Hyperliquid. Report & evidence: https://phishdestroy.io/domain/about-hyper-liquid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'about-hyper-liquid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-21T12:13:13Z","labels":["malicious-activity","phishing","brand:hyperliquid"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/about-hyper-liquid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--472eb24b-786f-5eb3-a07c-255014c96cd7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T07:02:12Z","modified":"2026-07-27T07:02:12Z","name":"Phishing domain: about-io-trezor.wasmer.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Trezor. Report & evidence: https://phishdestroy.io/domain/about-io-trezor.wasmer.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'about-io-trezor.wasmer.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T07:02:12Z","labels":["malicious-activity","phishing","brand:trezor"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/about-io-trezor.wasmer.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ef7703f-7dee-5a9a-9e9c-e61d3a9d29bb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T19:28:35Z","modified":"2026-06-15T19:28:35Z","name":"Phishing domain: about-io-trezurrn.gitbook.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Trezor. Report & evidence: https://phishdestroy.io/domain/about-io-trezurrn.gitbook.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'about-io-trezurrn.gitbook.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T19:28:35Z","labels":["malicious-activity","phishing","brand:trezor"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/about-io-trezurrn.gitbook.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e118aef-0f77-5327-9713-361b549e56d9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T19:42:27Z","modified":"2026-06-15T19:42:27Z","name":"Phishing domain: about-iotrezur.gitbook.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Trezor. Report & evidence: https://phishdestroy.io/domain/about-iotrezur.gitbook.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'about-iotrezur.gitbook.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T19:42:27Z","labels":["malicious-activity","phishing","brand:trezor"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/about-iotrezur.gitbook.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4c2fd63-a4b5-537b-926e-74abf7d1e040","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-25T14:26:34Z","modified":"2025-12-25T14:26:34Z","name":"Phishing domain: about-ledgrr-io.framer.media","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/about-ledgrr-io.framer.media","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'about-ledgrr-io.framer.media']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-25T14:26:34Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/about-ledgrr-io.framer.media"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--38c021c9-f60f-5c58-81d7-f0619e1a8409","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-05T21:36:03Z","modified":"2026-04-05T21:36:03Z","name":"Phishing domain: about-lezrs-livex-logg.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating ledger. Report & evidence: https://phishdestroy.io/domain/about-lezrs-livex-logg.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'about-lezrs-livex-logg.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-05T21:36:03Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/about-lezrs-livex-logg.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ccd86a3-9b68-51e8-a194-cb84f5c0ca47","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-03T03:06:02Z","modified":"2026-04-03T03:06:02Z","name":"Phishing domain: about-like-live.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/about-like-live.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'about-like-live.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-03T03:06:02Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/about-like-live.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1c0a443-cfba-53de-91cb-e77f3a41c56d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-23T18:04:02Z","modified":"2025-10-23T18:04:02Z","name":"Phishing domain: about-meta-home.pineapple.page","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating MetaMask. Report & evidence: https://phishdestroy.io/domain/about-meta-home.pineapple.page","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'about-meta-home.pineapple.page']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-23T18:04:02Z","labels":["malicious-activity","phishing","brand:metamask"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/about-meta-home.pineapple.page"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e135d3a-3100-59e1-8778-45bfc47432cf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-12T22:26:08Z","modified":"2025-12-12T22:26:08Z","name":"Phishing domain: about-metamask-wallet.codedesign.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating MetaMask. Report & evidence: https://phishdestroy.io/domain/about-metamask-wallet.codedesign.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'about-metamask-wallet.codedesign.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-12T22:26:08Z","labels":["malicious-activity","phishing","brand:metamask"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/about-metamask-wallet.codedesign.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1118db6-fc29-50fa-8e0e-47f6c4526ef4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-08T10:31:36Z","modified":"2026-05-08T10:31:36Z","name":"Phishing domain: about-paybablm.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating apple. Report & evidence: https://phishdestroy.io/domain/about-paybablm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'about-paybablm.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-08T10:31:36Z","labels":["malicious-activity","phishing","brand:apple"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/about-paybablm.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--479fe073-44ff-55fd-bf49-aeb85aa104ac","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-08T11:15:31Z","modified":"2026-05-08T11:15:31Z","name":"Phishing domain: about-paybabln.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating apple. Report & evidence: https://phishdestroy.io/domain/about-paybabln.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'about-paybabln.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-08T11:15:31Z","labels":["malicious-activity","phishing","brand:apple"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/about-paybabln.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac1f531e-2a75-5b0e-a347-25503cea38b8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-08T11:17:27Z","modified":"2026-05-08T11:17:27Z","name":"Phishing domain: about-paybadtzz.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating apple. Report & evidence: https://phishdestroy.io/domain/about-paybadtzz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'about-paybadtzz.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-08T11:17:27Z","labels":["malicious-activity","phishing","brand:apple"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/about-paybadtzz.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff0d08ec-1b4b-5445-b769-fbd94edfde97","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:13Z","modified":"2026-02-26T23:21:13Z","name":"Phishing domain: about-sso-coinbase-signin.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/about-sso-coinbase-signin.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'about-sso-coinbase-signin.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:13Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/about-sso-coinbase-signin.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--da98d78a-6491-5b4c-bc74-903b0fdd4ed9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T19:31:16Z","modified":"2026-06-15T19:31:16Z","name":"Phishing domain: about-start-trezoio.netlify.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Trezor. Report & evidence: https://phishdestroy.io/domain/about-start-trezoio.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'about-start-trezoio.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T19:31:16Z","labels":["malicious-activity","phishing","brand:trezor"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/about-start-trezoio.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f23e075c-72c7-54b4-8827-8ee9d0d02fcc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-17T20:44:12Z","modified":"2025-12-17T20:44:12Z","name":"Phishing domain: about-trejorbridge.created.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Trezor. Report & evidence: https://phishdestroy.io/domain/about-trejorbridge.created.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'about-trejorbridge.created.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-17T20:44:12Z","labels":["malicious-activity","phishing","brand:trezor"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/about-trejorbridge.created.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--53243aae-f018-532a-8710-7e56d96c2a73","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-06T14:10:52Z","modified":"2025-12-06T14:10:52Z","name":"Phishing domain: about-trezoio.created.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Trezor. Report & evidence: https://phishdestroy.io/domain/about-trezoio.created.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'about-trezoio.created.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-06T14:10:52Z","labels":["malicious-activity","phishing","brand:trezor"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/about-trezoio.created.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a3d4e6d-277f-5657-bf75-dd6436ab71f8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T07:02:12Z","modified":"2026-07-27T07:02:12Z","name":"Phishing domain: about-trzr-suit-jumli.wasmer.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/about-trzr-suit-jumli.wasmer.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'about-trzr-suit-jumli.wasmer.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T07:02:12Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/about-trzr-suit-jumli.wasmer.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd8c3992-fcca-5ccd-8dfa-4e1eab577b16","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T07:02:12Z","modified":"2026-07-27T07:02:12Z","name":"Phishing domain: about-trzr-suit-tmpls.wasmer.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/about-trzr-suit-tmpls.wasmer.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'about-trzr-suit-tmpls.wasmer.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T07:02:12Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/about-trzr-suit-tmpls.wasmer.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc4dde69-ef52-5dd8-af89-0b6200502e94","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T07:02:12Z","modified":"2026-07-27T07:02:12Z","name":"Phishing domain: about-trzr-suits.wasmer.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/about-trzr-suits.wasmer.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'about-trzr-suits.wasmer.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T07:02:12Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/about-trzr-suits.wasmer.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9103539-9d3c-593e-80a9-b66012196e86","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T07:02:12Z","modified":"2026-07-27T07:02:12Z","name":"Phishing domain: about-trzrsuite-en.wasmer.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/about-trzrsuite-en.wasmer.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'about-trzrsuite-en.wasmer.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T07:02:12Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/about-trzrsuite-en.wasmer.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--13f8733e-27e4-51ba-82ac-06b3f1fdcd8a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-29T00:52:15Z","modified":"2026-06-29T00:52:15Z","name":"Phishing domain: about-uae.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/about-uae.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'about-uae.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-29T00:52:15Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/about-uae.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc07032b-82b4-5196-9cb3-a27c4c8f9a83","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T07:02:12Z","modified":"2026-07-27T07:02:12Z","name":"Phishing domain: aboutfixedfloat.gr.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aboutfixedfloat.gr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aboutfixedfloat.gr.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T07:02:12Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aboutfixedfloat.gr.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aafb4a5d-6733-5e66-86ca-13094ed24c4c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-14T04:21:16Z","modified":"2025-11-14T04:21:16Z","name":"Phishing domain: aboutmetahome.pineapple.page","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Apple. Report & evidence: https://phishdestroy.io/domain/aboutmetahome.pineapple.page","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aboutmetahome.pineapple.page']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-14T04:21:16Z","labels":["malicious-activity","phishing","brand:apple"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aboutmetahome.pineapple.page"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--168cb516-f5ed-5905-98fd-3d2649335653","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: abpayqianbaoappguanfangxiazaigw.com.cn","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abpayqianbaoappguanfangxiazaigw.com.cn","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abpayqianbaoappguanfangxiazaigw.com.cn']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abpayqianbaoappguanfangxiazaigw.com.cn"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--59fa9a7f-777d-517f-8be6-75847c0b8b92","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-23T17:27:02Z","modified":"2026-05-23T17:27:02Z","name":"Phishing domain: abpayqianbaoguanwangrukou.com.cn","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abpayqianbaoguanwangrukou.com.cn","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abpayqianbaoguanwangrukou.com.cn']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-23T17:27:02Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abpayqianbaoguanwangrukou.com.cn"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4be913f9-152e-560d-984e-60034ffc2fc6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-25T05:26:01Z","modified":"2026-06-25T05:26:01Z","name":"Phishing domain: abra-xas-home-auth.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abra-xas-home-auth.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abra-xas-home-auth.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-25T05:26:01Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abra-xas-home-auth.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e775152-404f-59e4-918e-2ec467fe7015","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-30T12:03:05Z","modified":"2026-03-30T12:03:05Z","name":"Phishing domain: abra-xas-wallet-access.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/abra-xas-wallet-access.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abra-xas-wallet-access.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-30T12:03:05Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abra-xas-wallet-access.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--45ac6f97-9bff-52d4-91be-0c6745816012","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-30T12:49:28Z","modified":"2026-03-30T12:49:28Z","name":"Phishing domain: abra-xas-wallet-usa.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abra-xas-wallet-usa.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abra-xas-wallet-usa.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-30T12:49:28Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abra-xas-wallet-usa.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8f636b6-9346-564a-b365-41018ddc7d56","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-25T12:23:54Z","modified":"2026-06-25T12:23:54Z","name":"Phishing domain: abrahamelitepresale.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abrahamelitepresale.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abrahamelitepresale.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-25T12:23:54Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abrahamelitepresale.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--94351420-04fa-55f5-aa3f-68ce5fd7745d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-10T18:11:57Z","modified":"2026-04-10T18:11:57Z","name":"Phishing domain: abrasx-wallet.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abrasx-wallet.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abrasx-wallet.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-10T18:11:57Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abrasx-wallet.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8296e133-e05f-5cb7-aa33-58c7c78ab25a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T18:40:07Z","modified":"2026-08-09T18:40:07Z","name":"Phishing domain: abratrade.ltd","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abratrade.ltd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abratrade.ltd']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T18:40:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abratrade.ltd"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e7ae3bf-c0e9-5f05-a736-3f93f6bf3d61","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: abraxass-com-cdn.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abraxass-com-cdn.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abraxass-com-cdn.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abraxass-com-cdn.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0eb8451f-4ed8-5cf6-bbe5-45f21af037a7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:32Z","modified":"2026-02-26T23:19:32Z","name":"Phishing domain: abraxss.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/abraxss.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abraxss.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:32Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abraxss.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--580ad53c-a046-5491-b8a6-ffdb60a9a5b6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:30Z","modified":"2026-02-26T23:23:30Z","name":"Phishing domain: abrdn-defi.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/abrdn-defi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abrdn-defi.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:30Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abrdn-defi.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--be5e31df-81f9-5a21-8874-5ea7ecc78257","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:09Z","modified":"2026-02-26T23:20:09Z","name":"Phishing domain: abrdnweb3.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abrdnweb3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abrdnweb3.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abrdnweb3.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9532e55-6fa8-5024-acf2-86728fad835b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-09T22:02:10Z","modified":"2026-07-09T22:02:10Z","name":"Phishing domain: abrmot.pro","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abrmot.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abrmot.pro']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-09T22:02:10Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abrmot.pro"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8143098d-63f3-5d00-ba98-6d91f5e61ff0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-03T08:16:14Z","modified":"2026-04-03T08:16:14Z","name":"Phishing domain: abrsx-wallet.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abrsx-wallet.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abrsx-wallet.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-03T08:16:14Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abrsx-wallet.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5ed0e29-f65a-5306-9a6a-551ce055d55b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-05T21:35:39Z","modified":"2026-04-05T21:35:39Z","name":"Phishing domain: abrsxs-wallet.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abrsxs-wallet.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abrsxs-wallet.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-05T21:35:39Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abrsxs-wallet.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6714ad94-fb65-5699-a91b-7923acf954f9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-10T16:34:03Z","modified":"2026-04-10T16:34:03Z","name":"Phishing domain: abrxas-wallet-en.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abrxas-wallet-en.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abrxas-wallet-en.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-10T16:34:03Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abrxas-wallet-en.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8b53da0-0aa0-55f3-bb02-f38bd32542ae","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-10T18:54:26Z","modified":"2026-04-10T18:54:26Z","name":"Phishing domain: abrxass-wallett.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abrxass-wallett.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abrxass-wallett.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-10T18:54:26Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abrxass-wallett.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc975dba-b2a5-5c15-a77c-ba32f02cf1c3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-30T20:46:11Z","modified":"2026-03-30T20:46:11Z","name":"Phishing domain: abrxrx-wallet.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abrxrx-wallet.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abrxrx-wallet.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-30T20:46:11Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abrxrx-wallet.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa4c7e0b-32f4-5ba7-9919-d922907fd02c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T10:30:04Z","modified":"2026-02-13T10:30:04Z","name":"Phishing domain: abs63.vip","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abs63.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abs63.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T10:30:04Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abs63.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a51167f-af5c-5965-baa4-3f4229ce3b3e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-19T08:08:13Z","modified":"2025-10-19T08:08:13Z","name":"Phishing domain: absaglobalaccount.co.za","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/absaglobalaccount.co.za","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'absaglobalaccount.co.za']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-19T08:08:13Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/absaglobalaccount.co.za"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aee79412-0905-5805-b754-144b64be2437","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:03Z","modified":"2026-02-26T23:24:03Z","name":"Phishing domain: absasavings.online","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/absasavings.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'absasavings.online']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:03Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/absasavings.online"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--66a4528d-4fe0-54a7-a545-cb1ede42831c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T23:45:30Z","modified":"2026-08-09T23:45:30Z","name":"Phishing domain: absencestelefone.weebly.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating orange. Report & evidence: https://phishdestroy.io/domain/absencestelefone.weebly.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'absencestelefone.weebly.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T23:45:30Z","labels":["malicious-activity","phishing","brand:orange"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/absencestelefone.weebly.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--73eec2df-01ae-59e9-a68c-5a7d200cccdf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-29T02:48:40Z","modified":"2026-07-29T02:48:40Z","name":"Phishing domain: absicherung-de.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating paypal. Report & evidence: https://phishdestroy.io/domain/absicherung-de.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'absicherung-de.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-29T02:48:40Z","labels":["malicious-activity","phishing","brand:paypal"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/absicherung-de.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--13883510-2d11-52cc-b606-8d38956a5b5c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-26T14:46:15Z","modified":"2026-07-26T14:46:15Z","name":"Phishing domain: absicherung-kontakt.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating PayPal. Report & evidence: https://phishdestroy.io/domain/absicherung-kontakt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'absicherung-kontakt.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-26T14:46:15Z","labels":["malicious-activity","phishing","brand:paypal"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/absicherung-kontakt.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--af4c9e68-cb04-54fa-b87e-7aef291b5027","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-11T14:41:38Z","modified":"2026-06-11T14:41:38Z","name":"Phishing domain: absoluflirt.ch","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/absoluflirt.ch","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'absoluflirt.ch']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-11T14:41:38Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/absoluflirt.ch"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--87f0bed9-a552-578a-84f6-36c334951ce4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T04:33:32Z","modified":"2026-02-13T04:33:32Z","name":"Phishing domain: absolute-cinema.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/absolute-cinema.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'absolute-cinema.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T04:33:32Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/absolute-cinema.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--21c47c10-9e79-5476-abe8-6219c6e6e1ee","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-10T14:50:27Z","modified":"2025-11-10T14:50:27Z","name":"Phishing domain: absolute-fairness.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/absolute-fairness.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'absolute-fairness.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-10T14:50:27Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/absolute-fairness.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4f2b0a4-0f83-546b-a346-ec3e05f40d4a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-14T14:25:36Z","modified":"2026-06-14T14:25:36Z","name":"Phishing domain: absolutecaninepa.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating docusign. Report & evidence: https://phishdestroy.io/domain/absolutecaninepa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'absolutecaninepa.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-14T14:25:36Z","labels":["malicious-activity","phishing","brand:docusign"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/absolutecaninepa.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbc2c4a9-ba70-5bff-84e6-886ed4dd0c1f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-29T17:19:15Z","modified":"2026-06-29T17:19:15Z","name":"Phishing domain: absolutemedical.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/absolutemedical.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'absolutemedical.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-29T17:19:15Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/absolutemedical.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--28506de3-6e8b-5cda-8d09-ef26d08bb040","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-17T11:38:24Z","modified":"2026-02-17T11:38:24Z","name":"Phishing domain: absolutshop.live","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Telegram. Report & evidence: https://phishdestroy.io/domain/absolutshop.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'absolutshop.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-17T11:38:24Z","labels":["malicious-activity","phishing","brand:telegram"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/absolutshop.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f3a3566-8091-5d9c-9af0-fab70e7e5ef6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-11T03:07:58Z","modified":"2026-04-11T03:07:58Z","name":"Phishing domain: abster.entry-cryptolist.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abster.entry-cryptolist.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abster.entry-cryptolist.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-11T03:07:58Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abster.entry-cryptolist.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--38a2ab76-51b9-52da-9724-f6ff29f1f332","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:49Z","modified":"2026-02-26T23:19:49Z","name":"Phishing domain: abstra-v3.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bnb chain. Report & evidence: https://phishdestroy.io/domain/abstra-v3.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstra-v3.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:49Z","labels":["malicious-activity","phishing","brand:bnb chain"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abstra-v3.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--62e2bba4-fe38-55cd-b2e9-5a8190f35dcb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-06T03:40:21Z","modified":"2025-09-06T03:40:21Z","name":"Phishing domain: abstract-9fmrav.testnet.nfts2.me","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating WalletConnect. Report & evidence: https://phishdestroy.io/domain/abstract-9fmrav.testnet.nfts2.me","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstract-9fmrav.testnet.nfts2.me']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-06T03:40:21Z","labels":["malicious-activity","phishing","brand:walletconnect"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abstract-9fmrav.testnet.nfts2.me"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--90419bcd-ea26-522f-98d3-52f5869c8e4e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-22T11:08:46Z","modified":"2025-10-22T11:08:46Z","name":"Phishing domain: abstract-eg.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating instagram. Report & evidence: https://phishdestroy.io/domain/abstract-eg.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstract-eg.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-22T11:08:46Z","labels":["malicious-activity","phishing","brand:instagram"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abstract-eg.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--59725286-aeab-52cf-8323-666e7e2bb4cb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:13Z","modified":"2026-02-26T23:24:13Z","name":"Phishing domain: abstract-source-factory.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abstract-source-factory.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstract-source-factory.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:13Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abstract-source-factory.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--211693cc-2948-5f44-aec0-5b20f78d34fa","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-20T22:19:47Z","modified":"2025-10-20T22:19:47Z","name":"Phishing domain: abstract.airdopalert.icu","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/abstract.airdopalert.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstract.airdopalert.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-20T22:19:47Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abstract.airdopalert.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--50018684-5ba7-5436-b8af-91e5f40179d5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-01T23:46:57Z","modified":"2025-12-01T23:46:57Z","name":"Phishing domain: abstract.airdropalert.onl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/abstract.airdropalert.onl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstract.airdropalert.onl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-01T23:46:57Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abstract.airdropalert.onl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--329d32d8-4821-55db-9897-c9806c0b8189","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-25T09:37:51Z","modified":"2025-12-25T09:37:51Z","name":"Phishing domain: abstract.airdropalert.us","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/abstract.airdropalert.us","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstract.airdropalert.us']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-25T09:37:51Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abstract.airdropalert.us"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c6734da-a17a-59ca-92ed-42d5404e3025","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-18T17:56:05Z","modified":"2025-10-18T17:56:05Z","name":"Phishing domain: abstract.airdropalerts.bond","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/abstract.airdropalerts.bond","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstract.airdropalerts.bond']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-18T17:56:05Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abstract.airdropalerts.bond"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fe9632b-32ee-5e72-b90b-6881f4334e0c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-17T18:17:03Z","modified":"2025-10-17T18:17:03Z","name":"Phishing domain: abstract.airdropalerts.life","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/abstract.airdropalerts.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstract.airdropalerts.life']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-17T18:17:03Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abstract.airdropalerts.life"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c86e63d-189a-5dbb-822b-a256775505c6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-23T10:53:38Z","modified":"2025-10-23T10:53:38Z","name":"Phishing domain: abstract.airdropsalert.biz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Facebook. Report & evidence: https://phishdestroy.io/domain/abstract.airdropsalert.biz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstract.airdropsalert.biz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-23T10:53:38Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abstract.airdropsalert.biz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c1df7e1-517d-53e9-957a-a997f4e77f86","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-15T10:21:51Z","modified":"2025-11-15T10:21:51Z","name":"Phishing domain: abstract.airdropsalert.life","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abstract.airdropsalert.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstract.airdropsalert.life']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-15T10:21:51Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abstract.airdropsalert.life"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--85f936f0-1588-55d5-8b7c-31432f0b2b39","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-18T16:18:29Z","modified":"2025-10-18T16:18:29Z","name":"Phishing domain: abstract.airdropsalert.lol","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/abstract.airdropsalert.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstract.airdropsalert.lol']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-18T16:18:29Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abstract.airdropsalert.lol"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c37b2e8e-0674-5824-bbb8-526fef4480e0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-24T14:02:32Z","modified":"2025-12-24T14:02:32Z","name":"Phishing domain: abstract.airdropsalert.us","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/abstract.airdropsalert.us","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstract.airdropsalert.us']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-24T14:02:32Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abstract.airdropsalert.us"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--264c3f42-57a9-585c-b9eb-9a4277e9e33d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-25T04:36:00Z","modified":"2025-10-25T04:36:00Z","name":"Phishing domain: abstract.airdropsalerts.sbs","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/abstract.airdropsalerts.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstract.airdropsalerts.sbs']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-25T04:36:00Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abstract.airdropsalerts.sbs"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3db94f2-55b8-54e5-8c38-54fd8c8c4000","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-15T10:53:02Z","modified":"2025-11-15T10:53:02Z","name":"Phishing domain: abstract.airdrpalert.click","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/abstract.airdrpalert.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstract.airdrpalert.click']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-15T10:53:02Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abstract.airdrpalert.click"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--41b20d8c-df91-508e-903c-995ced30b5dc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-27T12:05:33Z","modified":"2025-10-27T12:05:33Z","name":"Phishing domain: abstract.airdrpalerts.lol","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/abstract.airdrpalerts.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstract.airdrpalerts.lol']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-27T12:05:33Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abstract.airdrpalerts.lol"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--af2fb334-e66b-5ac3-8dfc-d7b72adf527f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-25T15:30:15Z","modified":"2025-10-25T15:30:15Z","name":"Phishing domain: abstract.airdrpalerts.sbs","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/abstract.airdrpalerts.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstract.airdrpalerts.sbs']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-25T15:30:15Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abstract.airdrpalerts.sbs"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f23aba23-bd0d-5353-bee9-23d276affff8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-05T14:25:31Z","modified":"2025-11-05T14:25:31Z","name":"Phishing domain: abstract.airdrpsalert.cfd","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/abstract.airdrpsalert.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstract.airdrpsalert.cfd']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-05T14:25:31Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abstract.airdrpsalert.cfd"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f133f7a-08ec-55e6-bd21-d8b76d2b6c35","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-17T14:08:42Z","modified":"2025-11-17T14:08:42Z","name":"Phishing domain: abstract.airdrpsalert.lat","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/abstract.airdrpsalert.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstract.airdrpsalert.lat']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-17T14:08:42Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abstract.airdrpsalert.lat"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--daa27cc6-8e16-582f-97b2-8612a1e480a2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-02T14:29:08Z","modified":"2025-11-02T14:29:08Z","name":"Phishing domain: abstract.airdrpsalert.lol","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/abstract.airdrpsalert.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstract.airdrpsalert.lol']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-02T14:29:08Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abstract.airdrpsalert.lol"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c438c107-547d-5801-86ef-41c40a9faf35","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-03T13:58:34Z","modified":"2025-11-03T13:58:34Z","name":"Phishing domain: abstract.airdrpsalert.sbs","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/abstract.airdrpsalert.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstract.airdrpsalert.sbs']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-03T13:58:34Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abstract.airdrpsalert.sbs"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--53196c3b-a881-5514-894d-bcc125e2442b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-31T15:39:37Z","modified":"2025-10-31T15:39:37Z","name":"Phishing domain: abstract.airdrpsalerts.cfd","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/abstract.airdrpsalerts.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstract.airdrpsalerts.cfd']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-31T15:39:37Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abstract.airdrpsalerts.cfd"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a93c5ba9-a77b-559e-aa80-d577498c0db8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-12T11:52:01Z","modified":"2025-11-12T11:52:01Z","name":"Phishing domain: abstract.airdrpsalerts.life","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/abstract.airdrpsalerts.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstract.airdrpsalerts.life']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-12T11:52:01Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abstract.airdrpsalerts.life"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--04cc32c1-0289-574f-a677-a837ef900730","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-15T11:19:49Z","modified":"2025-11-15T11:19:49Z","name":"Phishing domain: abstract.airdrpsalerts.lol","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/abstract.airdrpsalerts.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstract.airdrpsalerts.lol']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-15T11:19:49Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abstract.airdrpsalerts.lol"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae891274-649c-5c81-b05d-939d8b78f1ab","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-13T16:27:44Z","modified":"2025-11-13T16:27:44Z","name":"Phishing domain: abstract.airdrpsalerts.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/abstract.airdrpsalerts.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstract.airdrpsalerts.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-13T16:27:44Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abstract.airdrpsalerts.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7e4d2d4-5177-587c-ab35-5301d8aa1476","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-07T15:11:20Z","modified":"2025-11-07T15:11:20Z","name":"Phishing domain: abstract.airsdropsalert.lol","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/abstract.airsdropsalert.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstract.airsdropsalert.lol']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-07T15:11:20Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abstract.airsdropsalert.lol"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b7f302a-c1dc-5dca-8b3b-cac175e3fd87","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-11T21:57:24Z","modified":"2025-11-11T21:57:24Z","name":"Phishing domain: abstract.airsdropsalerts.click","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Facebook. Report & evidence: https://phishdestroy.io/domain/abstract.airsdropsalerts.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstract.airsdropsalerts.click']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-11T21:57:24Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abstract.airsdropsalerts.click"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4979dfdc-287f-5ff8-87ac-469b3c06dbc6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-17T14:09:11Z","modified":"2025-11-17T14:09:11Z","name":"Phishing domain: abstract.app-airdropalert.lol","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/abstract.app-airdropalert.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstract.app-airdropalert.lol']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-17T14:09:11Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abstract.app-airdropalert.lol"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e1d6fac-b3b4-5719-8b6d-3c62b529313b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-17T14:09:40Z","modified":"2025-11-17T14:09:40Z","name":"Phishing domain: abstract.app-airdropalert.sbs","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/abstract.app-airdropalert.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstract.app-airdropalert.sbs']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-17T14:09:40Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abstract.app-airdropalert.sbs"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a581770-2f12-5a67-9071-abf8067776e2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-27T17:16:36Z","modified":"2025-11-27T17:16:36Z","name":"Phishing domain: abstract.beefy-hub.lat","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/abstract.beefy-hub.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstract.beefy-hub.lat']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-27T17:16:36Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abstract.beefy-hub.lat"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--53da8c9a-50eb-5d8b-a3d1-4976878addbd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-27T16:46:33Z","modified":"2025-11-27T16:46:33Z","name":"Phishing domain: abstract.beefy-hub.lol","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/abstract.beefy-hub.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstract.beefy-hub.lol']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-27T16:46:33Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abstract.beefy-hub.lol"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a0a7813-cfe3-5259-ba64-1b1fb3b88262","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-27T16:46:56Z","modified":"2025-11-27T16:46:56Z","name":"Phishing domain: abstract.beefy-hub.sbs","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/abstract.beefy-hub.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstract.beefy-hub.sbs']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-27T16:46:56Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abstract.beefy-hub.sbs"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--732e6b5c-36f8-5b92-a35d-e7bfc9c58689","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-20T22:11:54Z","modified":"2025-10-20T22:11:54Z","name":"Phishing domain: abstract.beefyapp.cfd","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/abstract.beefyapp.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstract.beefyapp.cfd']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-20T22:11:54Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abstract.beefyapp.cfd"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e7a329e-5d39-599c-a922-8e494cba469c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-15T11:15:28Z","modified":"2025-10-15T11:15:28Z","name":"Phishing domain: abstract.beefyapp.lol","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/abstract.beefyapp.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstract.beefyapp.lol']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-15T11:15:28Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abstract.beefyapp.lol"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--350bafd6-02d5-53fe-9d7f-1c4491072580","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-12T17:41:38Z","modified":"2025-11-12T17:41:38Z","name":"Phishing domain: abstract.beefyapp.sbs","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/abstract.beefyapp.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstract.beefyapp.sbs']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-12T17:41:38Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abstract.beefyapp.sbs"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cb33600-429b-5020-b431-9848139b3255","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-13T16:27:36Z","modified":"2025-11-13T16:27:36Z","name":"Phishing domain: abstract.beefyapps.cfd","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/abstract.beefyapps.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstract.beefyapps.cfd']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-13T16:27:36Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abstract.beefyapps.cfd"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6acafff-520c-5732-b03d-32f9181e24f2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-11T17:38:42Z","modified":"2025-11-11T17:38:42Z","name":"Phishing domain: abstract.beefyapps.sbs","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/abstract.beefyapps.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstract.beefyapps.sbs']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-11T17:38:42Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abstract.beefyapps.sbs"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fc25078-8bf3-5727-9319-adb1908a8b64","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-18T04:29:59Z","modified":"2025-11-18T04:29:59Z","name":"Phishing domain: abstract.beefyhub.icu","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/abstract.beefyhub.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstract.beefyhub.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-18T04:29:59Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abstract.beefyhub.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d74e7567-8f15-5aaf-89f6-06a7029af32f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-02T14:28:23Z","modified":"2025-11-02T14:28:23Z","name":"Phishing domain: abstract.beefyhubs.bond","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/abstract.beefyhubs.bond","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstract.beefyhubs.bond']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-02T14:28:23Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abstract.beefyhubs.bond"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad91146c-3852-5e1b-8779-5cad1cb15510","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-05T11:56:06Z","modified":"2025-11-05T11:56:06Z","name":"Phishing domain: abstract.beefyhubs.click","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/abstract.beefyhubs.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstract.beefyhubs.click']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-05T11:56:06Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abstract.beefyhubs.click"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebb2b1a4-b54e-5eb9-9e63-f4bd5adcd1bc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-03T13:58:36Z","modified":"2025-11-03T13:58:36Z","name":"Phishing domain: abstract.beefyhubs.club","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/abstract.beefyhubs.club","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstract.beefyhubs.club']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-03T13:58:36Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abstract.beefyhubs.club"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dad8df89-19cf-5e09-9a4a-7166c45ef233","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-05T11:55:51Z","modified":"2025-11-05T11:55:51Z","name":"Phishing domain: abstract.beefyhubs.sbs","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/abstract.beefyhubs.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstract.beefyhubs.sbs']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-05T11:55:51Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abstract.beefyhubs.sbs"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a846f80c-722b-5fca-91bd-6eaa077b4066","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-13T15:37:47Z","modified":"2025-11-13T15:37:47Z","name":"Phishing domain: abstract.hub-airdropalert.click","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/abstract.hub-airdropalert.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstract.hub-airdropalert.click']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-13T15:37:47Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abstract.hub-airdropalert.click"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f25fa9cd-b11e-5a47-9e9a-b967a1901afb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: abstract.hubs-beefy.lol","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abstract.hubs-beefy.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstract.hubs-beefy.lol']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abstract.hubs-beefy.lol"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c61f9d3f-37ab-55d2-b7cb-11ebd88169f3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-20T22:10:22Z","modified":"2025-10-20T22:10:22Z","name":"Phishing domain: abstract.portal-drops.icu","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/abstract.portal-drops.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstract.portal-drops.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-20T22:10:22Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abstract.portal-drops.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a22ca7e-c97c-5150-abff-f078ce9d1e58","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-21T19:13:02Z","modified":"2025-10-21T19:13:02Z","name":"Phishing domain: abstract.portal-drops.sbs","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/abstract.portal-drops.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstract.portal-drops.sbs']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-21T19:13:02Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abstract.portal-drops.sbs"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f57f846-76e9-5dff-a1ee-6b8f284c2b20","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-09T15:35:31Z","modified":"2025-11-09T15:35:31Z","name":"Phishing domain: abstract.portal-hubs.sbs","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/abstract.portal-hubs.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstract.portal-hubs.sbs']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-09T15:35:31Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abstract.portal-hubs.sbs"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8177ac10-331a-5fbe-a4e7-f6069bf4c64e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-28T18:45:25Z","modified":"2025-11-28T18:45:25Z","name":"Phishing domain: abstract.rest","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating discord. Report & evidence: https://phishdestroy.io/domain/abstract.rest","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstract.rest']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-28T18:45:25Z","labels":["malicious-activity","phishing","brand:discord"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abstract.rest"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--45560adb-77f2-55be-a0d6-c2d428ec52c4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-21T10:43:29Z","modified":"2025-12-21T10:43:29Z","name":"Phishing domain: abstract780.car.picklesecurity.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/abstract780.car.picklesecurity.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstract780.car.picklesecurity.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-21T10:43:29Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abstract780.car.picklesecurity.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--82cd5d82-3440-5c2f-afab-ad6b834c02a6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-09T16:18:27Z","modified":"2025-09-09T16:18:27Z","name":"Phishing domain: abstractairdrop.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating MetaMask. Report & evidence: https://phishdestroy.io/domain/abstractairdrop.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstractairdrop.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-09T16:18:27Z","labels":["malicious-activity","phishing","brand:metamask"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abstractairdrop.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfca552d-00e2-5252-bb22-a5a0211c9858","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-15T01:15:28Z","modified":"2025-10-15T01:15:28Z","name":"Phishing domain: abstractairdrops.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abstractairdrops.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstractairdrops.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-15T01:15:28Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abstractairdrops.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4315f20d-1aa1-5c02-a98c-d4c94e6a33f6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-14T14:37:13Z","modified":"2025-12-14T14:37:13Z","name":"Phishing domain: abstractblockchain.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Blockchain.com. Report & evidence: https://phishdestroy.io/domain/abstractblockchain.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstractblockchain.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-14T14:37:13Z","labels":["malicious-activity","phishing","brand:blockchain.com"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abstractblockchain.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--817906a7-6345-51e7-843f-011d6fa3429f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-17T14:20:42Z","modified":"2025-11-17T14:20:42Z","name":"Phishing domain: abstractchain.airdropsalert.life","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abstractchain.airdropsalert.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstractchain.airdropsalert.life']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-17T14:20:42Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abstractchain.airdropsalert.life"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--83e23e2e-826a-5f31-a0c8-8a2ebd4b2398","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-01T13:29:44Z","modified":"2026-03-01T13:29:44Z","name":"Phishing domain: abstractedfactreflective.click","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating foundation. Report & evidence: https://phishdestroy.io/domain/abstractedfactreflective.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstractedfactreflective.click']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-01T13:29:44Z","labels":["malicious-activity","phishing","brand:foundation"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abstractedfactreflective.click"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--500be9ba-3180-54ba-b482-936b1b19c44a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:20Z","modified":"2026-02-26T23:23:20Z","name":"Phishing domain: abstractprinter.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating metamask. Report & evidence: https://phishdestroy.io/domain/abstractprinter.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstractprinter.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:20Z","labels":["malicious-activity","phishing","brand:metamask"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abstractprinter.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--42e710f6-c6a7-5a30-891b-955940befe81","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-05T05:02:43Z","modified":"2025-10-05T05:02:43Z","name":"Phishing domain: abstractsale.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating binance. Report & evidence: https://phishdestroy.io/domain/abstractsale.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstractsale.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-05T05:02:43Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abstractsale.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c374d8a-cd07-5c81-a8dd-258682bce49b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-28T15:04:02Z","modified":"2026-02-28T15:04:02Z","name":"Phishing domain: abstractt.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abstractt.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstractt.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-28T15:04:02Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abstractt.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef0ff678-ed6c-5dcd-8a8f-edfac79419ed","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:03Z","modified":"2026-02-26T23:20:03Z","name":"Phishing domain: abstractx1.lol","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/abstractx1.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstractx1.lol']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:03Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abstractx1.lol"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0ca2bfc-d50f-540b-a046-3b39d7c1b41b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-10T16:30:55Z","modified":"2026-04-10T16:30:55Z","name":"Phishing domain: abstrlabswebsite.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abstrlabswebsite.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abstrlabswebsite.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-10T16:30:55Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abstrlabswebsite.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--75eb8135-0079-5b6c-824a-a2fa29dd26c6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-24T13:23:40Z","modified":"2026-01-24T13:23:40Z","name":"Phishing domain: absurdword.site","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/absurdword.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'absurdword.site']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-24T13:23:40Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/absurdword.site"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--19a4495b-6512-5841-8444-c5d6e8c4e013","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-22T18:17:59Z","modified":"2025-12-22T18:17:59Z","name":"Phishing domain: abtcminingcompany.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/abtcminingcompany.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abtcminingcompany.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-22T18:17:59Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abtcminingcompany.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7ec2e7a-2c41-5bd5-a16e-73d430558323","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-22T18:01:02Z","modified":"2026-02-22T18:01:02Z","name":"Phishing domain: abtcminingserver.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abtcminingserver.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abtcminingserver.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-22T18:01:02Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abtcminingserver.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a105042b-1852-5ba5-ac86-55aa94aaab21","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:09Z","modified":"2026-02-26T23:24:09Z","name":"Phishing domain: abtcserver.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abtcserver.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abtcserver.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abtcserver.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6734b31d-bc66-5775-8cdd-aa38151e8ef7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:07Z","modified":"2026-02-26T23:24:07Z","name":"Phishing domain: abtrchain.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/abtrchain.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abtrchain.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:07Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abtrchain.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ac9e922-f9fc-5c9a-b04f-c2da9b532f1c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-22T23:46:44Z","modified":"2026-06-22T23:46:44Z","name":"Phishing domain: abtsport.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abtsport.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abtsport.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-22T23:46:44Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abtsport.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4acae238-ad2a-5c3a-9c11-6a4b830bb1f4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-16T14:15:21Z","modified":"2025-08-16T14:15:21Z","name":"Phishing domain: abuadif.com.ng","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating scroll. Report & evidence: https://phishdestroy.io/domain/abuadif.com.ng","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abuadif.com.ng']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-16T14:15:21Z","labels":["malicious-activity","phishing","brand:scroll"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abuadif.com.ng"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e312ff9-a17b-57ca-a0bc-3dc9c718ab0f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-18T15:29:53Z","modified":"2026-04-18T15:29:53Z","name":"Phishing domain: abubakarcodeer.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating amazon. Report & evidence: https://phishdestroy.io/domain/abubakarcodeer.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abubakarcodeer.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-18T15:29:53Z","labels":["malicious-activity","phishing","brand:amazon"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abubakarcodeer.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fde311f-bf14-56ed-8270-9e1d84092cc1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-12T06:30:02Z","modified":"2026-03-12T06:30:02Z","name":"Phishing domain: abubit.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abubit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abubit.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-12T06:30:02Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abubit.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4ce1b43-4ac1-5031-bc86-c7bf8baf7166","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T13:34:31Z","modified":"2026-07-27T13:34:31Z","name":"Phishing domain: abudhabisites.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abudhabisites.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abudhabisites.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T13:34:31Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abudhabisites.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a6ef4be-1e66-53d4-bb33-348d5b3cc385","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-22T18:07:48Z","modified":"2026-02-22T18:07:48Z","name":"Phishing domain: abukingfr.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating ethereum. Report & evidence: https://phishdestroy.io/domain/abukingfr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abukingfr.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-22T18:07:48Z","labels":["malicious-activity","phishing","brand:ethereum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abukingfr.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f67bc7dd-a9d1-5a50-8ade-77f549c3bca6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T18:40:07Z","modified":"2026-08-09T18:40:07Z","name":"Phishing domain: abundancegrip.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abundancegrip.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abundancegrip.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T18:40:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abundancegrip.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e63fdd0-1e29-565a-85a3-db28d1ff7033","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-08T15:16:42Z","modified":"2026-04-08T15:16:42Z","name":"Phishing domain: abundant-reassurance-299202.framer.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating att. Report & evidence: https://phishdestroy.io/domain/abundant-reassurance-299202.framer.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abundant-reassurance-299202.framer.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-08T15:16:42Z","labels":["malicious-activity","phishing","brand:att"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abundant-reassurance-299202.framer.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--49237e55-ea2c-577e-9863-26be934bf8d7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-21T20:29:24Z","modified":"2026-03-21T20:29:24Z","name":"Phishing domain: abundantmines.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bitcoin. Report & evidence: https://phishdestroy.io/domain/abundantmines.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abundantmines.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-21T20:29:24Z","labels":["malicious-activity","phishing","brand:bitcoin"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abundantmines.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec6f70b4-53f1-53e6-8390-a19abc54474b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-29T06:16:25Z","modified":"2026-04-29T06:16:25Z","name":"Phishing domain: abundexreward.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abundexreward.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abundexreward.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-29T06:16:25Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abundexreward.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e750af8a-19d4-5f7f-b44a-b4b41d1ea7eb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-17T03:08:11Z","modified":"2026-03-17T03:08:11Z","name":"Phishing domain: abusdhlasa.netlify.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating dhl. Report & evidence: https://phishdestroy.io/domain/abusdhlasa.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abusdhlasa.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-17T03:08:11Z","labels":["malicious-activity","phishing","brand:dhl"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abusdhlasa.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a19f279d-3676-5632-918c-cc39e7814b68","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-21T23:07:43Z","modified":"2026-07-21T23:07:43Z","name":"Phishing domain: abuse-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/abuse-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abuse-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-21T23:07:43Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abuse-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb917e25-15b8-5e41-81d1-d3337c97e59a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-01T01:40:09Z","modified":"2026-03-01T01:40:09Z","name":"Phishing domain: abuse-pump.fun","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Pump.fun. Report & evidence: https://phishdestroy.io/domain/abuse-pump.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abuse-pump.fun']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-01T01:40:09Z","labels":["malicious-activity","phishing","brand:pump.fun"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abuse-pump.fun"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3b595d8-c8c0-578b-b56b-29eeb23e1716","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-07T21:49:04Z","modified":"2025-11-07T21:49:04Z","name":"Phishing domain: abuwon.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/abuwon.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abuwon.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-07T21:49:04Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abuwon.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--409afda4-8e20-57a7-b842-40146c1d52fd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-05T16:06:10Z","modified":"2026-02-05T16:06:10Z","name":"Phishing domain: abyss-event.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abyss-event.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abyss-event.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-05T16:06:10Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abyss-event.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--79efbe22-a56f-58a2-aa44-dc48aebf2a24","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-06T12:49:36Z","modified":"2026-03-06T12:49:36Z","name":"Phishing domain: abyssofmetal.blogspot.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abyssofmetal.blogspot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abyssofmetal.blogspot.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-06T12:49:36Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abyssofmetal.blogspot.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--91a3a1cc-36d3-515a-892f-ebfce0817ca3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-15T03:40:41Z","modified":"2026-05-15T03:40:41Z","name":"Phishing domain: abyzz.cfd","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/abyzz.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'abyzz.cfd']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-15T03:40:41Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/abyzz.cfd"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--34f1c735-dd65-5531-90a4-dae9093c9500","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-09T03:56:44Z","modified":"2026-04-09T03:56:44Z","name":"Phishing domain: ac-5uh.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/ac-5uh.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ac-5uh.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-09T03:56:44Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ac-5uh.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b2cb946-97c2-5ab0-b194-6c57f0c05c07","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-16T08:58:14Z","modified":"2026-06-16T08:58:14Z","name":"Phishing domain: ac-oll-15060101010101010101.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating techsupportscam. Report & evidence: https://phishdestroy.io/domain/ac-oll-15060101010101010101.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ac-oll-15060101010101010101.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-16T08:58:14Z","labels":["malicious-activity","phishing","brand:techsupportscam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ac-oll-15060101010101010101.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5630e51-09f7-568b-8bf9-ded2bcf15500","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-28T11:44:42Z","modified":"2026-05-28T11:44:42Z","name":"Phishing domain: ac-rylic.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ac-rylic.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ac-rylic.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-28T11:44:42Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ac-rylic.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--722e4af1-4144-5141-a623-e3e5e8d2362e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:04Z","modified":"2026-02-26T23:21:04Z","name":"Phishing domain: ac.forextradecore.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ac.forextradecore.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ac.forextradecore.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:04Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ac.forextradecore.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--517cea95-ded6-504d-a53b-d031507d2cd0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-16T09:04:57Z","modified":"2026-06-16T09:04:57Z","name":"Phishing domain: ac67e77e-0ec4-4e9f-9565-3801a5dabc76.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ac67e77e-0ec4-4e9f-9565-3801a5dabc76.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ac67e77e-0ec4-4e9f-9565-3801a5dabc76.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-16T09:04:57Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ac67e77e-0ec4-4e9f-9565-3801a5dabc76.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddef9862-57ac-58f0-b5af-628dfd708f49","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:26Z","modified":"2026-02-26T23:23:26Z","name":"Phishing domain: ac9055af.jascha.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating trezor. Report & evidence: https://phishdestroy.io/domain/ac9055af.jascha.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ac9055af.jascha.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:26Z","labels":["malicious-activity","phishing","brand:trezor"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ac9055af.jascha.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e07c725f-be06-5df1-acac-fd535b9a179a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-20T21:31:30Z","modified":"2026-03-20T21:31:30Z","name":"Phishing domain: aca51e0.ewedfeewe.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aca51e0.ewedfeewe.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aca51e0.ewedfeewe.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-20T21:31:30Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aca51e0.ewedfeewe.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--984e3208-ca19-5049-89d9-1f28c3475ed3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:37Z","modified":"2026-02-26T23:23:37Z","name":"Phishing domain: acaciaassetmgt.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating [\"google\"]. Report & evidence: https://phishdestroy.io/domain/acaciaassetmgt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acaciaassetmgt.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:37Z","labels":["malicious-activity","phishing","brand:[\"google\"]"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acaciaassetmgt.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7dacd7ad-b330-5ebf-b52c-77fc2b692420","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-27T17:13:58Z","modified":"2026-03-27T17:13:58Z","name":"Phishing domain: acadaceltd.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/acadaceltd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acadaceltd.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-27T17:13:58Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acadaceltd.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b870f592-53e2-53e6-a9c4-bf409b53367f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-18T16:22:34Z","modified":"2026-02-18T16:22:34Z","name":"Phishing domain: academiajoseluislopez.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/academiajoseluislopez.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'academiajoseluislopez.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-18T16:22:34Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/academiajoseluislopez.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c3dcc9d-33c8-5c4a-9c89-a49ae29dfc4c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-23T00:19:40Z","modified":"2026-06-23T00:19:40Z","name":"Phishing domain: academise.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/academise.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'academise.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-23T00:19:40Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/academise.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3104d18d-d8de-581c-a74c-45d77bcc53c2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-22T19:55:28Z","modified":"2026-07-22T19:55:28Z","name":"Phishing domain: academy-binance.pro","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Binance. Report & evidence: https://phishdestroy.io/domain/academy-binance.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'academy-binance.pro']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-22T19:55:28Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/academy-binance.pro"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--72351a13-9863-5233-bc4c-0451695945dd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-01T16:19:03Z","modified":"2026-04-01T16:19:03Z","name":"Phishing domain: academy-ledger.webflow.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/academy-ledger.webflow.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'academy-ledger.webflow.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-01T16:19:03Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/academy-ledger.webflow.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--60f3d1eb-4293-5079-90d7-a035669b2aaa","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-24T17:52:19Z","modified":"2026-01-24T17:52:19Z","name":"Phishing domain: academy.darkex.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/academy.darkex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'academy.darkex.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-24T17:52:19Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/academy.darkex.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8b29e26-5571-5ec7-9ce6-47a9fa97c3a3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-18T00:46:38Z","modified":"2026-04-18T00:46:38Z","name":"Phishing domain: academy.soonpayapp.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/academy.soonpayapp.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'academy.soonpayapp.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-18T00:46:38Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/academy.soonpayapp.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3428aacf-464e-5fcb-9987-edc62f1c59de","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T06:41:07Z","modified":"2026-06-15T06:41:07Z","name":"Phishing domain: academyhttps.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/academyhttps.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'academyhttps.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T06:41:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/academyhttps.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ad0e092-653c-5a4d-972a-52834f29b5f3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:13Z","modified":"2026-02-26T23:20:13Z","name":"Phishing domain: academykere.ru","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating kraken. Report & evidence: https://phishdestroy.io/domain/academykere.ru","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'academykere.ru']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:13Z","labels":["malicious-activity","phishing","brand:kraken"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/academykere.ru"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--191b1b6d-685d-52eb-8ee8-82f6a110b75e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-22T16:06:09Z","modified":"2026-04-22T16:06:09Z","name":"Phishing domain: acadia-corp.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/acadia-corp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acadia-corp.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-22T16:06:09Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acadia-corp.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7337c3a4-1caf-5354-bb35-087f00302de7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-12T03:07:28Z","modified":"2025-08-12T03:07:28Z","name":"Phishing domain: acala-network.live","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acala-network.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acala-network.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-12T03:07:28Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acala-network.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8acb8e00-4a81-5cfe-a32a-2b4bfa2c120d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-12T11:18:42Z","modified":"2025-08-12T11:18:42Z","name":"Phishing domain: acala-network.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acala-network.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acala-network.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-12T11:18:42Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acala-network.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e3b167a-f0b4-58ae-a71b-01733848ed4e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-13T17:17:28Z","modified":"2025-11-13T17:17:28Z","name":"Phishing domain: acala.airdropsalert.click","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating binance. Report & evidence: https://phishdestroy.io/domain/acala.airdropsalert.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acala.airdropsalert.click']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-13T17:17:28Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acala.airdropsalert.click"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb34cda9-dc55-58be-936f-9e624e950b71","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-13T17:18:25Z","modified":"2025-11-13T17:18:25Z","name":"Phishing domain: acala.airsdropsalerts.cfd","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating binance. Report & evidence: https://phishdestroy.io/domain/acala.airsdropsalerts.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acala.airsdropsalerts.cfd']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-13T17:18:25Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acala.airsdropsalerts.cfd"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1091cdeb-728d-51a5-a33f-75840bd7ba3b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-04T15:43:50Z","modified":"2026-02-04T15:43:50Z","name":"Phishing domain: acapcutapk.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acapcutapk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acapcutapk.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-04T15:43:50Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acapcutapk.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ddbae24-f98c-5fd6-b9ac-a7d69a935b54","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-04T07:36:52Z","modified":"2026-08-04T07:36:52Z","name":"Phishing domain: acapella-6o2.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Base. Report & evidence: https://phishdestroy.io/domain/acapella-6o2.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acapella-6o2.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-04T07:36:52Z","labels":["malicious-activity","phishing","brand:base"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acapella-6o2.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--44b18c63-7daa-5fca-92fe-99890b754bc3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-05T08:26:15Z","modified":"2025-10-05T08:26:15Z","name":"Phishing domain: acapitalmarket.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ethereum. Report & evidence: https://phishdestroy.io/domain/acapitalmarket.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acapitalmarket.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-05T08:26:15Z","labels":["malicious-activity","phishing","brand:ethereum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acapitalmarket.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f47c76bd-32b3-5f3b-ad7f-d87136d347bd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-07-30T16:51:20Z","modified":"2025-07-30T16:51:20Z","name":"Phishing domain: acatis.tech","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bnb chain. Report & evidence: https://phishdestroy.io/domain/acatis.tech","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acatis.tech']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-07-30T16:51:20Z","labels":["malicious-activity","phishing","brand:bnb chain"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acatis.tech"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8853d5d2-f876-597e-b014-fd577698aaa0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-19T08:07:09Z","modified":"2025-10-19T08:07:09Z","name":"Phishing domain: acb.nezertechy.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acb.nezertechy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acb.nezertechy.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-19T08:07:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acb.nezertechy.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--91e8f68d-4118-5582-b9eb-f6c61349d0e2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-06T18:21:01Z","modified":"2026-07-06T18:21:01Z","name":"Phishing domain: acbbx.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acbbx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acbbx.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-06T18:21:01Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acbbx.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6770fda-a466-516e-b947-6051baf79f82","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:57Z","modified":"2026-02-26T23:20:57Z","name":"Phishing domain: acbdegf.pilot45.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acbdegf.pilot45.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acbdegf.pilot45.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:57Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acbdegf.pilot45.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2408e535-d3fe-5c6b-bdbc-4aab03321d3a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:16Z","modified":"2026-02-26T23:23:16Z","name":"Phishing domain: acbfcuonline.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/acbfcuonline.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acbfcuonline.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:16Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acbfcuonline.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf4fb322-1f40-5882-a9a2-e9f7e31ecf37","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-21T10:42:28Z","modified":"2025-12-21T10:42:28Z","name":"Phishing domain: acc-amex.ueno-won.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acc-amex.ueno-won.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acc-amex.ueno-won.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-21T10:42:28Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acc-amex.ueno-won.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd62c189-a471-5a99-be2f-8576a95dcb72","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-27T09:19:05Z","modified":"2026-04-27T09:19:05Z","name":"Phishing domain: acc-binaes.wixstudio.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating WalletConnect. Report & evidence: https://phishdestroy.io/domain/acc-binaes.wixstudio.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acc-binaes.wixstudio.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-27T09:19:05Z","labels":["malicious-activity","phishing","brand:walletconnect"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acc-binaes.wixstudio.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--628cb03f-4015-5728-b662-1bd5efc63ceb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-13T13:32:55Z","modified":"2026-06-13T13:32:55Z","name":"Phishing domain: acc-bitbueycdn.wixstudio.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acc-bitbueycdn.wixstudio.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acc-bitbueycdn.wixstudio.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-13T13:32:55Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acc-bitbueycdn.wixstudio.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ab1d4a2-48ac-567d-aca3-6d1864621ec5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-08T18:33:51Z","modified":"2026-06-08T18:33:51Z","name":"Phishing domain: acc-blofim-us.wixstudio.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/acc-blofim-us.wixstudio.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acc-blofim-us.wixstudio.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-08T18:33:51Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acc-blofim-us.wixstudio.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9e737cb-6487-5d3e-ae10-018e27ecb669","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:16Z","modified":"2026-02-26T23:23:16Z","name":"Phishing domain: acc-coinbse-extnsion.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/acc-coinbse-extnsion.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acc-coinbse-extnsion.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:16Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acc-coinbse-extnsion.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--56709b31-c1f2-5abd-8e82-4d90f490baa6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-05T15:09:04Z","modified":"2025-12-05T15:09:04Z","name":"Phishing domain: acc-help-business-v6c-b1h-7mx.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acc-help-business-v6c-b1h-7mx.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acc-help-business-v6c-b1h-7mx.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-05T15:09:04Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acc-help-business-v6c-b1h-7mx.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d80c8cf-3688-5dc7-9d36-858e643fef55","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-09T08:22:19Z","modified":"2026-06-09T08:22:19Z","name":"Phishing domain: acc-htxxn-apps.wixstudio.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating HTX. Report & evidence: https://phishdestroy.io/domain/acc-htxxn-apps.wixstudio.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acc-htxxn-apps.wixstudio.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-09T08:22:19Z","labels":["malicious-activity","phishing","brand:htx"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acc-htxxn-apps.wixstudio.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ad3371d-a961-5b77-8524-c2aad4e24a3c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-21T13:47:00Z","modified":"2025-11-21T13:47:00Z","name":"Phishing domain: acc-integrity-check-centre.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating facebook. Report & evidence: https://phishdestroy.io/domain/acc-integrity-check-centre.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acc-integrity-check-centre.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-21T13:47:00Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acc-integrity-check-centre.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f984bb9-2ec5-5d14-9809-171478f9ac48","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-08T18:31:37Z","modified":"2026-06-08T18:31:37Z","name":"Phishing domain: acc-jupter.wixstudio.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acc-jupter.wixstudio.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acc-jupter.wixstudio.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-08T18:31:37Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acc-jupter.wixstudio.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--462b9ab6-ee66-56b5-9c09-ebf03f01db34","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-21T15:24:10Z","modified":"2026-07-21T15:24:10Z","name":"Phishing domain: acc-kucoen-us.wixstudio.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating kucoin. Report & evidence: https://phishdestroy.io/domain/acc-kucoen-us.wixstudio.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acc-kucoen-us.wixstudio.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-21T15:24:10Z","labels":["malicious-activity","phishing","brand:kucoin"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acc-kucoen-us.wixstudio.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--98c19bbb-e1cb-53f7-8fe2-be73c06b0466","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-05T09:17:17Z","modified":"2026-07-05T09:17:17Z","name":"Phishing domain: acc-laceextenson.wixstudio.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acc-laceextenson.wixstudio.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acc-laceextenson.wixstudio.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-05T09:17:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acc-laceextenson.wixstudio.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fcac869-e2cb-59e7-b7fc-5da83561c4d9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-24T16:00:01Z","modified":"2026-07-24T16:00:01Z","name":"Phishing domain: acc-lacescdn.wixstudio.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acc-lacescdn.wixstudio.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acc-lacescdn.wixstudio.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-24T16:00:01Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acc-lacescdn.wixstudio.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef96a9ac-14d7-57e0-824d-6e30e0960060","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-10T13:30:10Z","modified":"2026-07-10T13:30:10Z","name":"Phishing domain: acc-lacesextensions.wixstudio.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acc-lacesextensions.wixstudio.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acc-lacesextensions.wixstudio.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-10T13:30:10Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acc-lacesextensions.wixstudio.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b1c20b9-8989-5fdf-9fff-965b3c514212","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-23T01:21:50Z","modified":"2026-03-23T01:21:50Z","name":"Phishing domain: acc-ldgerr-starts.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/acc-ldgerr-starts.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acc-ldgerr-starts.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-23T01:21:50Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acc-ldgerr-starts.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--29022de6-346f-54b6-9ea8-5cc19b5c229e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-25T17:32:58Z","modified":"2026-03-25T17:32:58Z","name":"Phishing domain: acc-ldgr-liven.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/acc-ldgr-liven.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acc-ldgr-liven.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-25T17:32:58Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acc-ldgr-liven.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ee2959c-790e-5db0-b072-c45d02197a3d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-13T04:15:20Z","modified":"2026-04-13T04:15:20Z","name":"Phishing domain: acc-ledger-starts.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/acc-ledger-starts.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acc-ledger-starts.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-13T04:15:20Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acc-ledger-starts.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2583ee80-ab81-5c92-9024-ad35adeff950","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-26T21:31:09Z","modified":"2026-03-26T21:31:09Z","name":"Phishing domain: acc-ledger-wallt.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/acc-ledger-wallt.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acc-ledger-wallt.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-26T21:31:09Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acc-ledger-wallt.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7e86b7e-fc87-58e8-a72a-80d831b36914","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-30T20:31:24Z","modified":"2026-04-30T20:31:24Z","name":"Phishing domain: acc-ledgerr-live.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/acc-ledgerr-live.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acc-ledgerr-live.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-30T20:31:24Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acc-ledgerr-live.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b86c91e3-eb84-5ae1-8e98-02f9c491bb7b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-01T14:52:23Z","modified":"2026-07-01T14:52:23Z","name":"Phishing domain: acc-legarcom.wixstudio.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/acc-legarcom.wixstudio.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acc-legarcom.wixstudio.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-01T14:52:23Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acc-legarcom.wixstudio.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a22323ad-d7fc-58ab-89a0-81a00d76f84c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:01Z","modified":"2026-02-26T23:22:01Z","name":"Phishing domain: acc-login-coinbase.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/acc-login-coinbase.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acc-login-coinbase.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:01Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acc-login-coinbase.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--37a7c39d-4fa4-5039-bc5e-17ae77a5c329","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-08T18:31:37Z","modified":"2026-06-08T18:31:37Z","name":"Phishing domain: acc-maecx-apps.wixstudio.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acc-maecx-apps.wixstudio.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acc-maecx-apps.wixstudio.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-08T18:31:37Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acc-maecx-apps.wixstudio.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a01a943-21f0-5bff-8be1-f5dc7bb2eddd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T05:05:18Z","modified":"2026-07-27T05:05:18Z","name":"Phishing domain: acc-moneypak.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acc-moneypak.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acc-moneypak.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T05:05:18Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acc-moneypak.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--68fdccec-fafb-5546-ae28-e0e7c6a378bc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-12T13:33:09Z","modified":"2026-06-12T13:33:09Z","name":"Phishing domain: acc-muopey-apps.wixstudio.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acc-muopey-apps.wixstudio.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acc-muopey-apps.wixstudio.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-12T13:33:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acc-muopey-apps.wixstudio.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfd69be9-8bde-520c-bd2e-77b018ecd271","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-08T18:31:37Z","modified":"2026-06-08T18:31:37Z","name":"Phishing domain: acc-mxcce-nav.wixstudio.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acc-mxcce-nav.wixstudio.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acc-mxcce-nav.wixstudio.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-08T18:31:37Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acc-mxcce-nav.wixstudio.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a61d56d7-997e-5105-bdbf-6967b500dabe","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-07T22:13:13Z","modified":"2026-07-07T22:13:13Z","name":"Phishing domain: acc-navlaceapps.wixstudio.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acc-navlaceapps.wixstudio.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acc-navlaceapps.wixstudio.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-07T22:13:13Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acc-navlaceapps.wixstudio.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7727a61f-57fc-5e10-8125-4f0030e7f4bf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-05T13:27:56Z","modified":"2025-11-05T13:27:56Z","name":"Phishing domain: acc-net-updt.gt.tc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acc-net-updt.gt.tc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acc-net-updt.gt.tc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-05T13:27:56Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acc-net-updt.gt.tc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--48e4d009-948a-598b-b1d6-086e57706983","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-08T21:28:04Z","modified":"2026-08-08T21:28:04Z","name":"Phishing domain: acc-pumpsawps.wixstudio.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acc-pumpsawps.wixstudio.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acc-pumpsawps.wixstudio.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-08T21:28:04Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acc-pumpsawps.wixstudio.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1654afcd-2f57-560b-b59d-aacae6e4f974","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-07T03:22:11Z","modified":"2026-04-07T03:22:11Z","name":"Phishing domain: acc-review-quality-5dap-bqvq-8wrl.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acc-review-quality-5dap-bqvq-8wrl.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acc-review-quality-5dap-bqvq-8wrl.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-07T03:22:11Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acc-review-quality-5dap-bqvq-8wrl.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e27cbdd7-8d43-5380-9ceb-edc54692274d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-08T18:31:37Z","modified":"2026-06-08T18:31:37Z","name":"Phishing domain: acc-trexor-io.wixstudio.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acc-trexor-io.wixstudio.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acc-trexor-io.wixstudio.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-08T18:31:37Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acc-trexor-io.wixstudio.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bef86d02-a6d0-55ad-9cc3-edbd29416ce7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-05T11:58:09Z","modified":"2025-11-05T11:58:09Z","name":"Phishing domain: acc-update-netflix.click","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating netflix. Report & evidence: https://phishdestroy.io/domain/acc-update-netflix.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acc-update-netflix.click']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-05T11:58:09Z","labels":["malicious-activity","phishing","brand:netflix"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acc-update-netflix.click"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4be2f040-4ece-5f6d-820f-009804e2ef90","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:30Z","modified":"2026-02-26T23:21:30Z","name":"Phishing domain: acc-uphold-login.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/acc-uphold-login.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acc-uphold-login.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:30Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acc-uphold-login.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f26e20c5-5730-542f-81d8-d324467c9141","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-13T15:41:25Z","modified":"2025-11-13T15:41:25Z","name":"Phishing domain: acc.businessbluemetatick.sbs","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating facebook. Report & evidence: https://phishdestroy.io/domain/acc.businessbluemetatick.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acc.businessbluemetatick.sbs']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-13T15:41:25Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acc.businessbluemetatick.sbs"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5137fd21-f1fa-5226-8a05-081209d1788e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-27T17:06:17Z","modified":"2025-11-27T17:06:17Z","name":"Phishing domain: acc.case1009536868.help","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/acc.case1009536868.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acc.case1009536868.help']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-27T17:06:17Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acc.case1009536868.help"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8995c013-bcb6-5d62-86e3-2c2a0c1b41c3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-19T07:59:20Z","modified":"2025-10-19T07:59:20Z","name":"Phishing domain: acc.fiberpixel8.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/acc.fiberpixel8.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acc.fiberpixel8.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-19T07:59:20Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acc.fiberpixel8.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b2262fc-71b3-542d-b167-39397bb8134f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-21T15:20:33Z","modified":"2026-04-21T15:20:33Z","name":"Phishing domain: acc.freeupdatesfanpages-checkbluetick.click","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acc.freeupdatesfanpages-checkbluetick.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acc.freeupdatesfanpages-checkbluetick.click']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-21T15:20:33Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acc.freeupdatesfanpages-checkbluetick.click"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aaabc014-809e-5097-8da5-416f10d684fd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-23T12:51:23Z","modified":"2025-09-23T12:51:23Z","name":"Phishing domain: acc.trueanchorcub.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating foundation. Report & evidence: https://phishdestroy.io/domain/acc.trueanchorcub.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acc.trueanchorcub.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-23T12:51:23Z","labels":["malicious-activity","phishing","brand:foundation"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acc.trueanchorcub.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--57514e7e-ea0c-5f0a-b02c-ea0af9ee0254","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-26T01:52:19Z","modified":"2026-06-26T01:52:19Z","name":"Phishing domain: acc0unt.login.robinhood.mwtechti.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Robinhood. Report & evidence: https://phishdestroy.io/domain/acc0unt.login.robinhood.mwtechti.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acc0unt.login.robinhood.mwtechti.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-26T01:52:19Z","labels":["malicious-activity","phishing","brand:robinhood"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acc0unt.login.robinhood.mwtechti.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f18df3c-7bee-57da-85e4-3f4b52201c47","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-09T09:26:19Z","modified":"2026-07-09T09:26:19Z","name":"Phishing domain: accapps-trexorcdn.wixstudio.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Trezor. Report & evidence: https://phishdestroy.io/domain/accapps-trexorcdn.wixstudio.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accapps-trexorcdn.wixstudio.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-09T09:26:19Z","labels":["malicious-activity","phishing","brand:trezor"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accapps-trexorcdn.wixstudio.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--afe86e5b-5979-57fd-8782-820726142fd5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T12:52:28Z","modified":"2026-02-13T12:52:28Z","name":"Phishing domain: accargame.cfd","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ethereum. Report & evidence: https://phishdestroy.io/domain/accargame.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accargame.cfd']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T12:52:28Z","labels":["malicious-activity","phishing","brand:ethereum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accargame.cfd"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--974e19bc-934a-5c94-9006-a72bbf8296cf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-01T04:15:01Z","modified":"2026-07-01T04:15:01Z","name":"Phishing domain: accbooster.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/accbooster.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accbooster.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-01T04:15:01Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accbooster.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--02ab616f-f70c-59dc-8930-d8dbfaa0805b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:25Z","modified":"2026-02-26T23:19:25Z","name":"Phishing domain: accboosthub.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/accboosthub.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accboosthub.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:25Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accboosthub.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ebfa509-1871-5d75-8a1f-9fda36c73be8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-06T00:41:35Z","modified":"2025-12-06T00:41:35Z","name":"Phishing domain: acccess-cnbase-proauth.daftpage.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/acccess-cnbase-proauth.daftpage.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acccess-cnbase-proauth.daftpage.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-06T00:41:35Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acccess-cnbase-proauth.daftpage.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ed9a23c-e00a-5d4a-b76a-3916b7fa2931","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-29T09:54:47Z","modified":"2025-11-29T09:54:47Z","name":"Phishing domain: acccess-rabbywalllet.framer.website","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Rabby. Report & evidence: https://phishdestroy.io/domain/acccess-rabbywalllet.framer.website","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acccess-rabbywalllet.framer.website']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-29T09:54:47Z","labels":["malicious-activity","phishing","brand:rabby"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acccess-rabbywalllet.framer.website"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cce3b853-b736-532d-867e-096e5f30f3e3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-02T18:56:19Z","modified":"2026-04-02T18:56:19Z","name":"Phishing domain: accec-trzer-en-io-x.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Trezor. Report & evidence: https://phishdestroy.io/domain/accec-trzer-en-io-x.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accec-trzer-en-io-x.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-02T18:56:19Z","labels":["malicious-activity","phishing","brand:trezor"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accec-trzer-en-io-x.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6a8dfd0-2aff-58a3-97c0-c442f224fe2d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-30T00:11:51Z","modified":"2025-11-30T00:11:51Z","name":"Phishing domain: acceder-service.webcindario.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/acceder-service.webcindario.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acceder-service.webcindario.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-30T00:11:51Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acceder-service.webcindario.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1f3002b-855f-59a7-b300-a2e2e174824f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-09T00:49:00Z","modified":"2026-04-09T00:49:00Z","name":"Phishing domain: acceess-rayidium-swap.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acceess-rayidium-swap.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acceess-rayidium-swap.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-09T00:49:00Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acceess-rayidium-swap.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a1c395f-c371-589e-8110-5174c0c4aba9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:59:15Z","modified":"2026-07-27T04:59:15Z","name":"Phishing domain: accelcapitals.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/accelcapitals.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accelcapitals.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:59:15Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accelcapitals.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b1b8e5e-2e7f-5521-b3ac-6af2f9722a22","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-18T19:36:40Z","modified":"2026-03-18T19:36:40Z","name":"Phishing domain: acceleratorholdingsltd.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/acceleratorholdingsltd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acceleratorholdingsltd.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-18T19:36:40Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acceleratorholdingsltd.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--186c8629-3fe1-516f-ae35-17be24739736","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T18:40:07Z","modified":"2026-08-09T18:40:07Z","name":"Phishing domain: accentureph.store","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/accentureph.store","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accentureph.store']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T18:40:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accentureph.store"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2a81e52-7cc2-5c4f-bc61-f037b7c20dce","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-26T15:53:50Z","modified":"2026-04-26T15:53:50Z","name":"Phishing domain: accept-everyworld.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/accept-everyworld.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accept-everyworld.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-26T15:53:50Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accept-everyworld.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9ed8040-64c0-54e2-bc55-1b5e5ac0c1ad","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-30T17:22:56Z","modified":"2026-04-30T17:22:56Z","name":"Phishing domain: accept-galxecom.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/accept-galxecom.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accept-galxecom.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-30T17:22:56Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accept-galxecom.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3938b59-dd8c-544d-be63-a32c84f0b333","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-27T12:28:42Z","modified":"2025-12-27T12:28:42Z","name":"Phishing domain: accept-ledger.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/accept-ledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accept-ledger.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-27T12:28:42Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accept-ledger.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eeb3bec7-737f-5010-abcd-b1add2c5f8d2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-28T18:57:27Z","modified":"2026-02-28T18:57:27Z","name":"Phishing domain: acceptingwork.pro","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acceptingwork.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acceptingwork.pro']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-28T18:57:27Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acceptingwork.pro"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd06ebba-50df-5fbe-b44d-a37af90e1255","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-14T23:00:03Z","modified":"2026-07-14T23:00:03Z","name":"Phishing domain: acceptoffer.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acceptoffer.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acceptoffer.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-14T23:00:03Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acceptoffer.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf1b1024-2fca-5b45-8e97-833ad0a66490","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-12T02:15:36Z","modified":"2025-12-12T02:15:36Z","name":"Phishing domain: acces--uphold--logn.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/acces--uphold--logn.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acces--uphold--logn.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-12T02:15:36Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acces--uphold--logn.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a09cc5a6-a2fa-523b-8233-43b622309efa","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:27Z","modified":"2026-02-26T23:22:27Z","name":"Phishing domain: acces-balancerr-finance.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/acces-balancerr-finance.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acces-balancerr-finance.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:27Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acces-balancerr-finance.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd1f0959-face-52f1-b4f4-ce95dd34aa4a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:24Z","modified":"2026-02-26T23:21:24Z","name":"Phishing domain: acces-coinbase-chrome-extension.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/acces-coinbase-chrome-extension.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acces-coinbase-chrome-extension.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:24Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acces-coinbase-chrome-extension.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c45f101-d9ba-5ecb-98ed-40c37d894d47","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:54Z","modified":"2026-02-26T23:19:54Z","name":"Phishing domain: acces-dydx-dex.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating dYdX. Report & evidence: https://phishdestroy.io/domain/acces-dydx-dex.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acces-dydx-dex.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:54Z","labels":["malicious-activity","phishing","brand:dydx"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acces-dydx-dex.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdb2f64a-4cae-5c51-b7f2-3cff211b7480","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:02Z","modified":"2026-02-26T23:21:02Z","name":"Phishing domain: acces-en-coinbase.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/acces-en-coinbase.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acces-en-coinbase.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:02Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acces-en-coinbase.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--18ab72b0-5eaf-5751-9612-a30bb4d95c5a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-10T18:32:07Z","modified":"2026-04-10T18:32:07Z","name":"Phishing domain: acces-irron-crypto-wallet.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/acces-irron-crypto-wallet.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acces-irron-crypto-wallet.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-10T18:32:07Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acces-irron-crypto-wallet.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ece353c9-8cc0-500a-a694-eeffc0b09598","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-29T19:25:10Z","modified":"2026-04-29T19:25:10Z","name":"Phishing domain: acces-ldgr-com-strt.weebly.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/acces-ldgr-com-strt.weebly.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acces-ldgr-com-strt.weebly.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-29T19:25:10Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acces-ldgr-com-strt.weebly.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec5da41d-b426-530f-b86b-b4b14cabe776","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-05T21:37:43Z","modified":"2026-04-05T21:37:43Z","name":"Phishing domain: acces-live-ledger.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/acces-live-ledger.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acces-live-ledger.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-05T21:37:43Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acces-live-ledger.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5c859f0-14f8-508e-a9c8-a46773459ba8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-27T08:09:34Z","modified":"2026-06-27T08:09:34Z","name":"Phishing domain: acces-maple.finance","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acces-maple.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acces-maple.finance']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-27T08:09:34Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acces-maple.finance"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--88daa938-c5ca-58c3-bfd9-3c23dc1b2174","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T03:46:35Z","modified":"2026-06-15T03:46:35Z","name":"Phishing domain: acces-myaccount.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acces-myaccount.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acces-myaccount.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T03:46:35Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acces-myaccount.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--edd34b72-7f0b-517d-b6a1-9182e0cf0b4e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-05T21:30:55Z","modified":"2026-04-05T21:30:55Z","name":"Phishing domain: acces-raydiuum-swap.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acces-raydiuum-swap.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acces-raydiuum-swap.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-05T21:30:55Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acces-raydiuum-swap.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--539110cd-8058-5227-8901-67c9aa0724fa","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-05T00:16:28Z","modified":"2026-04-05T00:16:28Z","name":"Phishing domain: acces-sushiswape-exchnge.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating SushiSwap. Report & evidence: https://phishdestroy.io/domain/acces-sushiswape-exchnge.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acces-sushiswape-exchnge.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-05T00:16:28Z","labels":["malicious-activity","phishing","brand:sushiswap"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acces-sushiswape-exchnge.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6f90ef8-4499-5647-a3ba-6d40b5aa0492","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-23T22:50:27Z","modified":"2026-03-23T22:50:27Z","name":"Phishing domain: acces-truste-walet--us.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/acces-truste-walet--us.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acces-truste-walet--us.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-23T22:50:27Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acces-truste-walet--us.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fceff259-ae7a-50d4-b2f7-3badd4255b41","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-25T17:33:33Z","modified":"2026-03-25T17:33:33Z","name":"Phishing domain: acces-trzor-hrdware-us.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Trezor. Report & evidence: https://phishdestroy.io/domain/acces-trzor-hrdware-us.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acces-trzor-hrdware-us.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-25T17:33:33Z","labels":["malicious-activity","phishing","brand:trezor"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acces-trzor-hrdware-us.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3fcf18e-2d62-5328-8737-cdc69692b439","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:24Z","modified":"2026-02-26T23:19:24Z","name":"Phishing domain: acces-uphhold-log-in.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/acces-uphhold-log-in.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acces-uphhold-log-in.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:24Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acces-uphhold-log-in.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aca02cc6-66dd-5233-8cee-6cd3c3133c88","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-21T08:25:32Z","modified":"2026-03-21T08:25:32Z","name":"Phishing domain: accescredtrust.online","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/accescredtrust.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accescredtrust.online']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-21T08:25:32Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accescredtrust.online"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a79d37c4-b148-5b67-9155-c7eeab7fa5d9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T11:23:38Z","modified":"2026-02-13T11:23:38Z","name":"Phishing domain: acceso-clientes-web.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating [\"wordpress\"]. Report & evidence: https://phishdestroy.io/domain/acceso-clientes-web.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acceso-clientes-web.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T11:23:38Z","labels":["malicious-activity","phishing","brand:[\"wordpress\"]"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acceso-clientes-web.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e769e1c-40d0-576a-a925-1a2dc082b182","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-28T15:35:13Z","modified":"2026-06-28T15:35:13Z","name":"Phishing domain: acceso-perfil-web.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acceso-perfil-web.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acceso-perfil-web.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-28T15:35:13Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acceso-perfil-web.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--42d0e5c9-e012-5020-a9fd-1938c2708f8e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-07T02:13:13Z","modified":"2026-07-07T02:13:13Z","name":"Phishing domain: acceso-sander-app-website.azurewebsites.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating santander. Report & evidence: https://phishdestroy.io/domain/acceso-sander-app-website.azurewebsites.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acceso-sander-app-website.azurewebsites.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-07T02:13:13Z","labels":["malicious-activity","phishing","brand:santander"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acceso-sander-app-website.azurewebsites.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--780ae048-8792-539b-8c30-6c781f21dd6c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-07T15:41:24Z","modified":"2026-03-07T15:41:24Z","name":"Phishing domain: acceso-v2p.webcindario.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Microsoft. Report & evidence: https://phishdestroy.io/domain/acceso-v2p.webcindario.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acceso-v2p.webcindario.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-07T15:41:24Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acceso-v2p.webcindario.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5adc1529-dfd1-5f84-9c4a-c96f5caad445","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-07T15:41:35Z","modified":"2026-03-07T15:41:35Z","name":"Phishing domain: acceso-ya1.webcindario.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Microsoft. Report & evidence: https://phishdestroy.io/domain/acceso-ya1.webcindario.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acceso-ya1.webcindario.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-07T15:41:35Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acceso-ya1.webcindario.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a85681a-0d28-5f7e-8693-85326b743dcd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T11:28:19Z","modified":"2026-02-13T11:28:19Z","name":"Phishing domain: accesoapp-soportes.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/accesoapp-soportes.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accesoapp-soportes.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T11:28:19Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accesoapp-soportes.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3897477-0d5d-5e7b-b138-15b5d8314385","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T11:24:44Z","modified":"2026-02-13T11:24:44Z","name":"Phishing domain: accesoapp-web.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/accesoapp-web.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accesoapp-web.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T11:24:44Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accesoapp-web.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd6f7fc6-d718-55c9-9265-6c75b0860326","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-03T13:24:31Z","modified":"2025-12-03T13:24:31Z","name":"Phishing domain: accesobhdactivar.webcindario.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Linea. Report & evidence: https://phishdestroy.io/domain/accesobhdactivar.webcindario.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accesobhdactivar.webcindario.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-03T13:24:31Z","labels":["malicious-activity","phishing","brand:linea"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accesobhdactivar.webcindario.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f75773f-3dd9-5724-9fe9-6727ed6b9877","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-29T02:20:51Z","modified":"2026-06-29T02:20:51Z","name":"Phishing domain: accesobhddirecto.iceiy.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/accesobhddirecto.iceiy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accesobhddirecto.iceiy.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-29T02:20:51Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accesobhddirecto.iceiy.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--907ec1d9-7d3c-57dd-834f-44d8a95fcdd6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T03:02:06Z","modified":"2026-08-10T03:02:06Z","name":"Phishing domain: accesoihabilitado.iceiy.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating microsoft. Report & evidence: https://phishdestroy.io/domain/accesoihabilitado.iceiy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accesoihabilitado.iceiy.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T03:02:06Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accesoihabilitado.iceiy.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--147da382-2dc8-573d-ba3f-81775a386d9f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T11:49:17Z","modified":"2026-02-13T11:49:17Z","name":"Phishing domain: accesos-soporteportal.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/accesos-soporteportal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accesos-soporteportal.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T11:49:17Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accesos-soporteportal.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4357c6d4-4891-57e9-9118-14dda085ef66","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-12T14:16:15Z","modified":"2026-06-12T14:16:15Z","name":"Phishing domain: access--kucoinhelp-view-cdn-x.webflow.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating KuCoin. Report & evidence: https://phishdestroy.io/domain/access--kucoinhelp-view-cdn-x.webflow.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access--kucoinhelp-view-cdn-x.webflow.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-12T14:16:15Z","labels":["malicious-activity","phishing","brand:kucoin"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access--kucoinhelp-view-cdn-x.webflow.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d23e6b5-8cd2-55e6-b6be-53e0d7029a60","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:27Z","modified":"2026-02-26T23:24:27Z","name":"Phishing domain: access--uphald-oi.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/access--uphald-oi.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access--uphald-oi.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:27Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access--uphald-oi.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--69cd78c6-02a6-5891-b1b5-339eb0b66893","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-19T08:54:06Z","modified":"2026-04-19T08:54:06Z","name":"Phishing domain: access-aave-wallet.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/access-aave-wallet.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-aave-wallet.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-19T08:54:06Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-aave-wallet.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--08099eba-21a7-5797-afea-16a0d212a69a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-18T03:21:04Z","modified":"2025-11-18T03:21:04Z","name":"Phishing domain: access-aave.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/access-aave.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-aave.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-18T03:21:04Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-aave.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--db9d8d69-ec85-5237-a142-ae9630c0cf24","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: access-aerodrome-slipstream.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/access-aerodrome-slipstream.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-aerodrome-slipstream.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-aerodrome-slipstream.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--889ed258-24ea-53db-aa11-2c8c50330d48","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T15:06:13Z","modified":"2026-02-13T15:06:13Z","name":"Phishing domain: access-app.center","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/access-app.center","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-app.center']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T15:06:13Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-app.center"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea020454-0323-5a1c-a3e1-069cba22cf4f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-09T06:59:50Z","modified":"2026-02-09T06:59:50Z","name":"Phishing domain: access-app.live","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating ledger. Report & evidence: https://phishdestroy.io/domain/access-app.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-app.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-09T06:59:50Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-app.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0df523d-b567-5c7b-a409-143afc02d284","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-01T20:20:45Z","modified":"2025-11-01T20:20:45Z","name":"Phishing domain: access-asterdex.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/access-asterdex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-asterdex.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-01T20:20:45Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-asterdex.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--632a5d6d-41d1-553b-b1e7-10945f3481bd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-24T15:56:45Z","modified":"2026-07-24T15:56:45Z","name":"Phishing domain: access-atomicio.wixstudio.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/access-atomicio.wixstudio.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-atomicio.wixstudio.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-24T15:56:45Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-atomicio.wixstudio.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c482cbf-0d99-59b7-8b91-fecaed5576f3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-07-29T12:07:54Z","modified":"2025-07-29T12:07:54Z","name":"Phishing domain: access-auth.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating binance. Report & evidence: https://phishdestroy.io/domain/access-auth.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-auth.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-07-29T12:07:54Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-auth.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6248300-e6c3-5f20-8df0-0327ed930a58","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:24Z","modified":"2026-02-26T23:21:24Z","name":"Phishing domain: access-bridge-en.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/access-bridge-en.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-bridge-en.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:24Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-bridge-en.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a531e5a1-5e88-5395-b048-d504664d6889","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-12T12:39:46Z","modified":"2025-10-12T12:39:46Z","name":"Phishing domain: access-bridge-webs.square.site","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/access-bridge-webs.square.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-bridge-webs.square.site']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-12T12:39:46Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-bridge-webs.square.site"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d292e41-ac95-5978-8a2e-c6e654a017b1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T03:10:08Z","modified":"2026-02-13T03:10:08Z","name":"Phishing domain: access-bridge.live","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/access-bridge.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-bridge.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T03:10:08Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-bridge.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a3afaad-051e-5c64-a744-9ac5d6891b88","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-04T15:37:29Z","modified":"2026-04-04T15:37:29Z","name":"Phishing domain: access-cdn-ledgr.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/access-cdn-ledgr.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-cdn-ledgr.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-04T15:37:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-cdn-ledgr.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9011ab96-6bf2-5336-9e9e-af08505a929d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-07-18T14:10:10Z","modified":"2025-07-18T14:10:10Z","name":"Phishing domain: access-check.fun","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating foundation. Report & evidence: https://phishdestroy.io/domain/access-check.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-check.fun']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-07-18T14:10:10Z","labels":["malicious-activity","phishing","brand:foundation"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-check.fun"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--af6cc323-20f6-5a71-8a41-bad2088cd6c7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-24T18:08:30Z","modified":"2025-12-24T18:08:30Z","name":"Phishing domain: access-coin-base-pro.framer.media","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/access-coin-base-pro.framer.media","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-coin-base-pro.framer.media']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-24T18:08:30Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-coin-base-pro.framer.media"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--41710b23-39a5-5468-84c4-58da28f937ed","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-05T16:06:15Z","modified":"2025-12-05T16:06:15Z","name":"Phishing domain: access-coin-coms.daftpage.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/access-coin-coms.daftpage.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-coin-coms.daftpage.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-05T16:06:15Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-coin-coms.daftpage.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b10a9e4-06f9-5cc2-8c1f-b916ebb329c5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:58Z","modified":"2026-02-26T23:19:58Z","name":"Phishing domain: access-coin-extension-base.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/access-coin-extension-base.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-coin-extension-base.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:58Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-coin-extension-base.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--94150b00-4091-56c8-b68d-f6943d95bfbc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:30Z","modified":"2026-02-26T23:23:30Z","name":"Phishing domain: access-coinbase-learn.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/access-coinbase-learn.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-coinbase-learn.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:30Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-coinbase-learn.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9f32afe-8b26-51de-93b1-760033eb4e6e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-12T02:03:10Z","modified":"2025-12-12T02:03:10Z","name":"Phishing domain: access-coinbase-portal.framer.media","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/access-coinbase-portal.framer.media","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-coinbase-portal.framer.media']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-12T02:03:10Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-coinbase-portal.framer.media"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--af02360d-0171-53d8-8acc-1d58a4789648","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:14Z","modified":"2026-02-26T23:20:14Z","name":"Phishing domain: access-coinbase-pro-eng.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/access-coinbase-pro-eng.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-coinbase-pro-eng.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:14Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-coinbase-pro-eng.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c267362e-1e75-50e1-ae17-92d79b0bacb1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-05T15:20:31Z","modified":"2025-12-05T15:20:31Z","name":"Phishing domain: access-coinbase-pros.framer.ai","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/access-coinbase-pros.framer.ai","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-coinbase-pros.framer.ai']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-05T15:20:31Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-coinbase-pros.framer.ai"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce84a8e9-7af7-59a8-b3cc-11316bdc9ce5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-14T01:31:20Z","modified":"2025-12-14T01:31:20Z","name":"Phishing domain: access-coinbasehelp.codedesign.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/access-coinbasehelp.codedesign.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-coinbasehelp.codedesign.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-14T01:31:20Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-coinbasehelp.codedesign.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8234f6d-0332-5771-877d-767d31594ab5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-09T19:07:25Z","modified":"2025-12-09T19:07:25Z","name":"Phishing domain: access-coinbasehelp.framer.wiki","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/access-coinbasehelp.framer.wiki","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-coinbasehelp.framer.wiki']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-09T19:07:25Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-coinbasehelp.framer.wiki"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5757a4d-f4c8-57e6-81b7-a7b84143923a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-24T18:08:30Z","modified":"2025-12-24T18:08:30Z","name":"Phishing domain: access-coinbse-sin.framer.media","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/access-coinbse-sin.framer.media","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-coinbse-sin.framer.media']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-24T18:08:30Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-coinbse-sin.framer.media"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--87eabb8f-7622-51be-906a-1ece5f8dc113","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:49Z","modified":"2026-02-26T23:24:49Z","name":"Phishing domain: access-coinpro-en-us.typedream.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/access-coinpro-en-us.typedream.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-coinpro-en-us.typedream.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:49Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-coinpro-en-us.typedream.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--88652af3-f40f-52d2-a32c-57ecae659075","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-03T23:03:01Z","modified":"2025-12-03T23:03:01Z","name":"Phishing domain: access-coinpro-web-en.framer.ai","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/access-coinpro-web-en.framer.ai","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-coinpro-web-en.framer.ai']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-03T23:03:01Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-coinpro-web-en.framer.ai"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bd0ce18-bf3e-5c97-a51d-a71bfa573b14","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-25T05:25:55Z","modified":"2026-06-25T05:25:55Z","name":"Phishing domain: access-consmrt-hold-logins.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/access-consmrt-hold-logins.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-consmrt-hold-logins.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-25T05:25:55Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-consmrt-hold-logins.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a780054-80d2-5ad5-82b4-d60c2c371b63","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-03T03:28:08Z","modified":"2026-03-03T03:28:08Z","name":"Phishing domain: access-control-center.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/access-control-center.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-control-center.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-03T03:28:08Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-control-center.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3adaeb85-6d28-5edd-b41d-90547bc5acb7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: access-crypto.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Crypto.com. Report & evidence: https://phishdestroy.io/domain/access-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-crypto.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing","brand:crypto.com"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-crypto.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e59782a7-f2b6-5dd3-b558-42bc09f14613","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-10T18:28:17Z","modified":"2026-04-10T18:28:17Z","name":"Phishing domain: access-deffillama-wallet-io.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/access-deffillama-wallet-io.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-deffillama-wallet-io.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-10T18:28:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-deffillama-wallet-io.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a3cb178-44f2-5848-9130-db5e89b776ca","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-23T22:50:35Z","modified":"2026-04-23T22:50:35Z","name":"Phishing domain: access-desktop.wixstudio.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/access-desktop.wixstudio.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-desktop.wixstudio.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-23T22:50:35Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-desktop.wixstudio.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--53c055d7-d287-5724-b763-9f6b29c4d9f6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-07T10:42:36Z","modified":"2026-08-07T10:42:36Z","name":"Phishing domain: access-docs-us-trezor-io-start.typedream.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Trezor. Report & evidence: https://phishdestroy.io/domain/access-docs-us-trezor-io-start.typedream.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-docs-us-trezor-io-start.typedream.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-07T10:42:36Z","labels":["malicious-activity","phishing","brand:trezor"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-docs-us-trezor-io-start.typedream.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--466d90dd-8a56-5234-b070-f5888c082684","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:12Z","modified":"2026-02-26T23:23:12Z","name":"Phishing domain: access-dydx-trade-en-us.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating dYdX. Report & evidence: https://phishdestroy.io/domain/access-dydx-trade-en-us.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-dydx-trade-en-us.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:12Z","labels":["malicious-activity","phishing","brand:dydx"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-dydx-trade-en-us.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--29fd7742-5739-56a7-b9f6-c111249a2439","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:48Z","modified":"2026-02-26T23:20:48Z","name":"Phishing domain: access-dydxedex-en.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating dYdX. Report & evidence: https://phishdestroy.io/domain/access-dydxedex-en.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-dydxedex-en.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:48Z","labels":["malicious-activity","phishing","brand:dydx"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-dydxedex-en.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--00c43a00-0b42-56d5-9615-e8ec608a94a7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:32Z","modified":"2026-02-26T23:20:32Z","name":"Phishing domain: access-e-coinbase.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/access-e-coinbase.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-e-coinbase.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:32Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-e-coinbase.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--29bb5cb1-0b9d-5c92-bd03-b6c579624ce5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T19:59:01Z","modified":"2026-08-10T19:59:01Z","name":"Phishing domain: access-en-ledger-live-download.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/access-en-ledger-live-download.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-en-ledger-live-download.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T19:59:01Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-en-ledger-live-download.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--799fd0a5-7dd9-51ee-b0ae-78ce3372a658","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-06T00:44:36Z","modified":"2025-12-06T00:44:36Z","name":"Phishing domain: access-en-us-keraken.daftpage.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Kraken. Report & evidence: https://phishdestroy.io/domain/access-en-us-keraken.daftpage.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-en-us-keraken.daftpage.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-06T00:44:36Z","labels":["malicious-activity","phishing","brand:kraken"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-en-us-keraken.daftpage.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--503656f8-ffa5-5ee1-b7d7-c54467a62278","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:25Z","modified":"2026-02-26T23:21:25Z","name":"Phishing domain: access-eng-coinbase.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/access-eng-coinbase.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-eng-coinbase.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:25Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-eng-coinbase.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b075d04-1214-5352-bc1f-c8f60cb865b5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-12T20:03:25Z","modified":"2026-04-12T20:03:25Z","name":"Phishing domain: access-eng-trezr--x-logg-web.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Trezor. Report & evidence: https://phishdestroy.io/domain/access-eng-trezr--x-logg-web.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-eng-trezr--x-logg-web.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-12T20:03:25Z","labels":["malicious-activity","phishing","brand:trezor"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-eng-trezr--x-logg-web.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b48740a3-4003-5193-a3b1-5b6f6c9cdd09","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-21T11:47:33Z","modified":"2026-05-21T11:47:33Z","name":"Phishing domain: access-ethana.online","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ethereum. Report & evidence: https://phishdestroy.io/domain/access-ethana.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-ethana.online']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-21T11:47:33Z","labels":["malicious-activity","phishing","brand:ethereum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-ethana.online"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fd5f148-8f47-5490-8cd0-cfdc7e46be0a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-19T02:00:00Z","modified":"2025-09-19T02:00:00Z","name":"Phishing domain: access-everlyn.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating WalletConnect. Report & evidence: https://phishdestroy.io/domain/access-everlyn.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-everlyn.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-19T02:00:00Z","labels":["malicious-activity","phishing","brand:walletconnect"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-everlyn.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--682f7417-8e78-55d0-b13a-688968ecb33e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-05T01:17:57Z","modified":"2026-03-05T01:17:57Z","name":"Phishing domain: access-exdust-wlt.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating avalanche. Report & evidence: https://phishdestroy.io/domain/access-exdust-wlt.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-exdust-wlt.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-05T01:17:57Z","labels":["malicious-activity","phishing","brand:avalanche"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-exdust-wlt.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5945a1b-d897-504b-b474-cfedfae168c6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-22T15:33:23Z","modified":"2026-03-22T15:33:23Z","name":"Phishing domain: access-extn-sion-auth-tust-waellex-en.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/access-extn-sion-auth-tust-waellex-en.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-extn-sion-auth-tust-waellex-en.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-22T15:33:23Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-extn-sion-auth-tust-waellex-en.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b31e745-7c68-50e9-af5f-855e29a4487e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:06Z","modified":"2026-02-26T23:23:06Z","name":"Phishing domain: access-extnsion-mtmsk.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/access-extnsion-mtmsk.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-extnsion-mtmsk.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:06Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-extnsion-mtmsk.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2a9be51-3339-54de-a1bc-978aa522128b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-07T10:43:22Z","modified":"2026-08-07T10:43:22Z","name":"Phishing domain: access-faq-trezzr.typedream.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating ethereum. Report & evidence: https://phishdestroy.io/domain/access-faq-trezzr.typedream.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-faq-trezzr.typedream.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-07T10:43:22Z","labels":["malicious-activity","phishing","brand:ethereum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-faq-trezzr.typedream.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--be46d2bc-721b-52be-b0e6-4802afef04ac","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-05T11:42:27Z","modified":"2026-08-05T11:42:27Z","name":"Phishing domain: access-form-82h6.p-srkphq9l.workers.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating microsoft. Report & evidence: https://phishdestroy.io/domain/access-form-82h6.p-srkphq9l.workers.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-form-82h6.p-srkphq9l.workers.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-05T11:42:27Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-form-82h6.p-srkphq9l.workers.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5cc4486-bd39-595e-b45e-ca2e1d4a00ef","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T18:40:07Z","modified":"2026-08-09T18:40:07Z","name":"Phishing domain: access-gain.top","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/access-gain.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-gain.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T18:40:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-gain.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe625627-765e-5aec-a556-97325fc20f10","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:05Z","modified":"2026-02-26T23:23:05Z","name":"Phishing domain: access-globalmarket.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/access-globalmarket.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-globalmarket.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:05Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-globalmarket.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--af0bc368-c55b-5ca4-8da1-e757cdb49380","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-10T23:38:51Z","modified":"2026-02-10T23:38:51Z","name":"Phishing domain: access-globalpy.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericbanking. Report & evidence: https://phishdestroy.io/domain/access-globalpy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-globalpy.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-10T23:38:51Z","labels":["malicious-activity","phishing","brand:genericbanking"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-globalpy.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--263ce7c2-3892-55d4-901c-327031127a0f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-28T01:00:57Z","modified":"2026-03-28T01:00:57Z","name":"Phishing domain: access-guildguards.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/access-guildguards.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-guildguards.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-28T01:00:57Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-guildguards.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f148b990-7ca1-56eb-9281-545978e63a6b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T19:59:08Z","modified":"2026-08-10T19:59:08Z","name":"Phishing domain: access-help-ledger-login.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/access-help-ledger-login.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-help-ledger-login.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T19:59:08Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-help-ledger-login.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--15d17f66-1002-55d4-8da5-dd08d35401d6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T19:59:05Z","modified":"2026-08-10T19:59:05Z","name":"Phishing domain: access-help-ledger-start-com.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/access-help-ledger-start-com.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-help-ledger-start-com.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T19:59:05Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-help-ledger-start-com.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a8be2f4-bbbd-55aa-97e8-3d9127e5a2da","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:40Z","modified":"2026-02-26T23:23:40Z","name":"Phishing domain: access-helps-base-extension.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/access-helps-base-extension.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-helps-base-extension.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:40Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-helps-base-extension.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--953fc13c-9d95-55f9-bf5a-e00b4c41e4d6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-24T15:53:29Z","modified":"2026-03-24T15:53:29Z","name":"Phishing domain: access-helps-bridges-tronoz.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Trezor. Report & evidence: https://phishdestroy.io/domain/access-helps-bridges-tronoz.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-helps-bridges-tronoz.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-24T15:53:29Z","labels":["malicious-activity","phishing","brand:trezor"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-helps-bridges-tronoz.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3efdd21-5ffd-51cb-bfd8-a765134a705e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-13T06:40:08Z","modified":"2026-08-13T06:40:08Z","name":"Phishing domain: access-hubs.co","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/access-hubs.co","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-hubs.co']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-13T06:40:08Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-hubs.co"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae773466-16e3-5c39-9483-6ea0691bc312","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-08T22:31:12Z","modified":"2026-04-08T22:31:12Z","name":"Phishing domain: access-hyperliqueed-exchange.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Hyperliquid. Report & evidence: https://phishdestroy.io/domain/access-hyperliqueed-exchange.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-hyperliqueed-exchange.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-08T22:31:12Z","labels":["malicious-activity","phishing","brand:hyperliquid"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-hyperliqueed-exchange.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e24d855e-b1ed-510a-a0a6-25967d38e013","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-09T02:10:10Z","modified":"2026-07-09T02:10:10Z","name":"Phishing domain: access-ing.de","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/access-ing.de","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-ing.de']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-09T02:10:10Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-ing.de"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d33e2922-0b4d-5f80-b671-f2b2f9065658","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-13T15:37:08Z","modified":"2025-11-13T15:37:08Z","name":"Phishing domain: access-koins-en-us.pineapple.page","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/access-koins-en-us.pineapple.page","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-koins-en-us.pineapple.page']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-13T15:37:08Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-koins-en-us.pineapple.page"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c904fc4e-7541-5081-9895-93e43bbea572","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-03T18:52:43Z","modified":"2026-01-03T18:52:43Z","name":"Phishing domain: access-krakeen-us-dekstop.pineapple.page","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Kraken. Report & evidence: https://phishdestroy.io/domain/access-krakeen-us-dekstop.pineapple.page","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-krakeen-us-dekstop.pineapple.page']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-03T18:52:43Z","labels":["malicious-activity","phishing","brand:kraken"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-krakeen-us-dekstop.pineapple.page"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7de70ae8-133d-5f67-b503-e312d9f3982d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:01Z","modified":"2026-02-26T23:23:01Z","name":"Phishing domain: access-kraken-en.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Kraken. Report & evidence: https://phishdestroy.io/domain/access-kraken-en.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-kraken-en.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:01Z","labels":["malicious-activity","phishing","brand:kraken"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-kraken-en.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c89adaa-4c95-5721-bb7e-ae6cd2fcf1cf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:38Z","modified":"2026-02-26T23:22:38Z","name":"Phishing domain: access-kraken-login-docs.wstd.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Kraken. Report & evidence: https://phishdestroy.io/domain/access-kraken-login-docs.wstd.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-kraken-login-docs.wstd.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:38Z","labels":["malicious-activity","phishing","brand:kraken"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-kraken-login-docs.wstd.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd88cd59-7615-5c62-8fd7-2a76df445b32","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-21T11:31:46Z","modified":"2026-04-21T11:31:46Z","name":"Phishing domain: access-kraken-market.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Kraken. Report & evidence: https://phishdestroy.io/domain/access-kraken-market.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-kraken-market.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-21T11:31:46Z","labels":["malicious-activity","phishing","brand:kraken"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-kraken-market.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--53f29e92-61e2-5bdf-96d2-52d13f425b7f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:38Z","modified":"2026-02-26T23:19:38Z","name":"Phishing domain: access-krakun-cdn.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/access-krakun-cdn.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-krakun-cdn.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:38Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-krakun-cdn.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a9d7876-ba76-5fd2-8cbb-0d8f85212b4f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-29T15:20:36Z","modified":"2025-11-29T15:20:36Z","name":"Phishing domain: access-krnken-eng.framer.ai","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Kraken. Report & evidence: https://phishdestroy.io/domain/access-krnken-eng.framer.ai","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-krnken-eng.framer.ai']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-29T15:20:36Z","labels":["malicious-activity","phishing","brand:kraken"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-krnken-eng.framer.ai"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa20cfbc-63e7-5f2a-9388-538d2eb62e36","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-09T04:14:16Z","modified":"2026-06-09T04:14:16Z","name":"Phishing domain: access-ldgerdekstop.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/access-ldgerdekstop.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-ldgerdekstop.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-09T04:14:16Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-ldgerdekstop.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2caf8742-6427-512d-ba91-7099e16c4839","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-06T13:41:58Z","modified":"2026-05-06T13:41:58Z","name":"Phishing domain: access-learn-kraken-en.tem3.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Kraken. Report & evidence: https://phishdestroy.io/domain/access-learn-kraken-en.tem3.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-learn-kraken-en.tem3.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-06T13:41:58Z","labels":["malicious-activity","phishing","brand:kraken"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-learn-kraken-en.tem3.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--be20cb2a-7515-5a57-b4e9-ff2e2bbec7fe","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-25T01:09:25Z","modified":"2026-03-25T01:09:25Z","name":"Phishing domain: access-ledge-en-us.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/access-ledge-en-us.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-ledge-en-us.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-25T01:09:25Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-ledge-en-us.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2a4c717-f5e7-5d7e-95ba-e3d70d4109d6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T19:59:08Z","modified":"2026-08-10T19:59:08Z","name":"Phishing domain: access-ledger-live-desktop.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/access-ledger-live-desktop.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-ledger-live-desktop.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T19:59:08Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-ledger-live-desktop.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c87067a0-057b-52c9-92e9-cbd81725bf14","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-23T02:16:25Z","modified":"2026-03-23T02:16:25Z","name":"Phishing domain: access-ledger-live-download-eng.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/access-ledger-live-download-eng.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-ledger-live-download-eng.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-23T02:16:25Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-ledger-live-download-eng.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5823a6eb-2b1d-557d-91af-a402201db0e9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-21T03:45:55Z","modified":"2026-03-21T03:45:55Z","name":"Phishing domain: access-ledger-live-wallet-eng-us.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/access-ledger-live-wallet-eng-us.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-ledger-live-wallet-eng-us.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-21T03:45:55Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-ledger-live-wallet-eng-us.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e319e139-aa6a-5212-81f5-f4db6a537208","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T19:59:05Z","modified":"2026-08-10T19:59:05Z","name":"Phishing domain: access-ledgerf-kash-login.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/access-ledgerf-kash-login.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-ledgerf-kash-login.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T19:59:05Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-ledgerf-kash-login.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b0993d3-813e-5c8f-b388-96f08d3a4312","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-23T00:28:39Z","modified":"2026-03-23T00:28:39Z","name":"Phishing domain: access-ledgerlive-faq.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/access-ledgerlive-faq.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-ledgerlive-faq.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-23T00:28:39Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-ledgerlive-faq.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--75ac7d89-653b-553f-b7cc-89e15d9145aa","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-30T20:32:03Z","modified":"2026-04-30T20:32:03Z","name":"Phishing domain: access-ledgerlive-hub.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/access-ledgerlive-hub.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-ledgerlive-hub.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-30T20:32:03Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-ledgerlive-hub.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b93209e-56e7-5e5d-824e-d9c4bafaa1d2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-13T00:29:47Z","modified":"2026-04-13T00:29:47Z","name":"Phishing domain: access-ledgerlogn.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/access-ledgerlogn.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-ledgerlogn.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-13T00:29:47Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-ledgerlogn.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e706b3db-dafe-5b8d-9d5c-c86332d14ce1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T19:59:14Z","modified":"2026-08-10T19:59:14Z","name":"Phishing domain: access-ledgr-desktop.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/access-ledgr-desktop.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-ledgr-desktop.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T19:59:14Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-ledgr-desktop.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6612ed0-9f55-5b77-a543-30643c9879c1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-25T02:42:18Z","modified":"2026-03-25T02:42:18Z","name":"Phishing domain: access-ledgr-dsktop-eng.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/access-ledgr-dsktop-eng.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-ledgr-dsktop-eng.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-25T02:42:18Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-ledgr-dsktop-eng.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ded5f7a-8abe-5984-9287-981fb8754794","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-25T01:34:49Z","modified":"2026-03-25T01:34:49Z","name":"Phishing domain: access-ledgr-en-faq.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/access-ledgr-en-faq.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-ledgr-en-faq.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-25T01:34:49Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-ledgr-en-faq.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--86d7cb70-e57f-518c-8e26-ab230bea497f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-28T06:39:39Z","modified":"2026-03-28T06:39:39Z","name":"Phishing domain: access-ledgr-live-io.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating ledger. Report & evidence: https://phishdestroy.io/domain/access-ledgr-live-io.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-ledgr-live-io.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-28T06:39:39Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-ledgr-live-io.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--47c30d2f-f113-5fb1-a962-a196137bd14a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T19:59:04Z","modified":"2026-08-10T19:59:04Z","name":"Phishing domain: access-ledgr-login-web.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/access-ledgr-login-web.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-ledgr-login-web.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T19:59:04Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-ledgr-login-web.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1958a94-0d6e-5018-8faa-680bb9e5920f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-06T16:39:34Z","modified":"2026-04-06T16:39:34Z","name":"Phishing domain: access-ledgr-s-entart.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/access-ledgr-s-entart.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-ledgr-s-entart.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-06T16:39:34Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-ledgr-s-entart.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1287f072-8d1f-531e-b762-46df4fdd4611","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-24T16:10:26Z","modified":"2026-03-24T16:10:26Z","name":"Phishing domain: access-ledgr-welcome.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/access-ledgr-welcome.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-ledgr-welcome.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-24T16:10:26Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-ledgr-welcome.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b665da7-c4f4-52c4-adb9-dca7caab3ebd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-04T23:45:01Z","modified":"2026-04-04T23:45:01Z","name":"Phishing domain: access-ledgr.wixstudio.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/access-ledgr.wixstudio.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-ledgr.wixstudio.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-04T23:45:01Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-ledgr.wixstudio.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0555075-5c0d-500d-b690-b4af5670386b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-23T06:38:34Z","modified":"2026-04-23T06:38:34Z","name":"Phishing domain: access-ledgrcom-eng.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/access-ledgrcom-eng.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-ledgrcom-eng.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-23T06:38:34Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-ledgrcom-eng.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ca27f89-2020-5de4-9b60-4800613472ef","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-06T16:18:10Z","modified":"2026-04-06T16:18:10Z","name":"Phishing domain: access-ledgrcom-start.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating ledger. Report & evidence: https://phishdestroy.io/domain/access-ledgrcom-start.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-ledgrcom-start.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-06T16:18:10Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-ledgrcom-start.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d23c453a-d6ca-53a7-aff0-178e4c8e775d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-28T06:53:39Z","modified":"2026-03-28T06:53:39Z","name":"Phishing domain: access-ledgrlive-faqs.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/access-ledgrlive-faqs.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-ledgrlive-faqs.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-28T06:53:39Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-ledgrlive-faqs.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--68d0e8b5-6031-5342-bb50-d5155e8c3ea5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T19:59:13Z","modified":"2026-08-10T19:59:13Z","name":"Phishing domain: access-ledgrlive-io.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/access-ledgrlive-io.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-ledgrlive-io.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T19:59:13Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-ledgrlive-io.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--504676a2-126d-5116-8d8d-ef3ae0fd0ac9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-04T14:55:25Z","modified":"2026-01-04T14:55:25Z","name":"Phishing domain: access-ledgrrliv-wallet-us.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/access-ledgrrliv-wallet-us.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-ledgrrliv-wallet-us.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-04T14:55:25Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-ledgrrliv-wallet-us.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c70d0acc-77bb-5c6b-afca-a4a1f2ad2865","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-30T05:45:52Z","modified":"2026-03-30T05:45:52Z","name":"Phishing domain: access-ledzer-liive.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/access-ledzer-liive.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-ledzer-liive.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-30T05:45:52Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-ledzer-liive.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--668c31b5-6def-5a41-9ea6-0c829075386d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-27T21:35:50Z","modified":"2026-03-27T21:35:50Z","name":"Phishing domain: access-ledzer-lve-long-io.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating ledger. Report & evidence: https://phishdestroy.io/domain/access-ledzer-lve-long-io.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-ledzer-lve-long-io.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-27T21:35:50Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-ledzer-lve-long-io.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--35f5d64f-c233-5701-88ad-d15ca27347b3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-29T17:34:16Z","modified":"2026-04-29T17:34:16Z","name":"Phishing domain: access-ledzerlive-walet-cdn.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/access-ledzerlive-walet-cdn.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-ledzerlive-walet-cdn.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-29T17:34:16Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-ledzerlive-walet-cdn.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5caf1139-7865-5145-9210-d6a6895af4c3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-25T14:27:24Z","modified":"2026-04-25T14:27:24Z","name":"Phishing domain: access-live-ledger-download-en-us.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/access-live-ledger-download-en-us.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-live-ledger-download-en-us.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-25T14:27:24Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-live-ledger-download-en-us.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--02133a53-59c3-5bd9-8308-74a21eb7f49a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-06T22:39:41Z","modified":"2026-04-06T22:39:41Z","name":"Phishing domain: access-liveledgeer-learn.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating ledger. Report & evidence: https://phishdestroy.io/domain/access-liveledgeer-learn.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-liveledgeer-learn.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-06T22:39:41Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-liveledgeer-learn.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--398a6853-afd4-5159-8f40-d8f0fe372953","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-22T03:36:36Z","modified":"2026-03-22T03:36:36Z","name":"Phishing domain: access-liveledger-en.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/access-liveledger-en.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-liveledger-en.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-22T03:36:36Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-liveledger-en.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0505d0a-5935-5f97-8380-203ec9c4515b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-04T19:40:51Z","modified":"2026-04-04T19:40:51Z","name":"Phishing domain: access-liveledgr-apps.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating ledger. Report & evidence: https://phishdestroy.io/domain/access-liveledgr-apps.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-liveledgr-apps.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-04T19:40:51Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-liveledgr-apps.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--23c71bb4-c0fd-5024-ab37-c86212cb6345","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-29T18:01:40Z","modified":"2026-03-29T18:01:40Z","name":"Phishing domain: access-liveledgr-eng.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/access-liveledgr-eng.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-liveledgr-eng.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-29T18:01:40Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-liveledgr-eng.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--efde9677-0548-57fd-87ab-da22e2d6a952","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-18T17:57:19Z","modified":"2026-04-18T17:57:19Z","name":"Phishing domain: access-livelgr-learn.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/access-livelgr-learn.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-livelgr-learn.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-18T17:57:19Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-livelgr-learn.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef5dcef9-db6b-5c1a-8ab0-53251b9b5a70","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-12T15:36:23Z","modified":"2026-04-12T15:36:23Z","name":"Phishing domain: access-livledgr-home.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/access-livledgr-home.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-livledgr-home.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-12T15:36:23Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-livledgr-home.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--78d83988-cfa2-568b-8f25-7d8bbe93b40d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-11T21:13:23Z","modified":"2025-11-11T21:13:23Z","name":"Phishing domain: access-loggn-trezr.weebly.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/access-loggn-trezr.weebly.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-loggn-trezr.weebly.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-11T21:13:23Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-loggn-trezr.weebly.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9c3c663-f365-5fe4-bc37-f22c3946c521","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:14Z","modified":"2026-02-26T23:21:14Z","name":"Phishing domain: access-logiin-web-uphold.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/access-logiin-web-uphold.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-logiin-web-uphold.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:14Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-logiin-web-uphold.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7242fd01-4767-5634-ac75-57b5e1af10ac","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-07T08:26:15Z","modified":"2026-02-07T08:26:15Z","name":"Phishing domain: access-m-etamask-log.tem3.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating MetaMask. Report & evidence: https://phishdestroy.io/domain/access-m-etamask-log.tem3.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-m-etamask-log.tem3.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-07T08:26:15Z","labels":["malicious-activity","phishing","brand:metamask"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-m-etamask-log.tem3.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8da8089e-1a12-5a55-934b-6dae67ec4efb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-29T09:42:43Z","modified":"2025-11-29T09:42:43Z","name":"Phishing domain: access-megaeth.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/access-megaeth.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-megaeth.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-29T09:42:43Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-megaeth.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d19a2058-7570-58fe-b03e-b74dfbb8851d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-23T18:04:11Z","modified":"2025-10-23T18:04:11Z","name":"Phishing domain: access-meta-io-page.pineapple.page","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating MetaMask. Report & evidence: https://phishdestroy.io/domain/access-meta-io-page.pineapple.page","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-meta-io-page.pineapple.page']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-23T18:04:11Z","labels":["malicious-activity","phishing","brand:metamask"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-meta-io-page.pineapple.page"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6cd0ca9-8403-5afd-af37-4f6f0201565c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-02T14:27:07Z","modified":"2026-06-02T14:27:07Z","name":"Phishing domain: access-meta.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericscam. Report & evidence: https://phishdestroy.io/domain/access-meta.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-meta.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-02T14:27:07Z","labels":["malicious-activity","phishing","brand:genericscam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-meta.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1685253-d826-5de8-9627-c363236066c9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-06T13:42:37Z","modified":"2026-05-06T13:42:37Z","name":"Phishing domain: access-metamask-log.tem3.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating MetaMask. Report & evidence: https://phishdestroy.io/domain/access-metamask-log.tem3.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-metamask-log.tem3.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-06T13:42:37Z","labels":["malicious-activity","phishing","brand:metamask"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-metamask-log.tem3.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bde4830a-7ba7-581c-a396-227797bd5acd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:34Z","modified":"2026-02-26T23:22:34Z","name":"Phishing domain: access-metamask-us.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating MetaMask. Report & evidence: https://phishdestroy.io/domain/access-metamask-us.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-metamask-us.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:34Z","labels":["malicious-activity","phishing","brand:metamask"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-metamask-us.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--32feb08a-c081-5df2-8dfc-bd7366c076c4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:32Z","modified":"2026-02-26T23:24:32Z","name":"Phishing domain: access-metamsk-login-bd8.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/access-metamsk-login-bd8.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-metamsk-login-bd8.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:32Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-metamsk-login-bd8.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--10fc00b8-24dd-5bcf-b578-1f7f4b678bce","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:39Z","modified":"2026-02-26T23:24:39Z","name":"Phishing domain: access-metamsk.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/access-metamsk.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-metamsk.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:39Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-metamsk.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d843c2d-5545-58b6-99ec-64e1b81b785c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-06T14:18:25Z","modified":"2025-12-06T14:18:25Z","name":"Phishing domain: access-metamskio.daftpage.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating MetaMask. Report & evidence: https://phishdestroy.io/domain/access-metamskio.daftpage.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-metamskio.daftpage.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-06T14:18:25Z","labels":["malicious-activity","phishing","brand:metamask"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-metamskio.daftpage.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ab184e8-f0fd-57e6-af4c-2e1e6b36ab95","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-10T18:12:28Z","modified":"2025-12-10T18:12:28Z","name":"Phishing domain: access-metasmk.framer.ai","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating MetaMask. Report & evidence: https://phishdestroy.io/domain/access-metasmk.framer.ai","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-metasmk.framer.ai']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-10T18:12:28Z","labels":["malicious-activity","phishing","brand:metamask"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-metasmk.framer.ai"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aeeb226f-735c-548c-baa2-be314514c188","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T13:09:27Z","modified":"2026-01-02T13:09:27Z","name":"Phishing domain: access-mgnmt-portal.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/access-mgnmt-portal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-mgnmt-portal.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T13:09:27Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-mgnmt-portal.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--55fd5189-c3f6-5e53-8014-7cd5b54b2514","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:19Z","modified":"2026-02-26T23:23:19Z","name":"Phishing domain: access-mtamask-log.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/access-mtamask-log.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-mtamask-log.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:19Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-mtamask-log.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2c753af-aa60-58fd-b94b-88fa2bbe6cc8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-30T20:26:17Z","modified":"2026-04-30T20:26:17Z","name":"Phishing domain: access-nado.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/access-nado.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-nado.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-30T20:26:17Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-nado.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--32d11c0f-b9d8-5928-9ad9-d0c7289e9f4b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-18T15:35:06Z","modified":"2025-10-18T15:35:06Z","name":"Phishing domain: access-netcoiins-app-tn.square.site","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/access-netcoiins-app-tn.square.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-netcoiins-app-tn.square.site']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-18T15:35:06Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-netcoiins-app-tn.square.site"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a14379f-34af-5107-96e5-5f9a51b28b80","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-02T14:16:02Z","modified":"2026-06-02T14:16:02Z","name":"Phishing domain: access-okx.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating OKX. Report & evidence: https://phishdestroy.io/domain/access-okx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-okx.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-02T14:16:02Z","labels":["malicious-activity","phishing","brand:okx"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-okx.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6304ebf9-aa4e-57ae-b36c-11d9d41fd3ba","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T07:58:49Z","modified":"2026-02-13T07:58:49Z","name":"Phishing domain: access-ondo.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/access-ondo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-ondo.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T07:58:49Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-ondo.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffe16657-7618-5bd8-bc3f-af4c2ef08792","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T00:57:05Z","modified":"2026-02-13T00:57:05Z","name":"Phishing domain: access-ondo.finance","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/access-ondo.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-ondo.finance']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T00:57:05Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-ondo.finance"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff2e06ce-6136-52fa-8d6a-c6137bf3eb05","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:44Z","modified":"2026-02-26T23:20:44Z","name":"Phishing domain: access-opensee-login-en.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/access-opensee-login-en.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-opensee-login-en.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:44Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-opensee-login-en.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2ddd26c-460e-5e65-b732-0851d1fce322","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-21T18:11:49Z","modified":"2026-02-21T18:11:49Z","name":"Phishing domain: access-origindefi.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/access-origindefi.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-origindefi.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-21T18:11:49Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-origindefi.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f40aecf0-b95b-5a0c-b1b8-5efdeed267ea","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-16T18:50:21Z","modified":"2026-06-16T18:50:21Z","name":"Phishing domain: access-paybis-logiin-io-us.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/access-paybis-logiin-io-us.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-paybis-logiin-io-us.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-16T18:50:21Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-paybis-logiin-io-us.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f47a667-7e3d-5393-8cfd-3a882fb4d2f1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-06T19:43:02Z","modified":"2025-12-06T19:43:02Z","name":"Phishing domain: access-phantom-wallet.framer.ai","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Phantom. Report & evidence: https://phishdestroy.io/domain/access-phantom-wallet.framer.ai","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-phantom-wallet.framer.ai']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-06T19:43:02Z","labels":["malicious-activity","phishing","brand:phantom"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-phantom-wallet.framer.ai"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--54712df5-1048-5d0c-bfc2-11c6b714c99d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-06T19:42:54Z","modified":"2025-12-06T19:42:54Z","name":"Phishing domain: access-phntomwallet.framer.ai","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/access-phntomwallet.framer.ai","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-phntomwallet.framer.ai']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-06T19:42:54Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-phntomwallet.framer.ai"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bc97c0d-199f-5466-ac6c-bdab7031c06b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-07-12T20:26:34Z","modified":"2025-07-12T20:26:34Z","name":"Phishing domain: access-plasma.to","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/access-plasma.to","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-plasma.to']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-07-12T20:26:34Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-plasma.to"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--928cc1d4-3652-54d9-b781-340119091ac6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-08T20:20:05Z","modified":"2026-02-08T20:20:05Z","name":"Phishing domain: access-portal.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating slack. Report & evidence: https://phishdestroy.io/domain/access-portal.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-portal.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-08T20:20:05Z","labels":["malicious-activity","phishing","brand:slack"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-portal.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7f08968-c2ac-530e-9bfd-6cc491a5f47a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-20T15:24:22Z","modified":"2025-11-20T15:24:22Z","name":"Phishing domain: access-portals.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating cosmos. Report & evidence: https://phishdestroy.io/domain/access-portals.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-portals.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-20T15:24:22Z","labels":["malicious-activity","phishing","brand:cosmos"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-portals.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cea9e6fa-5314-542e-b243-1c8bff0c3ebe","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-16T17:58:28Z","modified":"2026-02-16T17:58:28Z","name":"Phishing domain: access-portalskr.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/access-portalskr.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-portalskr.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-16T17:58:28Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-portalskr.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3169c1e-52ef-51aa-a1c7-5d0ed5aa7b4d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:00Z","modified":"2026-02-26T23:21:00Z","name":"Phishing domain: access-pro-coinbselog.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/access-pro-coinbselog.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-pro-coinbselog.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:00Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-pro-coinbselog.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3093bc70-16ec-55ba-979a-f721eb16fdfb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:04Z","modified":"2026-02-26T23:22:04Z","name":"Phishing domain: access-rabby-wallet-en-us.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Rabby. Report & evidence: https://phishdestroy.io/domain/access-rabby-wallet-en-us.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-rabby-wallet-en-us.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:04Z","labels":["malicious-activity","phishing","brand:rabby"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-rabby-wallet-en-us.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5b8da5c-5f4d-5e02-a523-cba602c9ad2d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-03T13:56:00Z","modified":"2026-02-03T13:56:00Z","name":"Phishing domain: access-robinhood.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Robinhood. Report & evidence: https://phishdestroy.io/domain/access-robinhood.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-robinhood.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-03T13:56:00Z","labels":["malicious-activity","phishing","brand:robinhood"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-robinhood.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--986866b9-1e1b-5c59-9e2f-6df2e74a258d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-05T16:01:15Z","modified":"2025-12-05T16:01:15Z","name":"Phishing domain: access-secure-coin-pro.daftpage.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/access-secure-coin-pro.daftpage.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-secure-coin-pro.daftpage.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-05T16:01:15Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-secure-coin-pro.daftpage.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--662c30ac-cbbe-5b8a-9e3a-c7a2e949858c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-05T15:05:02Z","modified":"2025-12-05T15:05:02Z","name":"Phishing domain: access-secure-krakeen.daftpage.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Kraken. Report & evidence: https://phishdestroy.io/domain/access-secure-krakeen.daftpage.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-secure-krakeen.daftpage.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-05T15:05:02Z","labels":["malicious-activity","phishing","brand:kraken"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-secure-krakeen.daftpage.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d9bd39a-1f5c-579a-a8eb-a00266d8ba68","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-06T00:31:22Z","modified":"2025-12-06T00:31:22Z","name":"Phishing domain: access-secure-metamask.daftpage.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating MetaMask. Report & evidence: https://phishdestroy.io/domain/access-secure-metamask.daftpage.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-secure-metamask.daftpage.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-06T00:31:22Z","labels":["malicious-activity","phishing","brand:metamask"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-secure-metamask.daftpage.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--26126cb7-0848-50f0-952c-90f499b3fa57","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-24T16:27:59Z","modified":"2026-01-24T16:27:59Z","name":"Phishing domain: access-secure.top","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/access-secure.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-secure.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-24T16:27:59Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-secure.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d3622ca-432f-5bb4-8df0-483fb347d8e0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:25Z","modified":"2026-02-26T23:21:25Z","name":"Phishing domain: access-slush-walet.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/access-slush-walet.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-slush-walet.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:25Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-slush-walet.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--436b60ac-012f-5d16-8192-1877d805dd5d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-27T00:39:25Z","modified":"2026-03-27T00:39:25Z","name":"Phishing domain: access-stable.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/access-stable.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-stable.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-27T00:39:25Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-stable.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--51d4dda5-f34c-552e-8b41-9d5de9f7c767","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T10:40:09Z","modified":"2026-02-13T10:40:09Z","name":"Phishing domain: access-stable.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/access-stable.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-stable.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T10:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-stable.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--447e22d1-8c1a-57ba-8bef-af433af85876","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-28T12:18:06Z","modified":"2026-06-28T12:18:06Z","name":"Phishing domain: access-startt-trezr-en.typedream.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Trezor. Report & evidence: https://phishdestroy.io/domain/access-startt-trezr-en.typedream.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-startt-trezr-en.typedream.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-28T12:18:06Z","labels":["malicious-activity","phishing","brand:trezor"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-startt-trezr-en.typedream.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fe3d8ff-fab2-53cf-a08b-de5e1b61f44c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-24T16:28:10Z","modified":"2026-01-24T16:28:10Z","name":"Phishing domain: access-steam.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Steam. Report & evidence: https://phishdestroy.io/domain/access-steam.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-steam.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-24T16:28:10Z","labels":["malicious-activity","phishing","brand:steam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-steam.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--699809f4-99a8-5f92-9349-624df5aed1c4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-07-15T10:33:35Z","modified":"2025-07-15T10:33:35Z","name":"Phishing domain: access-stockwiz.icu","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/access-stockwiz.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-stockwiz.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-07-15T10:33:35Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-stockwiz.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--392d73c3-a71f-5d93-a39c-759379f6494f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:32Z","modified":"2026-02-26T23:19:32Z","name":"Phishing domain: access-sui-walet.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Sui. Report & evidence: https://phishdestroy.io/domain/access-sui-walet.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-sui-walet.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:32Z","labels":["malicious-activity","phishing","brand:sui"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-sui-walet.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9badb502-36c7-5d1a-867f-8fe952d79fbb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-01T12:36:26Z","modified":"2025-12-01T12:36:26Z","name":"Phishing domain: access-sui-wallet-us.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Sui. Report & evidence: https://phishdestroy.io/domain/access-sui-wallet-us.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-sui-wallet-us.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-01T12:36:26Z","labels":["malicious-activity","phishing","brand:sui"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-sui-wallet-us.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--48da4b1c-2123-5226-9f7a-48345689195d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-16T16:28:43Z","modified":"2026-02-16T16:28:43Z","name":"Phishing domain: access-swap-raydium.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/access-swap-raydium.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-swap-raydium.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-16T16:28:43Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-swap-raydium.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--be0959e1-a503-5fc1-9273-fdf29230e7f8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-28T17:32:51Z","modified":"2026-04-28T17:32:51Z","name":"Phishing domain: access-tpp.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating PayPal. Report & evidence: https://phishdestroy.io/domain/access-tpp.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-tpp.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-28T17:32:51Z","labels":["malicious-activity","phishing","brand:paypal"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-tpp.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--73d9a9a0-eead-5e0c-a163-0ea44dea5cf2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:58Z","modified":"2026-02-26T23:22:58Z","name":"Phishing domain: access-trade.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/access-trade.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-trade.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:58Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-trade.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6758d0fd-4049-5f4f-939b-5fc10a5ed079","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-04T03:43:33Z","modified":"2025-11-04T03:43:33Z","name":"Phishing domain: access-trade.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating metamask. Report & evidence: https://phishdestroy.io/domain/access-trade.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-trade.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-04T03:43:33Z","labels":["malicious-activity","phishing","brand:metamask"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-trade.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f757203-480b-5646-97f3-7959c82a6d92","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-21T10:53:04Z","modified":"2026-06-21T10:53:04Z","name":"Phishing domain: access-trazore.framer.ai","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Sui. Report & evidence: https://phishdestroy.io/domain/access-trazore.framer.ai","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-trazore.framer.ai']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-21T10:53:04Z","labels":["malicious-activity","phishing","brand:sui"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-trazore.framer.ai"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c30a20bc-6b8c-5638-9c21-c797cbc04c39","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-26T10:45:23Z","modified":"2026-06-26T10:45:23Z","name":"Phishing domain: access-trez-suit--en.framer.ai","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Trezor. Report & evidence: https://phishdestroy.io/domain/access-trez-suit--en.framer.ai","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-trez-suit--en.framer.ai']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-26T10:45:23Z","labels":["malicious-activity","phishing","brand:trezor"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-trez-suit--en.framer.ai"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4d2e1d4-adcc-5838-a581-9be329bca110","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-29T16:34:49Z","modified":"2026-06-29T16:34:49Z","name":"Phishing domain: access-trezor-login-sso.typedream.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Trezor. Report & evidence: https://phishdestroy.io/domain/access-trezor-login-sso.typedream.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-trezor-login-sso.typedream.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-29T16:34:49Z","labels":["malicious-activity","phishing","brand:trezor"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-trezor-login-sso.typedream.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dab873d5-f7bf-5e14-8852-d47cad90a0ef","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-29T16:38:45Z","modified":"2026-06-29T16:38:45Z","name":"Phishing domain: access-trezr-io-login.typedream.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Trezor. Report & evidence: https://phishdestroy.io/domain/access-trezr-io-login.typedream.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-trezr-io-login.typedream.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-29T16:38:45Z","labels":["malicious-activity","phishing","brand:trezor"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-trezr-io-login.typedream.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfff84c3-de7d-5e72-8b50-eecc38678a1c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T19:59:08Z","modified":"2026-08-10T19:59:08Z","name":"Phishing domain: access-trezrwalite-en.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/access-trezrwalite-en.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-trezrwalite-en.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T19:59:08Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-trezrwalite-en.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3324e04b-545f-55b3-aa38-2ed2307943d0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:23Z","modified":"2026-02-26T23:19:23Z","name":"Phishing domain: access-un-us-coinbase.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/access-un-us-coinbase.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-un-us-coinbase.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:23Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-un-us-coinbase.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa88d46c-7e03-5e05-adb6-b345f9f19701","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:53Z","modified":"2026-02-26T23:21:53Z","name":"Phishing domain: access-uphald-logoo.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/access-uphald-logoo.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-uphald-logoo.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:53Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-uphald-logoo.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a19b8e33-cb19-5f19-b0e2-fe6a23ba222c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-29T14:58:40Z","modified":"2026-07-29T14:58:40Z","name":"Phishing domain: access-uphelp-loggin.zapier.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating [\"google\"]. Report & evidence: https://phishdestroy.io/domain/access-uphelp-loggin.zapier.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-uphelp-loggin.zapier.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-29T14:58:40Z","labels":["malicious-activity","phishing","brand:[\"google\"]"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-uphelp-loggin.zapier.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--34b04e60-0c19-5bfe-94fc-bc677cdd52d0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:11Z","modified":"2026-02-26T23:24:11Z","name":"Phishing domain: access-uphold--us.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/access-uphold--us.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-uphold--us.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:11Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-uphold--us.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c7314f0-fb38-5e28-823e-0003de9e7ed6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:22Z","modified":"2026-02-26T23:20:22Z","name":"Phishing domain: access-uphold-secure-login.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/access-uphold-secure-login.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-uphold-secure-login.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:22Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-uphold-secure-login.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--062bd790-13f9-5616-9726-dfec594b1c9d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:56Z","modified":"2026-02-26T23:19:56Z","name":"Phishing domain: access-uphold-ui.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/access-uphold-ui.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-uphold-ui.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:56Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-uphold-ui.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a6ffdba-6e9d-5d6e-82e6-9b5178354192","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:29Z","modified":"2026-02-26T23:19:29Z","name":"Phishing domain: access-uphold-wallet.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/access-uphold-wallet.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-uphold-wallet.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:29Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-uphold-wallet.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0800070-ef11-51a0-944b-bf34d87418f0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: access-uphold.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/access-uphold.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-uphold.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-uphold.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--31407a39-47a3-5579-9864-ad3c69f82683","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:41Z","modified":"2026-02-26T23:20:41Z","name":"Phishing domain: access-upholld-us.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/access-upholld-us.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-upholld-us.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:41Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-upholld-us.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--45737771-d996-5a6d-958c-70d828ce2631","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:04Z","modified":"2026-02-26T23:23:04Z","name":"Phishing domain: access-upholx-wellt-ens.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/access-upholx-wellt-ens.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-upholx-wellt-ens.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:04Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-upholx-wellt-ens.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e8f903b-13d7-514f-aa03-8d518f9720a4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-10T16:41:20Z","modified":"2026-02-10T16:41:20Z","name":"Phishing domain: access-upzeld-ask-may-logiin.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Uphold. Report & evidence: https://phishdestroy.io/domain/access-upzeld-ask-may-logiin.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-upzeld-ask-may-logiin.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-10T16:41:20Z","labels":["malicious-activity","phishing","brand:uphold"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-upzeld-ask-may-logiin.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d712f74-568a-55cb-abad-cb3274a40ccc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T19:59:07Z","modified":"2026-08-10T19:59:07Z","name":"Phishing domain: access-us-ledger.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/access-us-ledger.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-us-ledger.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T19:59:07Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-us-ledger.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b6dc742-ef69-5cb5-adf2-5eeb1d95e63e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-18T15:09:11Z","modified":"2026-02-18T15:09:11Z","name":"Phishing domain: access-vault-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/access-vault-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-vault-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-18T15:09:11Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-vault-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fbba300-999f-5d28-bbb7-c148d988ef58","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:09Z","modified":"2026-02-26T23:20:09Z","name":"Phishing domain: access-wallets-uphelded-gets.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/access-wallets-uphelded-gets.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-wallets-uphelded-gets.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:09Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-wallets-uphelded-gets.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--84f39a1b-807a-59ef-adde-c1191d7b6233","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-26T10:37:58Z","modified":"2026-01-26T10:37:58Z","name":"Phishing domain: access-web-auth-097.live","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/access-web-auth-097.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-web-auth-097.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-26T10:37:58Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-web-auth-097.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0853e4e2-3ad8-58b0-8caf-2d59e4e6e3f6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-03T16:08:59Z","modified":"2026-04-03T16:08:59Z","name":"Phishing domain: access-web-cloud-abxttx.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/access-web-cloud-abxttx.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-web-cloud-abxttx.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-03T16:08:59Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-web-cloud-abxttx.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d73de788-5136-5360-988d-dd19cf63bdea","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-12T08:38:43Z","modified":"2026-08-12T08:38:43Z","name":"Phishing domain: access-xrp.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/access-xrp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-xrp.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-12T08:38:43Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-xrp.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--391229cf-476b-5f4d-aa78-b1cd038121b4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-24T17:02:15Z","modified":"2026-02-24T17:02:15Z","name":"Phishing domain: access-yield.online","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/access-yield.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access-yield.online']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-24T17:02:15Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access-yield.online"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--33b961f7-6770-56f8-84ef-ec24e53a7680","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-23T04:18:14Z","modified":"2026-02-23T04:18:14Z","name":"Phishing domain: access.block-nexo.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Nexo. Report & evidence: https://phishdestroy.io/domain/access.block-nexo.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access.block-nexo.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-23T04:18:14Z","labels":["malicious-activity","phishing","brand:nexo"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access.block-nexo.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--045c4dd0-1907-509f-9552-524920b38c79","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-18T16:24:42Z","modified":"2025-10-18T16:24:42Z","name":"Phishing domain: access.brevisgrounds.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/access.brevisgrounds.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access.brevisgrounds.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-18T16:24:42Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access.brevisgrounds.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9131add-2332-585c-98c3-fe8ef6bd1513","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-16T19:50:55Z","modified":"2026-04-16T19:50:55Z","name":"Phishing domain: access.captcha.surf","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating [\"telegram\"]. Report & evidence: https://phishdestroy.io/domain/access.captcha.surf","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access.captcha.surf']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-16T19:50:55Z","labels":["malicious-activity","phishing","brand:[\"telegram\"]"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access.captcha.surf"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d45b92cc-0190-55b2-8ace-434141cbeb0a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-25T15:23:32Z","modified":"2026-04-25T15:23:32Z","name":"Phishing domain: access.credit-agency-meta.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating facebook. Report & evidence: https://phishdestroy.io/domain/access.credit-agency-meta.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access.credit-agency-meta.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-25T15:23:32Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access.credit-agency-meta.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--53bbe367-c318-5196-b7f9-8972d43bb871","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:52Z","modified":"2026-02-26T23:21:52Z","name":"Phishing domain: access.dege-token.fun","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/access.dege-token.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access.dege-token.fun']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:52Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access.dege-token.fun"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d565004-7652-5042-a1b7-aacb415951ce","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:58Z","modified":"2026-02-26T23:21:58Z","name":"Phishing domain: access.degetoken.fun","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/access.degetoken.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access.degetoken.fun']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:58Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access.degetoken.fun"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--274a183d-4bb1-5515-a6fb-958984b0c91b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-03T08:29:56Z","modified":"2026-08-03T08:29:56Z","name":"Phishing domain: access.drug-hub-marketplace.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/access.drug-hub-marketplace.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access.drug-hub-marketplace.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-03T08:29:56Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access.drug-hub-marketplace.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--16e264c1-b4cd-5360-b239-1d53d4fb0c37","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-17T18:13:06Z","modified":"2026-02-17T18:13:06Z","name":"Phishing domain: access.nexo-chain.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Nexo. Report & evidence: https://phishdestroy.io/domain/access.nexo-chain.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access.nexo-chain.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-17T18:13:06Z","labels":["malicious-activity","phishing","brand:nexo"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access.nexo-chain.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bccd7824-f202-535b-abbc-6e5d0d9331c5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-24T02:59:12Z","modified":"2026-01-24T02:59:12Z","name":"Phishing domain: access.pengu-dapp.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/access.pengu-dapp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access.pengu-dapp.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-24T02:59:12Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access.pengu-dapp.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b65ceec0-92bb-5be6-8197-9ff6f10a8d85","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:20Z","modified":"2026-02-26T23:24:20Z","name":"Phishing domain: access.psyopcoin.fun","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/access.psyopcoin.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access.psyopcoin.fun']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:20Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access.psyopcoin.fun"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9612a6c0-9764-5bd5-b10d-40fd7153d668","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-19T15:12:27Z","modified":"2026-02-19T15:12:27Z","name":"Phishing domain: access.rricrosoft-office.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/access.rricrosoft-office.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access.rricrosoft-office.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-19T15:12:27Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access.rricrosoft-office.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--082d0455-7fbc-58e5-967c-f47903c4cd87","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-08T19:45:45Z","modified":"2026-06-08T19:45:45Z","name":"Phishing domain: access.trzn-market-link.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/access.trzn-market-link.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access.trzn-market-link.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-08T19:45:45Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access.trzn-market-link.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ae55ca2-fc0a-578f-8fbf-fa9ea75227f9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:34Z","modified":"2026-02-26T23:22:34Z","name":"Phishing domain: access.westgoldbnk.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericbanking. Report & evidence: https://phishdestroy.io/domain/access.westgoldbnk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access.westgoldbnk.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:34Z","labels":["malicious-activity","phishing","brand:genericbanking"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access.westgoldbnk.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4346232-c766-506f-94cd-2c8994652bf7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-30T15:28:11Z","modified":"2026-01-30T15:28:11Z","name":"Phishing domain: access.wolfsmetals.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Microsoft. Report & evidence: https://phishdestroy.io/domain/access.wolfsmetals.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access.wolfsmetals.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-30T15:28:11Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access.wolfsmetals.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4a9025c-9ed9-5cda-8a97-79bc99bd57ca","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-17T08:52:25Z","modified":"2025-09-17T08:52:25Z","name":"Phishing domain: access.worldlibertyfinence.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Jupiter. Report & evidence: https://phishdestroy.io/domain/access.worldlibertyfinence.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access.worldlibertyfinence.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-17T08:52:25Z","labels":["malicious-activity","phishing","brand:jupiter"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access.worldlibertyfinence.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1df8367a-53f8-546d-816e-a231d0a40bae","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2024-03-23T17:13:40Z","modified":"2024-03-23T17:13:40Z","name":"Phishing domain: access0eggy.world","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/access0eggy.world","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'access0eggy.world']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2024-03-23T17:13:40Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/access0eggy.world"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dcb28cd-cc51-58a7-9c63-e7921d49363c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T09:34:50Z","modified":"2026-07-27T09:34:50Z","name":"Phishing domain: accessbankuk.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating cryptoscam. Report & evidence: https://phishdestroy.io/domain/accessbankuk.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessbankuk.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T09:34:50Z","labels":["malicious-activity","phishing","brand:cryptoscam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accessbankuk.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4dea6425-5bfb-59c8-91f2-3a4a8332c79f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-28T12:57:15Z","modified":"2026-06-28T12:57:15Z","name":"Phishing domain: accessbitpandaweb.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/accessbitpandaweb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessbitpandaweb.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-28T12:57:15Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accessbitpandaweb.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e70bc1fb-baf6-543b-bce5-6844666fa5f8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T05:05:14Z","modified":"2026-07-27T05:05:14Z","name":"Phishing domain: accessblockwave.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/accessblockwave.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessblockwave.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T05:05:14Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accessblockwave.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--66513990-d15e-592c-8e94-86d9b9f6ea16","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:06Z","modified":"2026-02-26T23:20:06Z","name":"Phishing domain: accesscheck.fun","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating revolut. Report & evidence: https://phishdestroy.io/domain/accesscheck.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accesscheck.fun']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:06Z","labels":["malicious-activity","phishing","brand:revolut"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accesscheck.fun"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--01f8dcab-0b07-5957-8037-75bc081f592d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:48Z","modified":"2026-02-26T23:19:48Z","name":"Phishing domain: accessclaim.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/accessclaim.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessclaim.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:48Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accessclaim.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dada2b00-4f95-5254-9e90-87c4712cc09c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-13T03:22:09Z","modified":"2026-03-13T03:22:09Z","name":"Phishing domain: accesscontrolemailtermiantionnotice.weebly.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/accesscontrolemailtermiantionnotice.weebly.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accesscontrolemailtermiantionnotice.weebly.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-13T03:22:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accesscontrolemailtermiantionnotice.weebly.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a086c6f6-abd9-5831-a829-439ebbd4b1ae","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-22T03:38:37Z","modified":"2026-03-22T03:38:37Z","name":"Phishing domain: accessdappsnode.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/accessdappsnode.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessdappsnode.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-22T03:38:37Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accessdappsnode.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--52c9b026-1c2d-5994-8cd4-36c0f774eca6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-26T04:30:35Z","modified":"2026-01-26T04:30:35Z","name":"Phishing domain: accesses-x.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Twitter/X. Report & evidence: https://phishdestroy.io/domain/accesses-x.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accesses-x.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-26T04:30:35Z","labels":["malicious-activity","phishing","brand:twitter/x"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accesses-x.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--58545b11-ed08-5b0a-9ff2-c83b3ef25d0d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:52:45Z","modified":"2026-07-27T04:52:45Z","name":"Phishing domain: accessfortune.live","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Base. Report & evidence: https://phishdestroy.io/domain/accessfortune.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessfortune.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:52:45Z","labels":["malicious-activity","phishing","brand:base"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accessfortune.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f017a5ba-f71a-50bc-a7a3-b5562e037a21","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-07T15:54:02Z","modified":"2025-09-07T15:54:02Z","name":"Phishing domain: accessgeoenergy.com.ng","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/accessgeoenergy.com.ng","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessgeoenergy.com.ng']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-07T15:54:02Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accessgeoenergy.com.ng"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--09907d77-7a86-5d63-ac4c-ce507cfe0ab1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:50:18Z","modified":"2026-07-27T04:50:18Z","name":"Phishing domain: accessglobaltrades.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericscam. Report & evidence: https://phishdestroy.io/domain/accessglobaltrades.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessglobaltrades.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:50:18Z","labels":["malicious-activity","phishing","brand:genericscam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accessglobaltrades.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e175155-9425-5f43-9f7d-f07bff1dbb9e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-08T14:42:00Z","modified":"2026-07-08T14:42:00Z","name":"Phishing domain: accessharedpointui.cloud-ip.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Apple. Report & evidence: https://phishdestroy.io/domain/accessharedpointui.cloud-ip.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessharedpointui.cloud-ip.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-08T14:42:00Z","labels":["malicious-activity","phishing","brand:apple"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accessharedpointui.cloud-ip.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--19a771cc-dc8c-542a-82ad-d7a40507bf5c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-23T12:15:43Z","modified":"2025-10-23T12:15:43Z","name":"Phishing domain: accessionoxdg.wpdevcloud.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating wordpress. Report & evidence: https://phishdestroy.io/domain/accessionoxdg.wpdevcloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessionoxdg.wpdevcloud.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-23T12:15:43Z","labels":["malicious-activity","phishing","brand:wordpress"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accessionoxdg.wpdevcloud.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--97b33104-e50c-5f32-947f-0a3a9f4aa74b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-14T04:21:16Z","modified":"2025-11-14T04:21:16Z","name":"Phishing domain: accessmetaiopage.pineapple.page","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Apple. Report & evidence: https://phishdestroy.io/domain/accessmetaiopage.pineapple.page","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessmetaiopage.pineapple.page']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-14T04:21:16Z","labels":["malicious-activity","phishing","brand:apple"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accessmetaiopage.pineapple.page"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--66514e01-fb39-5061-9fc8-c8235d6abab1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-09T01:56:18Z","modified":"2026-06-09T01:56:18Z","name":"Phishing domain: accessminigcoin.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/accessminigcoin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessminigcoin.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-09T01:56:18Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accessminigcoin.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--03ba7ef7-143a-531b-a993-4f9da7fe789b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-08T04:07:01Z","modified":"2025-08-08T04:07:01Z","name":"Phishing domain: accessmorefinance.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/accessmorefinance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessmorefinance.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-08T04:07:01Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accessmorefinance.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--69dbf7bc-06e2-5578-81a5-9f42dccbb9f6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-06T04:16:04Z","modified":"2025-08-06T04:16:04Z","name":"Phishing domain: accessmoreinvestment.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating compound. Report & evidence: https://phishdestroy.io/domain/accessmoreinvestment.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessmoreinvestment.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-06T04:16:04Z","labels":["malicious-activity","phishing","brand:compound"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accessmoreinvestment.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e293e1b-7049-57be-be8c-a73a1527237b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-30T04:54:51Z","modified":"2026-03-30T04:54:51Z","name":"Phishing domain: accessnodes.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/accessnodes.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessnodes.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-30T04:54:51Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accessnodes.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--505df4b4-2824-5a8c-a9db-458af9ae0add","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-16T17:53:16Z","modified":"2026-04-16T17:53:16Z","name":"Phishing domain: accessnodess.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/accessnodess.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessnodess.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-16T17:53:16Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accessnodess.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ca3ebf0-05e8-53e9-ab38-032e3aa9e8aa","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-03T09:36:29Z","modified":"2026-03-03T09:36:29Z","name":"Phishing domain: accessopenseamints10.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating OpenSea. Report & evidence: https://phishdestroy.io/domain/accessopenseamints10.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessopenseamints10.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-03T09:36:29Z","labels":["malicious-activity","phishing","brand:opensea"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accessopenseamints10.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--566f58fe-76a7-5368-b0bf-f5a29f37d3c3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-03T09:34:55Z","modified":"2026-03-03T09:34:55Z","name":"Phishing domain: accessopenseamints2.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating OpenSea. Report & evidence: https://phishdestroy.io/domain/accessopenseamints2.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessopenseamints2.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-03T09:34:55Z","labels":["malicious-activity","phishing","brand:opensea"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accessopenseamints2.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a72dc97-60dc-5f12-ab7c-670ace7f4929","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-03T09:36:15Z","modified":"2026-03-03T09:36:15Z","name":"Phishing domain: accessopenseamints3.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating OpenSea. Report & evidence: https://phishdestroy.io/domain/accessopenseamints3.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessopenseamints3.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-03T09:36:15Z","labels":["malicious-activity","phishing","brand:opensea"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accessopenseamints3.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff674e42-905a-5a8c-88ad-edd262d02f18","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-03T09:34:52Z","modified":"2026-03-03T09:34:52Z","name":"Phishing domain: accessopenseamints4.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating OpenSea. Report & evidence: https://phishdestroy.io/domain/accessopenseamints4.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessopenseamints4.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-03T09:34:52Z","labels":["malicious-activity","phishing","brand:opensea"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accessopenseamints4.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--77b2f22e-b7a9-5af0-a95b-f786f76659a9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-03T09:35:01Z","modified":"2026-03-03T09:35:01Z","name":"Phishing domain: accessopenseamints5.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating OpenSea. Report & evidence: https://phishdestroy.io/domain/accessopenseamints5.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessopenseamints5.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-03T09:35:01Z","labels":["malicious-activity","phishing","brand:opensea"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accessopenseamints5.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d0f94ce-dc59-5a08-bc46-af64447d0ac2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-03T09:35:19Z","modified":"2026-03-03T09:35:19Z","name":"Phishing domain: accessopenseamints6.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating OpenSea. Report & evidence: https://phishdestroy.io/domain/accessopenseamints6.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessopenseamints6.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-03T09:35:19Z","labels":["malicious-activity","phishing","brand:opensea"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accessopenseamints6.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e57b5103-08d4-55fc-b7f2-655a0a8a73c7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-03T09:36:19Z","modified":"2026-03-03T09:36:19Z","name":"Phishing domain: accessopenseamints7.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating OpenSea. Report & evidence: https://phishdestroy.io/domain/accessopenseamints7.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessopenseamints7.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-03T09:36:19Z","labels":["malicious-activity","phishing","brand:opensea"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accessopenseamints7.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a65800b1-9579-50f9-92dd-6338deac4041","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-03T09:35:18Z","modified":"2026-03-03T09:35:18Z","name":"Phishing domain: accessopenseamints8.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating OpenSea. Report & evidence: https://phishdestroy.io/domain/accessopenseamints8.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessopenseamints8.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-03T09:35:18Z","labels":["malicious-activity","phishing","brand:opensea"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accessopenseamints8.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c29b08ca-8080-5007-a81c-df278c7aa76e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-03T09:35:26Z","modified":"2026-03-03T09:35:26Z","name":"Phishing domain: accessopenseamints9.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating OpenSea. Report & evidence: https://phishdestroy.io/domain/accessopenseamints9.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessopenseamints9.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-03T09:35:26Z","labels":["malicious-activity","phishing","brand:opensea"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accessopenseamints9.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c02e3b50-bf03-53a3-97c4-a986a2fe79a9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-05T15:54:17Z","modified":"2026-03-05T15:54:17Z","name":"Phishing domain: accesspay.com.ng","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/accesspay.com.ng","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accesspay.com.ng']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-05T15:54:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accesspay.com.ng"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--163d318f-89eb-50aa-9258-286a2430b7e4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:53:38Z","modified":"2026-07-27T04:53:38Z","name":"Phishing domain: accesspaygainmining.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/accesspaygainmining.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accesspaygainmining.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:53:38Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accesspaygainmining.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d92350dd-82be-5eb5-a77d-1e4b1f0f237e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-25T22:49:34Z","modified":"2026-02-25T22:49:34Z","name":"Phishing domain: accessportal.group","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating microsoft. Report & evidence: https://phishdestroy.io/domain/accessportal.group","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessportal.group']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-25T22:49:34Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accessportal.group"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--01b05467-f0a8-5817-9a48-65eecbdfaca7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-10T15:02:52Z","modified":"2026-03-10T15:02:52Z","name":"Phishing domain: accessportals.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/accessportals.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessportals.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-10T15:02:52Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accessportals.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--246903ec-d09c-57ca-a8cf-d53b90fab581","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-23T18:14:38Z","modified":"2026-02-23T18:14:38Z","name":"Phishing domain: accesspostal.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating [\"google\"]. Report & evidence: https://phishdestroy.io/domain/accesspostal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accesspostal.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-23T18:14:38Z","labels":["malicious-activity","phishing","brand:[\"google\"]"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accesspostal.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d397a83d-b97f-50c6-b33a-9e5256042e20","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:57:20Z","modified":"2026-07-27T04:57:20Z","name":"Phishing domain: accessprofit-broker.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/accessprofit-broker.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessprofit-broker.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:57:20Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accessprofit-broker.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbd3075e-42c3-516a-a1e0-fae12313c3c2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:57Z","modified":"2026-02-26T23:23:57Z","name":"Phishing domain: accessrevoke1.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating discord. Report & evidence: https://phishdestroy.io/domain/accessrevoke1.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessrevoke1.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:57Z","labels":["malicious-activity","phishing","brand:discord"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accessrevoke1.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--af8c75ce-e938-5589-a8c3-1ffb9a245e36","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:36Z","modified":"2026-02-26T23:21:36Z","name":"Phishing domain: accessrevoke3.vercel.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/accessrevoke3.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessrevoke3.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:36Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accessrevoke3.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa627910-f1d9-5d53-949b-a71b5977ea5c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:40Z","modified":"2026-02-26T23:19:40Z","name":"Phishing domain: accessrevoke4.vercel.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/accessrevoke4.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessrevoke4.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:40Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accessrevoke4.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5de90cc-f439-590a-953a-0b956fc3067f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:43Z","modified":"2026-02-26T23:20:43Z","name":"Phishing domain: accessrevoke5.vercel.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/accessrevoke5.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessrevoke5.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:43Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accessrevoke5.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7187d2eb-685d-50d7-a716-3baa1165cf95","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-07T15:16:47Z","modified":"2025-12-07T15:16:47Z","name":"Phishing domain: accesss-rabbywallet--askk.framer.media","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Rabby. Report & evidence: https://phishdestroy.io/domain/accesss-rabbywallet--askk.framer.media","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accesss-rabbywallet--askk.framer.media']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-07T15:16:47Z","labels":["malicious-activity","phishing","brand:rabby"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accesss-rabbywallet--askk.framer.media"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--946e4f38-5a75-5b72-ae17-244177791311","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-25T07:36:57Z","modified":"2026-07-25T07:36:57Z","name":"Phishing domain: accesss-rewards.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/accesss-rewards.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accesss-rewards.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-25T07:36:57Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accesss-rewards.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c1cebd2-95e8-5038-915e-caffe597d083","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:49Z","modified":"2026-02-26T23:22:49Z","name":"Phishing domain: accessstockcapital.com.tsmvaultsqfs.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/accessstockcapital.com.tsmvaultsqfs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessstockcapital.com.tsmvaultsqfs.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:49Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accessstockcapital.com.tsmvaultsqfs.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7700033d-be47-5f90-aab6-f9602b476f89","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-05T08:23:08Z","modified":"2025-10-05T08:23:08Z","name":"Phishing domain: accesstruistcu.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/accesstruistcu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accesstruistcu.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-05T08:23:08Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accesstruistcu.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ca64d70-27d9-593e-a11a-4f4d3b293806","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:14Z","modified":"2026-02-26T23:22:14Z","name":"Phishing domain: accesstrustbnk.com.premiumroyaltrustb.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/accesstrustbnk.com.premiumroyaltrustb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accesstrustbnk.com.premiumroyaltrustb.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:14Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accesstrustbnk.com.premiumroyaltrustb.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--190881ef-acf1-565d-810d-5ebaa6989177","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:02Z","modified":"2026-02-26T23:21:02Z","name":"Phishing domain: accesstrustfunds.com.quantprovest.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/accesstrustfunds.com.quantprovest.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accesstrustfunds.com.quantprovest.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:02Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accesstrustfunds.com.quantprovest.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--74476c0a-f3d7-5442-a6ee-f47463b17e7c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:48Z","modified":"2026-02-26T23:22:48Z","name":"Phishing domain: accessvalidator.site","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/accessvalidator.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessvalidator.site']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:48Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accessvalidator.site"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--01f3222c-4daa-53fc-88f7-fe3e0616dd4d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-11T05:54:52Z","modified":"2026-02-11T05:54:52Z","name":"Phishing domain: accessverify.pro","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating avalanche. Report & evidence: https://phishdestroy.io/domain/accessverify.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessverify.pro']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-11T05:54:52Z","labels":["malicious-activity","phishing","brand:avalanche"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accessverify.pro"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--11fd9251-3c37-5189-bca2-6a93953ebd8a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-08T04:06:42Z","modified":"2025-08-08T04:06:42Z","name":"Phishing domain: accesswealthtrade.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating foundation. Report & evidence: https://phishdestroy.io/domain/accesswealthtrade.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accesswealthtrade.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-08T04:06:42Z","labels":["malicious-activity","phishing","brand:foundation"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accesswealthtrade.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d28f6ca4-0a91-50d2-818d-a54fcd959eea","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-22T15:51:15Z","modified":"2026-04-22T15:51:15Z","name":"Phishing domain: accessworldledgers.online","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/accessworldledgers.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accessworldledgers.online']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-22T15:51:15Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accessworldledgers.online"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa441db2-80a6-58b7-a187-72f5ea117173","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-27T06:16:38Z","modified":"2026-02-27T06:16:38Z","name":"Phishing domain: accesszoom.online","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating [\"wordpress\"]. Report & evidence: https://phishdestroy.io/domain/accesszoom.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accesszoom.online']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-27T06:16:38Z","labels":["malicious-activity","phishing","brand:[\"wordpress\"]"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accesszoom.online"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4ddff69-968f-5f61-b7a9-721e1e799348","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-12T12:52:04Z","modified":"2025-10-12T12:52:04Z","name":"Phishing domain: accgn.club","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/accgn.club","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accgn.club']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-12T12:52:04Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accgn.club"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab7d5f5c-e6c1-5310-b28f-1da9d6156749","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-03T23:47:45Z","modified":"2025-08-03T23:47:45Z","name":"Phishing domain: accioali.vip","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating x.com. Report & evidence: https://phishdestroy.io/domain/accioali.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accioali.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-03T23:47:45Z","labels":["malicious-activity","phishing","brand:x.com"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accioali.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac034105-2aee-5dd9-92cb-9e5f406193cd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-07T15:49:40Z","modified":"2026-07-07T15:49:40Z","name":"Phishing domain: accion-inmediata--aviso-urgente.replit.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating microsoft. Report & evidence: https://phishdestroy.io/domain/accion-inmediata--aviso-urgente.replit.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accion-inmediata--aviso-urgente.replit.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-07T15:49:40Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accion-inmediata--aviso-urgente.replit.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1aa95f6-d6e8-50b6-8d87-4919f6a4c04e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:54:57Z","modified":"2026-07-27T04:54:57Z","name":"Phishing domain: accmfx.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/accmfx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accmfx.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:54:57Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accmfx.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d66e4ffa-ca02-5383-81cd-75ffaeafc77e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-05T18:40:10Z","modified":"2026-08-05T18:40:10Z","name":"Phishing domain: accnest.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/accnest.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accnest.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-05T18:40:10Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accnest.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fb017d4-04b7-5dd4-bae6-f040a6ccc8d5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-11T04:47:28Z","modified":"2026-03-11T04:47:28Z","name":"Phishing domain: accnetrades.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating google. Report & evidence: https://phishdestroy.io/domain/accnetrades.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accnetrades.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-11T04:47:28Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accnetrades.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff80d924-7b49-52a7-8a3e-6c7cf74e752e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-23T17:25:16Z","modified":"2026-03-23T17:25:16Z","name":"Phishing domain: accntshop.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating roblox. Report & evidence: https://phishdestroy.io/domain/accntshop.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accntshop.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-23T17:25:16Z","labels":["malicious-activity","phishing","brand:roblox"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accntshop.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e38b817-e4cb-5803-962e-05ca19d455c6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-03T06:06:12Z","modified":"2026-04-03T06:06:12Z","name":"Phishing domain: accordung-dydeexx-tradee.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/accordung-dydeexx-tradee.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accordung-dydeexx-tradee.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-03T06:06:12Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accordung-dydeexx-tradee.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d276c2c8-84d8-52ce-ab49-c794e6328f9a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-03T03:21:06Z","modified":"2026-03-03T03:21:06Z","name":"Phishing domain: account-alert-center-243.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating facebook. Report & evidence: https://phishdestroy.io/domain/account-alert-center-243.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-alert-center-243.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-03T03:21:06Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account-alert-center-243.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--37b47f61-add1-5af8-9be3-17de267fdb66","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-20T10:00:17Z","modified":"2025-12-20T10:00:17Z","name":"Phishing domain: account-amex.mannafound.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/account-amex.mannafound.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-amex.mannafound.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-20T10:00:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account-amex.mannafound.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c494661c-0193-56fb-a81b-543ccfbb1d24","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-27T16:55:47Z","modified":"2026-02-27T16:55:47Z","name":"Phishing domain: account-apple.eu","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Apple. Report & evidence: https://phishdestroy.io/domain/account-apple.eu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-apple.eu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-27T16:55:47Z","labels":["malicious-activity","phishing","brand:apple"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account-apple.eu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f22302ec-e0b3-5543-91d2-60a31a8b6149","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-04T02:58:30Z","modified":"2026-08-04T02:58:30Z","name":"Phishing domain: account-att-com-17bd1d.webflow.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/account-att-com-17bd1d.webflow.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-att-com-17bd1d.webflow.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-04T02:58:30Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account-att-com-17bd1d.webflow.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8dbfe4d4-bfef-504e-9539-663b5c45612c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-07T10:44:36Z","modified":"2026-08-07T10:44:36Z","name":"Phishing domain: account-att-com-4899ac.webflow.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/account-att-com-4899ac.webflow.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-att-com-4899ac.webflow.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-07T10:44:36Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account-att-com-4899ac.webflow.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--42fc30d6-bdb3-5d2b-9837-4bc39aba7a45","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-05T11:51:09Z","modified":"2026-08-05T11:51:09Z","name":"Phishing domain: account-att-com-6fee3b.webflow.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/account-att-com-6fee3b.webflow.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-att-com-6fee3b.webflow.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-05T11:51:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account-att-com-6fee3b.webflow.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b47645a-6df2-5162-b4b9-b5bf3e2afe58","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-12T15:30:46Z","modified":"2026-08-12T15:30:46Z","name":"Phishing domain: account-att-com-9161be.webflow.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/account-att-com-9161be.webflow.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-att-com-9161be.webflow.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-12T15:30:46Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account-att-com-9161be.webflow.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8cf8568-5538-5944-abcf-bcde26a59238","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-07T15:22:57Z","modified":"2026-08-07T15:22:57Z","name":"Phishing domain: account-att-com-b94bef.webflow.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/account-att-com-b94bef.webflow.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-att-com-b94bef.webflow.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-07T15:22:57Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account-att-com-b94bef.webflow.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e70eced3-1d80-5439-ad6b-ca97f88459a3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-12T02:12:50Z","modified":"2025-12-12T02:12:50Z","name":"Phishing domain: account-authenticator.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/account-authenticator.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-authenticator.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-12T02:12:50Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account-authenticator.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a0342f0-c3c5-52b4-9f45-202baf2a8c67","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-07T21:22:53Z","modified":"2026-03-07T21:22:53Z","name":"Phishing domain: account-base.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/account-base.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-base.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-07T21:22:53Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account-base.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e8ab367-2820-518b-84b5-6e57204e15fe","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-23T12:23:26Z","modified":"2025-12-23T12:23:26Z","name":"Phishing domain: account-basseswap-dex-io.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating base. Report & evidence: https://phishdestroy.io/domain/account-basseswap-dex-io.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-basseswap-dex-io.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-23T12:23:26Z","labels":["malicious-activity","phishing","brand:base"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account-basseswap-dex-io.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--11fdd2a4-d016-5864-8690-198db52a72c9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-23T03:09:38Z","modified":"2026-04-23T03:09:38Z","name":"Phishing domain: account-block-center.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Microsoft. Report & evidence: https://phishdestroy.io/domain/account-block-center.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-block-center.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-23T03:09:38Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account-block-center.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--74cfb083-ace9-5c96-894f-36ddd92309bc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-18T20:43:25Z","modified":"2026-02-18T20:43:25Z","name":"Phishing domain: account-btcc.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/account-btcc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-btcc.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-18T20:43:25Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account-btcc.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b0a42c6-1914-502d-b14e-337c83cd490b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-23T03:13:40Z","modified":"2026-04-23T03:13:40Z","name":"Phishing domain: account-case-center.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/account-case-center.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-case-center.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-23T03:13:40Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account-case-center.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6687237d-3faa-53b8-8357-9eea0411e7f8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-03T03:25:26Z","modified":"2026-03-03T03:25:26Z","name":"Phishing domain: account-check-center.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating facebook. Report & evidence: https://phishdestroy.io/domain/account-check-center.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-check-center.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-03T03:25:26Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account-check-center.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f732a06b-9aab-59fb-b713-c73ff2202c56","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-10T18:11:11Z","modified":"2025-12-10T18:11:11Z","name":"Phishing domain: account-coinbas.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/account-coinbas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-coinbas.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-10T18:11:11Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account-coinbas.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a0dc3ea-700c-59dd-b11e-8fc5f33d0f49","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-09T02:23:17Z","modified":"2026-07-09T02:23:17Z","name":"Phishing domain: account-com.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/account-com.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-com.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-09T02:23:17Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account-com.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--be45f06a-f387-5dd2-a86b-b01102f33bb8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-23T03:13:47Z","modified":"2026-04-23T03:13:47Z","name":"Phishing domain: account-compliance-center.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/account-compliance-center.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-compliance-center.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-23T03:13:47Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account-compliance-center.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c47bf340-e9c5-58c0-acea-348288c620c4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-24T22:31:36Z","modified":"2026-03-24T22:31:36Z","name":"Phishing domain: account-confirmation.help","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/account-confirmation.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-confirmation.help']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-24T22:31:36Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account-confirmation.help"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--19786b85-e655-5103-bd90-d386b04c4325","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:20Z","modified":"2026-02-26T23:24:20Z","name":"Phishing domain: account-defi-balencerr.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating balancer. Report & evidence: https://phishdestroy.io/domain/account-defi-balencerr.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-defi-balencerr.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:20Z","labels":["malicious-activity","phishing","brand:balancer"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account-defi-balencerr.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9eeb4d9-dd20-50fa-86c4-3cbb4dc62219","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T06:45:54Z","modified":"2026-06-15T06:45:54Z","name":"Phishing domain: account-details.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/account-details.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-details.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T06:45:54Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account-details.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2568c7d4-0967-525d-8ed5-dc974d49d19c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-03T03:24:42Z","modified":"2026-03-03T03:24:42Z","name":"Phishing domain: account-ethics-center.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating facebook. Report & evidence: https://phishdestroy.io/domain/account-ethics-center.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-ethics-center.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-03T03:24:42Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account-ethics-center.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5646dca5-e466-5b4c-9326-2ddb6bb6a746","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-08T11:23:32Z","modified":"2026-05-08T11:23:32Z","name":"Phishing domain: account-facebook.invoice-ads-program.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Facebook. Report & evidence: https://phishdestroy.io/domain/account-facebook.invoice-ads-program.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-facebook.invoice-ads-program.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-08T11:23:32Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account-facebook.invoice-ads-program.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--893f0ec1-aebf-53dc-827d-91742cf6d64b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-16T16:34:16Z","modified":"2026-02-16T16:34:16Z","name":"Phishing domain: account-iive.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/account-iive.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-iive.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-16T16:34:16Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account-iive.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca00695f-c98f-5f5a-ad0e-210fde565e03","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:31Z","modified":"2026-02-26T23:22:31Z","name":"Phishing domain: account-krakeen-io.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/account-krakeen-io.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-krakeen-io.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:31Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account-krakeen-io.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--96d694e3-cb40-5c82-a2f5-c04480bfa556","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T19:59:04Z","modified":"2026-08-10T19:59:04Z","name":"Phishing domain: account-ledgr-start.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/account-ledgr-start.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-ledgr-start.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T19:59:04Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account-ledgr-start.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b183d891-0565-56c1-8d5f-69ac2d405437","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-25T14:13:16Z","modified":"2026-06-25T14:13:16Z","name":"Phishing domain: account-membership.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Netflix. Report & evidence: https://phishdestroy.io/domain/account-membership.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-membership.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-25T14:13:16Z","labels":["malicious-activity","phishing","brand:netflix"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account-membership.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f326c92-82b9-5cb5-9818-fd48b0ec5112","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-26T04:32:37Z","modified":"2026-01-26T04:32:37Z","name":"Phishing domain: account-mexxc.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating MEXC. Report & evidence: https://phishdestroy.io/domain/account-mexxc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-mexxc.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-26T04:32:37Z","labels":["malicious-activity","phishing","brand:mexc"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account-mexxc.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aedecd32-c2f4-5c1b-b20c-6f952205ae4d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-01T03:14:37Z","modified":"2026-04-01T03:14:37Z","name":"Phishing domain: account-micro-soft.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Microsoft. Report & evidence: https://phishdestroy.io/domain/account-micro-soft.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-micro-soft.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-01T03:14:37Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account-micro-soft.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--efe2b00c-da71-5ace-9cd2-6e32b11a9d35","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-20T17:46:24Z","modified":"2026-07-20T17:46:24Z","name":"Phishing domain: account-minecraft.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Microsoft. Report & evidence: https://phishdestroy.io/domain/account-minecraft.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-minecraft.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-20T17:46:24Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account-minecraft.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a3d9ead-11e5-5286-8452-36b2acc24d78","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-08T14:48:21Z","modified":"2026-03-08T14:48:21Z","name":"Phishing domain: account-mysecure.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/account-mysecure.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-mysecure.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-08T14:48:21Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account-mysecure.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--59496d75-5492-5e52-b1e7-450a3cae71d6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-18T20:43:30Z","modified":"2026-02-18T20:43:30Z","name":"Phishing domain: account-ndaxx.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ndax. Report & evidence: https://phishdestroy.io/domain/account-ndaxx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-ndaxx.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-18T20:43:30Z","labels":["malicious-activity","phishing","brand:ndax"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account-ndaxx.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--257df993-774c-55f7-82ec-8c3f0da80b87","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:11Z","modified":"2026-02-26T23:22:11Z","name":"Phishing domain: account-opensee-logix.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/account-opensee-logix.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-opensee-logix.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:11Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account-opensee-logix.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b880cfbd-8772-59cf-b893-b48fb282b252","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-08T18:31:37Z","modified":"2026-06-08T18:31:37Z","name":"Phishing domain: account-pionex.wixstudio.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/account-pionex.wixstudio.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-pionex.wixstudio.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-08T18:31:37Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account-pionex.wixstudio.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6309df6c-6970-5f4c-a9c6-9f58d5f18fca","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-23T15:52:27Z","modified":"2026-01-23T15:52:27Z","name":"Phishing domain: account-portal-renew.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/account-portal-renew.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-portal-renew.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-23T15:52:27Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account-portal-renew.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dabf6730-852f-5c89-8df2-08db5c9d5ea7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-11T06:09:49Z","modified":"2026-03-11T06:09:49Z","name":"Phishing domain: account-rayyidum-swap.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating ledger. Report & evidence: https://phishdestroy.io/domain/account-rayyidum-swap.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-rayyidum-swap.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-11T06:09:49Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account-rayyidum-swap.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b552f7e-1a3e-5e13-84e7-278ef1c4b9bc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-18T19:39:04Z","modified":"2026-03-18T19:39:04Z","name":"Phishing domain: account-reactivate.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aliexpress. Report & evidence: https://phishdestroy.io/domain/account-reactivate.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-reactivate.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-18T19:39:04Z","labels":["malicious-activity","phishing","brand:aliexpress"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account-reactivate.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--07e50d64-1c6f-5131-9527-48c463b59916","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-23T03:17:18Z","modified":"2026-04-23T03:17:18Z","name":"Phishing domain: account-recovery-center.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/account-recovery-center.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-recovery-center.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-23T03:17:18Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account-recovery-center.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--282e2baf-4346-534b-bdfd-7cbbc1d1a05e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-22T15:52:05Z","modified":"2026-03-22T15:52:05Z","name":"Phishing domain: account-recovery-process-google.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/account-recovery-process-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-recovery-process-google.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-22T15:52:05Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account-recovery-process-google.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0fd9268-af42-5311-bf2c-b4857cf96de4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-18T18:06:00Z","modified":"2026-02-18T18:06:00Z","name":"Phishing domain: account-robinhood.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Robinhood. Report & evidence: https://phishdestroy.io/domain/account-robinhood.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-robinhood.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-18T18:06:00Z","labels":["malicious-activity","phishing","brand:robinhood"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account-robinhood.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2e2d2d6-18c2-5cee-a5cf-19a8844d8a82","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-22T23:43:07Z","modified":"2026-07-22T23:43:07Z","name":"Phishing domain: account-sams-club.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/account-sams-club.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-sams-club.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-22T23:43:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account-sams-club.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a16c16a-128e-5500-96c2-53497de1c271","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-04T16:43:33Z","modified":"2026-03-04T16:43:33Z","name":"Phishing domain: account-secure-6685.weebly.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/account-secure-6685.weebly.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-secure-6685.weebly.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-04T16:43:33Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account-secure-6685.weebly.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4166341f-2bb1-5e60-a258-9551fd4aea7f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: account-secure-portal.cloud","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/account-secure-portal.cloud","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-secure-portal.cloud']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account-secure-portal.cloud"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d865eda4-f6f4-5f42-9dfd-96d293fe33b4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-26T10:35:01Z","modified":"2026-01-26T10:35:01Z","name":"Phishing domain: account-secure-portal.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/account-secure-portal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-secure-portal.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-26T10:35:01Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account-secure-portal.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--666313e9-7dbb-57e2-bd8a-b00895b23c65","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-03T13:46:33Z","modified":"2026-07-03T13:46:33Z","name":"Phishing domain: account-seguridadsantander.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/account-seguridadsantander.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-seguridadsantander.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-03T13:46:33Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account-seguridadsantander.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--620981a6-36b0-577a-99a5-794b9fad082c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-23T03:14:00Z","modified":"2026-04-23T03:14:00Z","name":"Phishing domain: account-standards-center.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/account-standards-center.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-standards-center.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-23T03:14:00Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account-standards-center.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a14d9296-ce0b-57e5-80e0-5bdbc6502779","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-03T03:23:21Z","modified":"2026-03-03T03:23:21Z","name":"Phishing domain: account-status-center.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating facebook. Report & evidence: https://phishdestroy.io/domain/account-status-center.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-status-center.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-03T03:23:21Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account-status-center.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--12dfa8de-94c4-56b3-a01d-4938e9a7fb60","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-24T13:19:12Z","modified":"2026-03-24T13:19:12Z","name":"Phishing domain: account-support-service.us","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating apple. Report & evidence: https://phishdestroy.io/domain/account-support-service.us","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-support-service.us']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-24T13:19:12Z","labels":["malicious-activity","phishing","brand:apple"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account-support-service.us"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--17070433-45e5-5449-8000-badf50bfd16a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-03T03:27:12Z","modified":"2026-03-03T03:27:12Z","name":"Phishing domain: account-suspension-center.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating facebook. Report & evidence: https://phishdestroy.io/domain/account-suspension-center.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-suspension-center.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-03T03:27:12Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account-suspension-center.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--39c371bd-ceba-5957-931e-ec2fb9038e72","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-18T17:58:21Z","modified":"2026-04-18T17:58:21Z","name":"Phishing domain: account-traade-sushiiswap.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating SushiSwap. Report & evidence: https://phishdestroy.io/domain/account-traade-sushiiswap.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-traade-sushiiswap.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-18T17:58:21Z","labels":["malicious-activity","phishing","brand:sushiswap"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account-traade-sushiiswap.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4aeecf61-4017-5c06-81b5-5a9194041ee9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-03T03:30:14Z","modified":"2026-03-03T03:30:14Z","name":"Phishing domain: account-trust-center.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating facebook. Report & evidence: https://phishdestroy.io/domain/account-trust-center.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-trust-center.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-03T03:30:14Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account-trust-center.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a0d33f2-91a1-55bf-a11f-97193605f674","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-06T13:00:14Z","modified":"2026-03-06T13:00:14Z","name":"Phishing domain: account-trustwallet.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Trust Wallet. Report & evidence: https://phishdestroy.io/domain/account-trustwallet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-trustwallet.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-06T13:00:14Z","labels":["malicious-activity","phishing","brand:trust wallet"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account-trustwallet.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b017e0f6-e9db-5dba-a0c3-1682ed950707","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:28Z","modified":"2026-02-26T23:21:28Z","name":"Phishing domain: account-upholdd-eng-io.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/account-upholdd-eng-io.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-upholdd-eng-io.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:28Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account-upholdd-eng-io.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--663a1de1-78d3-5d4e-9d94-c7fc3c9f0dd7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-11T02:34:31Z","modified":"2026-06-11T02:34:31Z","name":"Phishing domain: account-verification-1wy.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/account-verification-1wy.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-verification-1wy.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-11T02:34:31Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account-verification-1wy.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--59163cd1-ece0-53f5-b521-05a6fd0b9790","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-09T08:48:51Z","modified":"2026-04-09T08:48:51Z","name":"Phishing domain: account-walleet-aave.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/account-walleet-aave.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-walleet-aave.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-09T08:48:51Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account-walleet-aave.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4182c14a-8cae-55bc-be77-cf73035dc085","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-16T16:40:04Z","modified":"2026-02-16T16:40:04Z","name":"Phishing domain: account-wallet-connect.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Robinhood. Report & evidence: https://phishdestroy.io/domain/account-wallet-connect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-wallet-connect.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-16T16:40:04Z","labels":["malicious-activity","phishing","brand:robinhood"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account-wallet-connect.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3df1d6ed-698c-5425-bc9e-a734a17df74b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-08T15:33:29Z","modified":"2026-04-08T15:33:29Z","name":"Phishing domain: account-weallet-verrtex.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/account-weallet-verrtex.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-weallet-verrtex.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-08T15:33:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account-weallet-verrtex.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--31e6fe66-4dd4-5640-8d5f-eaa5128e60dc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T14:14:16Z","modified":"2026-02-13T14:14:16Z","name":"Phishing domain: account-yandex.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/account-yandex.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account-yandex.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T14:14:16Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account-yandex.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6dfae81f-0379-5a23-bcb5-2da8be291d52","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-22T03:14:54Z","modified":"2026-03-22T03:14:54Z","name":"Phishing domain: account.ads-program-agency.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating facebook. Report & evidence: https://phishdestroy.io/domain/account.ads-program-agency.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account.ads-program-agency.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-22T03:14:54Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account.ads-program-agency.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d92155fb-094c-5c0e-93d1-93b62d5ccae5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-19T08:00:58Z","modified":"2025-10-19T08:00:58Z","name":"Phishing domain: account.alpenncapital.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/account.alpenncapital.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account.alpenncapital.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-19T08:00:58Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account.alpenncapital.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ddcf26f-fcbd-5698-8c6e-26310a94fb27","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-27T22:43:56Z","modified":"2026-03-27T22:43:56Z","name":"Phishing domain: account.animus.store","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/account.animus.store","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account.animus.store']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-27T22:43:56Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account.animus.store"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--10d6f164-4fdf-55b8-a07c-4aec8e5e6497","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-17T16:03:32Z","modified":"2026-05-17T16:03:32Z","name":"Phishing domain: account.apexfutureswealth.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/account.apexfutureswealth.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account.apexfutureswealth.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-17T16:03:32Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account.apexfutureswealth.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--65cd4e68-3ed4-592f-a946-3f4ba9ad8037","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-10T20:00:43Z","modified":"2025-10-10T20:00:43Z","name":"Phishing domain: account.bancosabali.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/account.bancosabali.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account.bancosabali.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-10T20:00:43Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account.bancosabali.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--46f201ed-fd44-5aff-bfa9-73d4040761e2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T07:02:12Z","modified":"2026-07-27T07:02:12Z","name":"Phishing domain: account.bdftradeoptions.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/account.bdftradeoptions.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account.bdftradeoptions.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T07:02:12Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account.bdftradeoptions.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8daf69ac-e02e-5435-945e-7730cba5afa9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-23T13:01:22Z","modified":"2025-09-23T13:01:22Z","name":"Phishing domain: account.capitalearners.us","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/account.capitalearners.us","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account.capitalearners.us']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-23T13:01:22Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account.capitalearners.us"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f20fe0e-ab0c-5c29-974a-5393abb2dd3b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-14T15:43:24Z","modified":"2025-11-14T15:43:24Z","name":"Phishing domain: account.coinbase.lo-g.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/account.coinbase.lo-g.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account.coinbase.lo-g.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-14T15:43:24Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account.coinbase.lo-g.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbb6e2b1-d28a-5ddd-9dfa-22f96e748c3d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-23T13:05:05Z","modified":"2025-09-23T13:05:05Z","name":"Phishing domain: account.coinexess.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/account.coinexess.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account.coinexess.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-23T13:05:05Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account.coinexess.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f6e9756-d424-5698-929b-2959816a7b07","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: account.comunicazioni-sicure.it","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/account.comunicazioni-sicure.it","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account.comunicazioni-sicure.it']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account.comunicazioni-sicure.it"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6bcd2b0-bc62-5703-8149-0d6447d13db2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-19T08:07:23Z","modified":"2025-10-19T08:07:23Z","name":"Phishing domain: account.cryptbase.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/account.cryptbase.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account.cryptbase.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-19T08:07:23Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account.cryptbase.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0571f196-1114-5f3b-9305-eeaa2df14b52","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:46Z","modified":"2026-02-26T23:24:46Z","name":"Phishing domain: account.crystalbk.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/account.crystalbk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account.crystalbk.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:46Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account.crystalbk.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7964fa23-7a8e-50f4-a2cf-cf2608c0ef58","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-10T04:40:08Z","modified":"2025-09-10T04:40:08Z","name":"Phishing domain: account.daysofsummer.fi","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/account.daysofsummer.fi","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account.daysofsummer.fi']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-10T04:40:08Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account.daysofsummer.fi"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--27aeb353-e7e3-5b0d-acd4-5479f6e68aba","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-28T12:17:44Z","modified":"2025-10-28T12:17:44Z","name":"Phishing domain: account.dropcloud.it","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating phishingtest. Report & evidence: https://phishdestroy.io/domain/account.dropcloud.it","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account.dropcloud.it']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-28T12:17:44Z","labels":["malicious-activity","phishing","brand:phishingtest"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account.dropcloud.it"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dc6a13b-05d3-5283-b6ac-1e37dc7a8cb7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-23T13:06:12Z","modified":"2025-09-23T13:06:12Z","name":"Phishing domain: account.elitebytehosting.com.ng","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/account.elitebytehosting.com.ng","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account.elitebytehosting.com.ng']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-23T13:06:12Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account.elitebytehosting.com.ng"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--28e8c98d-4295-5507-bee2-f1b78fdd3d30","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-23T13:05:43Z","modified":"2025-09-23T13:05:43Z","name":"Phishing domain: account.exactionsltd.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/account.exactionsltd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account.exactionsltd.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-23T13:05:43Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account.exactionsltd.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--09053894-f426-5223-878b-a5aa0cb95c92","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:02Z","modified":"2026-02-26T23:21:02Z","name":"Phishing domain: account.ftdropsnetworks.live","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/account.ftdropsnetworks.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account.ftdropsnetworks.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:02Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account.ftdropsnetworks.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--49368b5a-508d-5b93-98f3-71c0cc196df3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-08T04:08:15Z","modified":"2025-08-08T04:08:15Z","name":"Phishing domain: account.grandassetbk.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/account.grandassetbk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account.grandassetbk.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-08T04:08:15Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account.grandassetbk.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe250ffe-ceaf-5e3c-8328-f0bf4a692581","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-12T23:56:03Z","modified":"2025-10-12T23:56:03Z","name":"Phishing domain: account.identifications-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/account.identifications-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account.identifications-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-12T23:56:03Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account.identifications-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2e02ceb-6526-5e0e-92a4-7730d2425832","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-23T15:46:17Z","modified":"2026-01-23T15:46:17Z","name":"Phishing domain: account.login.userverifylogin.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Microsoft. Report & evidence: https://phishdestroy.io/domain/account.login.userverifylogin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account.login.userverifylogin.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-23T15:46:17Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account.login.userverifylogin.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b961941c-4e35-59a5-868a-76d8dac783b8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T18:40:07Z","modified":"2026-08-09T18:40:07Z","name":"Phishing domain: account.lsemt5.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/account.lsemt5.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account.lsemt5.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T18:40:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account.lsemt5.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bd2c3b8-d584-5764-bc9a-c14b075e6855","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-08T08:05:29Z","modified":"2026-08-08T08:05:29Z","name":"Phishing domain: account.metadao-dex.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/account.metadao-dex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account.metadao-dex.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-08T08:05:29Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account.metadao-dex.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--39a43ad2-6650-525e-8f43-deaed18751e3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-23T12:51:25Z","modified":"2025-09-23T12:51:25Z","name":"Phishing domain: account.motradefinance.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Apple. Report & evidence: https://phishdestroy.io/domain/account.motradefinance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account.motradefinance.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-23T12:51:25Z","labels":["malicious-activity","phishing","brand:apple"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account.motradefinance.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--909884e6-581b-548b-b84c-8af77b182441","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-17T03:41:07Z","modified":"2026-07-17T03:41:07Z","name":"Phishing domain: account.msauth.live","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Microsoft. Report & evidence: https://phishdestroy.io/domain/account.msauth.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account.msauth.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-17T03:41:07Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account.msauth.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f52aff4a-8f81-57ec-8127-086122b2a21d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-11T06:30:02Z","modified":"2026-03-11T06:30:02Z","name":"Phishing domain: account.osrforum.it","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating argent. Report & evidence: https://phishdestroy.io/domain/account.osrforum.it","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account.osrforum.it']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-11T06:30:02Z","labels":["malicious-activity","phishing","brand:argent"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account.osrforum.it"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d40f543-3a21-51ef-93d1-c5ab1eb40ed9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-20T15:12:47Z","modified":"2026-04-20T15:12:47Z","name":"Phishing domain: account.partneragencyportal.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating facebook. Report & evidence: https://phishdestroy.io/domain/account.partneragencyportal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account.partneragencyportal.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-20T15:12:47Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account.partneragencyportal.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--26a24fe9-3e3c-5513-97be-550edbc4cb18","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-22T16:07:39Z","modified":"2026-07-22T16:07:39Z","name":"Phishing domain: account.pokeliquid.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/account.pokeliquid.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account.pokeliquid.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-22T16:07:39Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account.pokeliquid.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--37b776da-f66e-56af-b6ad-56001ffd6e78","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-23T13:01:16Z","modified":"2025-09-23T13:01:16Z","name":"Phishing domain: account.primefinancialbank.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/account.primefinancialbank.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account.primefinancialbank.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-23T13:01:16Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account.primefinancialbank.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e1cd96b-5362-5d98-91e6-09059b9baa30","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-23T13:03:49Z","modified":"2025-09-23T13:03:49Z","name":"Phishing domain: account.profitscoreltd.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/account.profitscoreltd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account.profitscoreltd.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-23T13:03:49Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account.profitscoreltd.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ebfb0af-7039-5dda-b9d3-cdd017766832","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-17T16:05:55Z","modified":"2026-05-17T16:05:55Z","name":"Phishing domain: account.quantumfinancialsystemledger.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/account.quantumfinancialsystemledger.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account.quantumfinancialsystemledger.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-17T16:05:55Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account.quantumfinancialsystemledger.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d8b34c9-b386-5275-b3ff-c0b3acea4d53","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-07T16:33:35Z","modified":"2025-08-07T16:33:35Z","name":"Phishing domain: account.regaltrustfb.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/account.regaltrustfb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account.regaltrustfb.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-07T16:33:35Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account.regaltrustfb.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b410ef2f-9114-51b5-9a43-a7db355d527d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T06:41:07Z","modified":"2026-06-15T06:41:07Z","name":"Phishing domain: account.remote-otp.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/account.remote-otp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account.remote-otp.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T06:41:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account.remote-otp.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f4f9e78-afbe-5995-8067-757138d8d596","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-28T12:20:42Z","modified":"2025-09-28T12:20:42Z","name":"Phishing domain: account.renalliancecapital.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/account.renalliancecapital.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account.renalliancecapital.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-28T12:20:42Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account.renalliancecapital.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0c24d90-5f58-5493-af82-d4b3aa38153b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-09T18:21:38Z","modified":"2025-08-09T18:21:38Z","name":"Phishing domain: account.sentineledgesb.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/account.sentineledgesb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account.sentineledgesb.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-09T18:21:38Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account.sentineledgesb.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--47d40a29-1db1-5b6e-9a4e-f783e50aa14a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:20Z","modified":"2026-02-26T23:19:20Z","name":"Phishing domain: account.serenitysafe.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/account.serenitysafe.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account.serenitysafe.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:20Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account.serenitysafe.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b24e8d7-5b7d-5657-a8c0-0470f59d459c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-23T13:01:32Z","modified":"2025-09-23T13:01:32Z","name":"Phishing domain: account.softcredit.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/account.softcredit.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account.softcredit.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-23T13:01:32Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account.softcredit.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--847c8072-bfaa-5bf3-8253-99a58f0da3ae","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-29T09:47:44Z","modified":"2025-11-29T09:47:44Z","name":"Phishing domain: account.starbasefinancebanking.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/account.starbasefinancebanking.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account.starbasefinancebanking.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-29T09:47:44Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account.starbasefinancebanking.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9acc4e7e-5400-58dc-ba8a-ce4416c7bed0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-07T15:54:01Z","modified":"2025-09-07T15:54:01Z","name":"Phishing domain: account.sterlfb.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/account.sterlfb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account.sterlfb.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-07T15:54:01Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account.sterlfb.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2469a154-7eeb-5941-8cfb-30349c58d842","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-05T21:30:17Z","modified":"2025-11-05T21:30:17Z","name":"Phishing domain: account.teslastockcryptoinvestment.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating cryptoscam. Report & evidence: https://phishdestroy.io/domain/account.teslastockcryptoinvestment.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account.teslastockcryptoinvestment.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-05T21:30:17Z","labels":["malicious-activity","phishing","brand:cryptoscam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account.teslastockcryptoinvestment.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--38ffa6a5-67b5-5330-acf7-375d70ff9388","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-07T16:34:09Z","modified":"2025-08-07T16:34:09Z","name":"Phishing domain: account.teslastocks-inc.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/account.teslastocks-inc.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account.teslastocks-inc.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-07T16:34:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account.teslastocks-inc.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e6a401a-906a-5a0c-ab16-f7d0f0fa3b65","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-12T00:21:11Z","modified":"2025-08-12T00:21:11Z","name":"Phishing domain: account.transmonie.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/account.transmonie.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account.transmonie.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-12T00:21:11Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account.transmonie.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8afa9ebb-dfe8-5a42-9fb0-abea6e9093ec","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:19Z","modified":"2026-02-26T23:22:19Z","name":"Phishing domain: account.trustlinkbk.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating [\"across\"]. Report & evidence: https://phishdestroy.io/domain/account.trustlinkbk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account.trustlinkbk.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:19Z","labels":["malicious-activity","phishing","brand:[\"across\"]"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account.trustlinkbk.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea28bac2-6aa6-5c4b-b298-751b3fb394ae","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-10T11:31:13Z","modified":"2025-09-10T11:31:13Z","name":"Phishing domain: account.unlimitedflavacustoms.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/account.unlimitedflavacustoms.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account.unlimitedflavacustoms.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-10T11:31:13Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account.unlimitedflavacustoms.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8754b845-fa2e-58b8-a3fc-23fa71f4cc23","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-16T17:15:23Z","modified":"2026-03-16T17:15:23Z","name":"Phishing domain: account.vertexglobalnetworks.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating binance. Report & evidence: https://phishdestroy.io/domain/account.vertexglobalnetworks.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account.vertexglobalnetworks.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-16T17:15:23Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account.vertexglobalnetworks.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e5b951c-7727-5a75-b9ba-cf0dcd4b2ef4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-19T08:07:37Z","modified":"2025-10-19T08:07:37Z","name":"Phishing domain: account.wealth-net.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/account.wealth-net.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account.wealth-net.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-19T08:07:37Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account.wealth-net.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a8cd5ba-1fb2-52dd-a6ae-7bd8c931412a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T06:26:57Z","modified":"2026-06-15T06:26:57Z","name":"Phishing domain: account.websecqfs-system.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/account.websecqfs-system.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account.websecqfs-system.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T06:26:57Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account.websecqfs-system.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1876515-fb48-552a-8a7c-c9c782af05eb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-18T09:41:23Z","modified":"2025-09-18T09:41:23Z","name":"Phishing domain: account.wintessb.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/account.wintessb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account.wintessb.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-18T09:41:23Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account.wintessb.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0600c11-37a3-5d87-aa5a-54f1f9ef06ad","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-20T21:48:47Z","modified":"2026-03-20T21:48:47Z","name":"Phishing domain: account.xion-trader.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/account.xion-trader.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account.xion-trader.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-20T21:48:47Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account.xion-trader.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--760e88f1-995f-516b-a3fd-6358b43241d6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-05T18:40:10Z","modified":"2026-08-05T18:40:10Z","name":"Phishing domain: account.yellowcardsbock.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/account.yellowcardsbock.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'account.yellowcardsbock.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-05T18:40:10Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/account.yellowcardsbock.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ef2ab0f-e12a-5241-aff9-ce0b7fea87bf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-01T21:34:30Z","modified":"2026-03-01T21:34:30Z","name":"Phishing domain: accountableai.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/accountableai.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountableai.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-01T21:34:30Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accountableai.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f246138-a988-5653-a0d5-fad051444554","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-07T18:19:47Z","modified":"2026-08-07T18:19:47Z","name":"Phishing domain: accountant-8ledger.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/accountant-8ledger.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountant-8ledger.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-07T18:19:47Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accountant-8ledger.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--262221a5-fd15-5937-a8ce-c8bc7d4fcf02","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-12T02:12:39Z","modified":"2025-12-12T02:12:39Z","name":"Phishing domain: accountauthenticator.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating amex. Report & evidence: https://phishdestroy.io/domain/accountauthenticator.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountauthenticator.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-12T02:12:39Z","labels":["malicious-activity","phishing","brand:amex"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accountauthenticator.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b9be79f-7dfb-5b3c-baf7-1bb8fc120ecc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-25T09:41:10Z","modified":"2025-12-25T09:41:10Z","name":"Phishing domain: accountbase.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating base. Report & evidence: https://phishdestroy.io/domain/accountbase.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountbase.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-25T09:41:10Z","labels":["malicious-activity","phishing","brand:base"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accountbase.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf476dc4-47a5-5d17-9341-31212ce09535","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-29T15:13:13Z","modified":"2025-11-29T15:13:13Z","name":"Phishing domain: accountcenter-breachguard-fds410vc.netlify.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/accountcenter-breachguard-fds410vc.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountcenter-breachguard-fds410vc.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-29T15:13:13Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accountcenter-breachguard-fds410vc.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--02fc12ed-5028-585c-81c7-3c7d8c23dc8c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-29T15:13:09Z","modified":"2025-11-29T15:13:09Z","name":"Phishing domain: accountcenter-docuplexa-dsa1509xz.netlify.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/accountcenter-docuplexa-dsa1509xz.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountcenter-docuplexa-dsa1509xz.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-29T15:13:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accountcenter-docuplexa-dsa1509xz.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fd83e31-aac4-5645-b64e-86901f62aa3f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-29T15:12:47Z","modified":"2025-11-29T15:12:47Z","name":"Phishing domain: accountcenter-lawsector-brr11x10brq.netlify.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Amazon. Report & evidence: https://phishdestroy.io/domain/accountcenter-lawsector-brr11x10brq.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountcenter-lawsector-brr11x10brq.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-29T15:12:47Z","labels":["malicious-activity","phishing","brand:amazon"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accountcenter-lawsector-brr11x10brq.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--97aed269-05da-567f-987f-6993102e6e50","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-16T15:01:50Z","modified":"2025-10-16T15:01:50Z","name":"Phishing domain: accountcenter-lawtarian-net11x10bnr.netlify.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/accountcenter-lawtarian-net11x10bnr.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountcenter-lawtarian-net11x10bnr.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-16T15:01:50Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accountcenter-lawtarian-net11x10bnr.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--87ab5edc-00ad-5fbd-8c34-60d2d528b2de","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-29T15:11:04Z","modified":"2025-11-29T15:11:04Z","name":"Phishing domain: accountcenter-reviewtask-fds101v0c.netlify.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/accountcenter-reviewtask-fds101v0c.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountcenter-reviewtask-fds101v0c.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-29T15:11:04Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accountcenter-reviewtask-fds101v0c.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d30fa9f-a0e9-50ac-b50e-04f77bf11c1b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-28T18:48:29Z","modified":"2026-07-28T18:48:29Z","name":"Phishing domain: accountfacebook.blogspot.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Facebook. Report & evidence: https://phishdestroy.io/domain/accountfacebook.blogspot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountfacebook.blogspot.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-28T18:48:29Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accountfacebook.blogspot.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--70033c42-3c5a-52c6-80f4-50b6399cbbb3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-10T14:36:44Z","modified":"2026-07-10T14:36:44Z","name":"Phishing domain: accountgetfacebook.blogspot.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Facebook. Report & evidence: https://phishdestroy.io/domain/accountgetfacebook.blogspot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountgetfacebook.blogspot.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-10T14:36:44Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accountgetfacebook.blogspot.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d54bdbff-dcfe-5164-9693-dab20d75bab2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:58Z","modified":"2026-02-26T23:23:58Z","name":"Phishing domain: accounting.aetbaseniorproducts.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/accounting.aetbaseniorproducts.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounting.aetbaseniorproducts.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:58Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accounting.aetbaseniorproducts.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e52ad064-9e13-575d-8800-327c75a224ec","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T15:15:44Z","modified":"2026-02-13T15:15:44Z","name":"Phishing domain: accountrecover-google.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/accountrecover-google.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountrecover-google.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T15:15:44Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accountrecover-google.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--891c8208-0ba0-5c4d-81fc-b995cf8f0ce8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-14T02:46:06Z","modified":"2025-09-14T02:46:06Z","name":"Phishing domain: accountrestore-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/accountrestore-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountrestore-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-14T02:46:06Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accountrestore-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0df604de-824e-551c-ace4-2ad25de46993","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-09T04:01:31Z","modified":"2026-04-09T04:01:31Z","name":"Phishing domain: accountrestore.live","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/accountrestore.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountrestore.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-09T04:01:31Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accountrestore.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f1ae12d-0d78-50c9-a2c7-3e9134dd7a29","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-11T18:30:03Z","modified":"2026-03-11T18:30:03Z","name":"Phishing domain: accounts-25355.bubbleapps.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/accounts-25355.bubbleapps.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts-25355.bubbleapps.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-11T18:30:03Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accounts-25355.bubbleapps.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--38491ce4-aaf0-5b47-b859-fcdd4f47d017","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-10T18:05:19Z","modified":"2026-03-10T18:05:19Z","name":"Phishing domain: accounts-coinbase.com.komidi.id","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/accounts-coinbase.com.komidi.id","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts-coinbase.com.komidi.id']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-10T18:05:19Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accounts-coinbase.com.komidi.id"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fb96bfa-ea8d-547c-97b8-f8dc20aece7e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-13T02:36:15Z","modified":"2026-07-13T02:36:15Z","name":"Phishing domain: accounts-facebook.blogspot.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Facebook. Report & evidence: https://phishdestroy.io/domain/accounts-facebook.blogspot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts-facebook.blogspot.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-13T02:36:15Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accounts-facebook.blogspot.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--88f0d42d-f1f3-5f47-a116-6f7ba858341a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-06T02:41:49Z","modified":"2026-08-06T02:41:49Z","name":"Phishing domain: accounts-location.us","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating apple. Report & evidence: https://phishdestroy.io/domain/accounts-location.us","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts-location.us']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-06T02:41:49Z","labels":["malicious-activity","phishing","brand:apple"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accounts-location.us"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--395e90d6-61f3-5dbe-b96f-4f79c1133159","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-08T15:14:43Z","modified":"2026-04-08T15:14:43Z","name":"Phishing domain: accounts-process-connect.com-clientid-v-dd146436e492ee706d5864e1bfb8dd56.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/accounts-process-connect.com-clientid-v-dd146436e492ee706d5864e1bfb8dd56.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts-process-connect.com-clientid-v-dd146436e492ee706d5864e1bfb8dd56.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-08T15:14:43Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accounts-process-connect.com-clientid-v-dd146436e492ee706d5864e1bfb8dd56.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6cc26bf-cb86-5955-a508-98d4f6a6244e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-30T03:33:56Z","modified":"2026-05-30T03:33:56Z","name":"Phishing domain: accounts-reported.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/accounts-reported.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts-reported.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-30T03:33:56Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accounts-reported.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e884fad-3642-5f81-b7e8-524288c1c62c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-01T03:44:42Z","modified":"2026-06-01T03:44:42Z","name":"Phishing domain: accounts-secure.live","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Instagram. Report & evidence: https://phishdestroy.io/domain/accounts-secure.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts-secure.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-01T03:44:42Z","labels":["malicious-activity","phishing","brand:instagram"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accounts-secure.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1625c309-add6-5367-9c1b-266a56f6ecb9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-24T14:01:27Z","modified":"2025-12-24T14:01:27Z","name":"Phishing domain: accounts.actual.oriole-94.lcl.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/accounts.actual.oriole-94.lcl.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts.actual.oriole-94.lcl.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-24T14:01:27Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accounts.actual.oriole-94.lcl.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f105603-0ed2-5027-827d-e7c022300d61","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-31T19:08:35Z","modified":"2026-03-31T19:08:35Z","name":"Phishing domain: accounts.binance-ads.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Binance. Report & evidence: https://phishdestroy.io/domain/accounts.binance-ads.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts.binance-ads.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-31T19:08:35Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accounts.binance-ads.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1d92d92-8139-5675-8d7c-7bdc4d9b9f7b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-11T18:30:03Z","modified":"2026-03-11T18:30:03Z","name":"Phishing domain: accounts.binanceuz.co","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating binance. Report & evidence: https://phishdestroy.io/domain/accounts.binanceuz.co","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts.binanceuz.co']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-11T18:30:03Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accounts.binanceuz.co"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--95efd11d-e3c9-56e7-9293-8b7eb5a320ec","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-06T12:17:45Z","modified":"2025-12-06T12:17:45Z","name":"Phishing domain: accounts.bmwweb.ac","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Binance. Report & evidence: https://phishdestroy.io/domain/accounts.bmwweb.ac","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts.bmwweb.ac']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-06T12:17:45Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accounts.bmwweb.ac"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4951259e-6499-5a62-b478-ec45acb89da6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-25T13:23:21Z","modified":"2025-08-25T13:23:21Z","name":"Phishing domain: accounts.bmwweb.biz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Binance. Report & evidence: https://phishdestroy.io/domain/accounts.bmwweb.biz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts.bmwweb.biz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-25T13:23:21Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accounts.bmwweb.biz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--14f91501-6d08-5cad-9c10-9981d52828e2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-06T15:48:33Z","modified":"2026-04-06T15:48:33Z","name":"Phishing domain: accounts.bmwweb.black","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating binance. Report & evidence: https://phishdestroy.io/domain/accounts.bmwweb.black","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts.bmwweb.black']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-06T15:48:33Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accounts.bmwweb.black"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdb27622-8ef9-5676-a5aa-8b9989eafda3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-11T18:30:02Z","modified":"2026-03-11T18:30:02Z","name":"Phishing domain: accounts.bmwweb.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating binance. Report & evidence: https://phishdestroy.io/domain/accounts.bmwweb.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts.bmwweb.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-11T18:30:02Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accounts.bmwweb.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--42187062-55c0-5d44-bd3a-0bc03a30e28c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-20T03:35:34Z","modified":"2026-01-20T03:35:34Z","name":"Phishing domain: accounts.bmwweb.me","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Binance. Report & evidence: https://phishdestroy.io/domain/accounts.bmwweb.me","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts.bmwweb.me']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-20T03:35:34Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accounts.bmwweb.me"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b6e8d5e-825d-5282-98df-d946dfdf0def","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-14T15:42:58Z","modified":"2026-03-14T15:42:58Z","name":"Phishing domain: accounts.bmwweb.red","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Binance. Report & evidence: https://phishdestroy.io/domain/accounts.bmwweb.red","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts.bmwweb.red']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-14T15:42:58Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accounts.bmwweb.red"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a380d8d-0cef-5513-bfb9-88a8c14eaae4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-12T15:43:04Z","modified":"2026-04-12T15:43:04Z","name":"Phishing domain: accounts.bmwweb.systems","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Binance. Report & evidence: https://phishdestroy.io/domain/accounts.bmwweb.systems","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts.bmwweb.systems']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-12T15:43:04Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accounts.bmwweb.systems"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9120a4a1-9ca1-5553-9467-9c5340b20caf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-29T11:28:07Z","modified":"2025-12-29T11:28:07Z","name":"Phishing domain: accounts.carlilex.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/accounts.carlilex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts.carlilex.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-29T11:28:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accounts.carlilex.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac590e33-8890-5ed1-85e4-6176aa6f5771","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-04T17:18:39Z","modified":"2025-12-04T17:18:39Z","name":"Phishing domain: accounts.coinbase.earth","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/accounts.coinbase.earth","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts.coinbase.earth']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-04T17:18:39Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accounts.coinbase.earth"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a15f9532-3684-5d5d-9f4c-a56815611050","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-07T12:37:36Z","modified":"2025-11-07T12:37:36Z","name":"Phishing domain: accounts.coinbase.page","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/accounts.coinbase.page","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts.coinbase.page']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-07T12:37:36Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accounts.coinbase.page"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--86b47d04-0b5f-5547-a1a1-0d90a410659e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-07T12:37:38Z","modified":"2025-11-07T12:37:38Z","name":"Phishing domain: accounts.coinbase.property","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/accounts.coinbase.property","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts.coinbase.property']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-07T12:37:38Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accounts.coinbase.property"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b682665-ec7a-5872-8f4b-be01ca2f2d0b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:02Z","modified":"2026-02-26T23:24:02Z","name":"Phishing domain: accounts.ctradefx.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/accounts.ctradefx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts.ctradefx.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:02Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accounts.ctradefx.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--84d87b91-da6c-5bf3-86a4-832928829805","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-26T14:03:26Z","modified":"2025-10-26T14:03:26Z","name":"Phishing domain: accounts.google.cygn.eu.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/accounts.google.cygn.eu.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts.google.cygn.eu.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-26T14:03:26Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accounts.google.cygn.eu.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cfc38fd-d8b2-5404-bd01-8c5422b0f005","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:06Z","modified":"2026-02-26T23:24:06Z","name":"Phishing domain: accounts.google.ss-o.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/accounts.google.ss-o.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts.google.ss-o.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:06Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accounts.google.ss-o.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a065f8b-ee91-591d-a767-009e80eb187a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-14T18:08:24Z","modified":"2026-06-14T18:08:24Z","name":"Phishing domain: accounts.gxcwfe.icu","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/accounts.gxcwfe.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts.gxcwfe.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-14T18:08:24Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accounts.gxcwfe.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b9ab852-7007-5244-99fd-a5708f50ac1c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-23T13:01:20Z","modified":"2025-09-23T13:01:20Z","name":"Phishing domain: accounts.holtwealthfinance.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/accounts.holtwealthfinance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts.holtwealthfinance.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-23T13:01:20Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accounts.holtwealthfinance.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e25e89f-0d35-5176-aeea-37a1205caecd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:16Z","modified":"2026-02-26T23:22:16Z","name":"Phishing domain: accounts.instantfxtrading.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aave. Report & evidence: https://phishdestroy.io/domain/accounts.instantfxtrading.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts.instantfxtrading.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:16Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accounts.instantfxtrading.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b78245ef-6b44-577e-8d63-2f3d011ba614","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-25T15:20:31Z","modified":"2026-04-25T15:20:31Z","name":"Phishing domain: accounts.invoice-ads-agency.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating facebook. Report & evidence: https://phishdestroy.io/domain/accounts.invoice-ads-agency.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts.invoice-ads-agency.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-25T15:20:31Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accounts.invoice-ads-agency.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--71bf2b76-e0e0-59da-9326-ec76c8542431","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-14T18:08:26Z","modified":"2026-06-14T18:08:26Z","name":"Phishing domain: accounts.knuczx.icu","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/accounts.knuczx.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts.knuczx.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-14T18:08:26Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accounts.knuczx.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--543a67b7-57b2-586a-bc38-dc3f2d777390","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-03T20:33:53Z","modified":"2026-02-03T20:33:53Z","name":"Phishing domain: accounts.ledgerlysolution.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/accounts.ledgerlysolution.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts.ledgerlysolution.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-03T20:33:53Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accounts.ledgerlysolution.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--90383dc8-7385-502a-b929-00b8260a7fc5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-24T16:51:21Z","modified":"2026-04-24T16:51:21Z","name":"Phishing domain: accounts.login.idm.telekom.com.metropoleweb.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating telekom. Report & evidence: https://phishdestroy.io/domain/accounts.login.idm.telekom.com.metropoleweb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts.login.idm.telekom.com.metropoleweb.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-24T16:51:21Z","labels":["malicious-activity","phishing","brand:telekom"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accounts.login.idm.telekom.com.metropoleweb.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d0e670f-254f-5915-9278-49bdba2163cb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-05T03:21:46Z","modified":"2026-02-05T03:21:46Z","name":"Phishing domain: accounts.marketwebb.link","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Binance. Report & evidence: https://phishdestroy.io/domain/accounts.marketwebb.link","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts.marketwebb.link']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-05T03:21:46Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accounts.marketwebb.link"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0c436e4-1c33-51bb-9898-2c5968a487c3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-20T17:57:24Z","modified":"2025-11-20T17:57:24Z","name":"Phishing domain: accounts.marketwebb.me","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Binance. Report & evidence: https://phishdestroy.io/domain/accounts.marketwebb.me","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts.marketwebb.me']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-20T17:57:24Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accounts.marketwebb.me"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9661ec25-2534-5cad-8ee4-6551d278e8ec","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-23T12:25:06Z","modified":"2025-12-23T12:25:06Z","name":"Phishing domain: accounts.marketwebb.mobi","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Binance. Report & evidence: https://phishdestroy.io/domain/accounts.marketwebb.mobi","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts.marketwebb.mobi']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-23T12:25:06Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accounts.marketwebb.mobi"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c242d1b4-fd1c-5350-a7aa-1fb1c7b5c1e6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-29T12:14:10Z","modified":"2025-10-29T12:14:10Z","name":"Phishing domain: accounts.maxweb.black","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating binance. Report & evidence: https://phishdestroy.io/domain/accounts.maxweb.black","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts.maxweb.black']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-29T12:14:10Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accounts.maxweb.black"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d883333-52b7-5b89-9272-45f9abb0e306","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-21T10:41:40Z","modified":"2025-12-21T10:41:40Z","name":"Phishing domain: accounts.maxweb.cab","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Binance. Report & evidence: https://phishdestroy.io/domain/accounts.maxweb.cab","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts.maxweb.cab']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-21T10:41:40Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accounts.maxweb.cab"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c36890e2-c63e-548b-9457-5f64ae6db815","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-08T12:17:24Z","modified":"2025-11-08T12:17:24Z","name":"Phishing domain: accounts.maxweb.red","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating binance. Report & evidence: https://phishdestroy.io/domain/accounts.maxweb.red","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts.maxweb.red']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-08T12:17:24Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accounts.maxweb.red"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3a329ee-3ee6-5ffc-897c-f03cb1c9b8f3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-18T02:36:18Z","modified":"2025-12-18T02:36:18Z","name":"Phishing domain: accounts.maxweb.systems","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Binance. Report & evidence: https://phishdestroy.io/domain/accounts.maxweb.systems","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts.maxweb.systems']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-18T02:36:18Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accounts.maxweb.systems"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--73662e27-72ae-57e0-a0a7-da5aaf762938","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:14Z","modified":"2026-02-26T23:24:14Z","name":"Phishing domain: accounts.noreply-security-mail.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/accounts.noreply-security-mail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts.noreply-security-mail.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:14Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accounts.noreply-security-mail.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--817dc69c-0b02-595e-8663-c8c7a6581166","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-14T18:08:32Z","modified":"2026-06-14T18:08:32Z","name":"Phishing domain: accounts.odtdrv.icu","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/accounts.odtdrv.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts.odtdrv.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-14T18:08:32Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accounts.odtdrv.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ce867fa-aaab-5abf-9b56-03962ad91d80","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-07T16:33:48Z","modified":"2025-08-07T16:33:48Z","name":"Phishing domain: accounts.profitpluxfinance.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aave. Report & evidence: https://phishdestroy.io/domain/accounts.profitpluxfinance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts.profitpluxfinance.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-07T16:33:48Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accounts.profitpluxfinance.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8ba7bf3-75f5-55cf-a082-3d21456f3f0d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-04T14:45:00Z","modified":"2026-01-04T14:45:00Z","name":"Phishing domain: accounts.simplilearn.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Apple. Report & evidence: https://phishdestroy.io/domain/accounts.simplilearn.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts.simplilearn.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-04T14:45:00Z","labels":["malicious-activity","phishing","brand:apple"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accounts.simplilearn.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b2c6e51-871d-5dbc-b06c-313aa75e35b9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T18:40:07Z","modified":"2026-08-09T18:40:07Z","name":"Phishing domain: accounts.tensor-trade.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Tensor. Report & evidence: https://phishdestroy.io/domain/accounts.tensor-trade.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts.tensor-trade.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T18:40:07Z","labels":["malicious-activity","phishing","brand:tensor"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accounts.tensor-trade.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--43f790d1-8979-55f5-b2e6-3568907d54a3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-14T18:08:21Z","modified":"2026-06-14T18:08:21Z","name":"Phishing domain: accounts.tnfirm.icu","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/accounts.tnfirm.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts.tnfirm.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-14T18:08:21Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accounts.tnfirm.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f26fe0b-0752-5b15-aa12-39a4fd5d49cf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-14T18:08:29Z","modified":"2026-06-14T18:08:29Z","name":"Phishing domain: accounts.zachnt.icu","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/accounts.zachnt.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accounts.zachnt.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-14T18:08:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accounts.zachnt.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--085a1423-ef33-577c-b971-5927f590956b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-14T16:28:00Z","modified":"2026-04-14T16:28:00Z","name":"Phishing domain: accountsecurity.us","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/accountsecurity.us","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountsecurity.us']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-14T16:28:00Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accountsecurity.us"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce4bf318-b6d0-59bf-a85a-b8a6062ddb6d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-11T18:22:14Z","modified":"2026-08-11T18:22:14Z","name":"Phishing domain: accountservicescenter.co.za","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating phishingtest. Report & evidence: https://phishdestroy.io/domain/accountservicescenter.co.za","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountservicescenter.co.za']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-11T18:22:14Z","labels":["malicious-activity","phishing","brand:phishingtest"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accountservicescenter.co.za"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe0c3b5a-ed95-509c-8e89-9708b0baa16f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-23T12:28:31Z","modified":"2025-12-23T12:28:31Z","name":"Phishing domain: accountspagemain.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/accountspagemain.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountspagemain.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-23T12:28:31Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accountspagemain.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cb31633-fec8-57c3-9bf3-165f84316e22","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-27T17:52:58Z","modified":"2026-01-27T17:52:58Z","name":"Phishing domain: accountsreceivable.sbs","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating IRS. Report & evidence: https://phishdestroy.io/domain/accountsreceivable.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountsreceivable.sbs']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-27T17:52:58Z","labels":["malicious-activity","phishing","brand:irs"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accountsreceivable.sbs"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--27a87bad-f34f-52a2-8fa7-0d9face41832","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-10T14:56:47Z","modified":"2026-03-10T14:56:47Z","name":"Phishing domain: accountstatement231.weebly.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/accountstatement231.weebly.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountstatement231.weebly.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-10T14:56:47Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accountstatement231.weebly.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--303ff0f5-37e0-5e18-b97a-82a64ee8a50d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-30T14:27:02Z","modified":"2026-07-30T14:27:02Z","name":"Phishing domain: accountsupport-info.us","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Apple. Report & evidence: https://phishdestroy.io/domain/accountsupport-info.us","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountsupport-info.us']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-30T14:27:02Z","labels":["malicious-activity","phishing","brand:apple"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accountsupport-info.us"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a87f3fd-2dc0-5784-a7ce-aeefde2eb7d0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:35Z","modified":"2026-02-26T23:21:35Z","name":"Phishing domain: accountsupportverifing.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating base. Report & evidence: https://phishdestroy.io/domain/accountsupportverifing.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountsupportverifing.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:35Z","labels":["malicious-activity","phishing","brand:base"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accountsupportverifing.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff9355c4-4b08-5b78-b534-98596909d204","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-04T19:52:35Z","modified":"2026-04-04T19:52:35Z","name":"Phishing domain: accountt-wallete-aave.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Aave. Report & evidence: https://phishdestroy.io/domain/accountt-wallete-aave.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountt-wallete-aave.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-04T19:52:35Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accountt-wallete-aave.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--38a43091-8bdd-5195-bff5-7ad8584a0bbd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-02T14:02:04Z","modified":"2026-07-02T14:02:04Z","name":"Phishing domain: accountverify-immediateaction.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/accountverify-immediateaction.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accountverify-immediateaction.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-02T14:02:04Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accountverify-immediateaction.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e026594-55fb-59f9-b304-3c136f5d76cf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-28T20:38:40Z","modified":"2026-07-28T20:38:40Z","name":"Phishing domain: accre-insu.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/accre-insu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accre-insu.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-28T20:38:40Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accre-insu.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a558f9a-8ff1-58e0-b4ac-422d4b233163","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-27T18:12:08Z","modified":"2026-01-27T18:12:08Z","name":"Phishing domain: accrestart.weebly.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/accrestart.weebly.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accrestart.weebly.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-27T18:12:08Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accrestart.weebly.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ea1b004-6c23-5c0c-a32d-e29e69bd8cb7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-06T02:05:51Z","modified":"2025-08-06T02:05:51Z","name":"Phishing domain: accretiontrade.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/accretiontrade.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accretiontrade.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-06T02:05:51Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accretiontrade.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--96c1898c-f914-58b2-b6e3-ef4e919f9769","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-14T21:47:39Z","modified":"2026-05-14T21:47:39Z","name":"Phishing domain: accross.to","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Across Protocol. Report & evidence: https://phishdestroy.io/domain/accross.to","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accross.to']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-14T21:47:39Z","labels":["malicious-activity","phishing","brand:across protocol"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accross.to"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4aeb0d43-9513-53c6-ba22-17888f1c9a0c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-05T18:20:45Z","modified":"2025-08-05T18:20:45Z","name":"Phishing domain: accruzairandheat.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/accruzairandheat.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accruzairandheat.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-05T18:20:45Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accruzairandheat.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--466245ef-c26d-596c-9d4c-e5af388dab63","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-11T09:03:47Z","modified":"2026-07-11T09:03:47Z","name":"Phishing domain: accs-laceextension.wixstudio.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/accs-laceextension.wixstudio.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accs-laceextension.wixstudio.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-11T09:03:47Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accs-laceextension.wixstudio.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--78d2aaaf-ee2b-5206-bf7c-2c4926d97291","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-23T13:00:12Z","modified":"2025-11-23T13:00:12Z","name":"Phishing domain: accshomecnfrm0log.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Facebook. Report & evidence: https://phishdestroy.io/domain/accshomecnfrm0log.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accshomecnfrm0log.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-23T13:00:12Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accshomecnfrm0log.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--669bd7af-c403-505d-b56d-eb75762fc35d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-29T09:51:12Z","modified":"2025-11-29T09:51:12Z","name":"Phishing domain: accshomepage-log.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Facebook. Report & evidence: https://phishdestroy.io/domain/accshomepage-log.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accshomepage-log.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-29T09:51:12Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accshomepage-log.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b87e452-bb64-5228-8bb3-d74b74af5332","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-20T06:47:36Z","modified":"2025-12-20T06:47:36Z","name":"Phishing domain: accss-ledger-public.typedream.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/accss-ledger-public.typedream.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accss-ledger-public.typedream.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-20T06:47:36Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accss-ledger-public.typedream.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d66715f1-af1b-5c51-946b-c1e525c8e838","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T19:59:14Z","modified":"2026-08-10T19:59:14Z","name":"Phishing domain: accss-metamsk-lgn.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/accss-metamsk-lgn.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accss-metamsk-lgn.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T19:59:14Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accss-metamsk-lgn.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b05c266c-31ff-5143-8533-3d432a9ec8da","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-06T10:24:32Z","modified":"2026-07-06T10:24:32Z","name":"Phishing domain: accstarts-ledgrcdn.wixstudio.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/accstarts-ledgrcdn.wixstudio.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accstarts-ledgrcdn.wixstudio.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-06T10:24:32Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accstarts-ledgrcdn.wixstudio.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--64a16755-557c-5735-a773-265f43ba4007","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-22T08:28:29Z","modified":"2026-07-22T08:28:29Z","name":"Phishing domain: accstarts-ledgrecdn.wixstudio.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/accstarts-ledgrecdn.wixstudio.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accstarts-ledgrecdn.wixstudio.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-22T08:28:29Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accstarts-ledgrecdn.wixstudio.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--77d54bba-d8bc-5416-aff7-bad85c9bd515","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-20T10:00:42Z","modified":"2026-06-20T10:00:42Z","name":"Phishing domain: acct.caixesp-finbk.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating [\"google\"]. Report & evidence: https://phishdestroy.io/domain/acct.caixesp-finbk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acct.caixesp-finbk.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-20T10:00:42Z","labels":["malicious-activity","phishing","brand:[\"google\"]"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acct.caixesp-finbk.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdbc61aa-7aea-5209-8786-79baf702d4ad","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-04T16:29:46Z","modified":"2026-03-04T16:29:46Z","name":"Phishing domain: acct.exodusminingfield.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Exodus. Report & evidence: https://phishdestroy.io/domain/acct.exodusminingfield.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acct.exodusminingfield.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-04T16:29:46Z","labels":["malicious-activity","phishing","brand:exodus"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acct.exodusminingfield.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee17ea71-40dd-59a0-9f74-43570a117027","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-15T06:03:54Z","modified":"2025-10-15T06:03:54Z","name":"Phishing domain: acct.georgiapacificbk.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/acct.georgiapacificbk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acct.georgiapacificbk.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-15T06:03:54Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acct.georgiapacificbk.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--011d2186-dd6d-5536-971e-6ffe9356fad6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-10T15:17:50Z","modified":"2025-12-10T15:17:50Z","name":"Phishing domain: acct.greenpathfinbk.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/acct.greenpathfinbk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acct.greenpathfinbk.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-10T15:17:50Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acct.greenpathfinbk.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cae615d3-3201-5847-a9af-dfff733b6565","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-07-12T17:45:00Z","modified":"2025-07-12T17:45:00Z","name":"Phishing domain: acctloaded.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/acctloaded.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acctloaded.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-07-12T17:45:00Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acctloaded.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcab406d-05c9-558f-8d16-dd853e90335e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-10T10:48:09Z","modified":"2026-07-10T10:48:09Z","name":"Phishing domain: acctmarkethub.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acctmarkethub.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acctmarkethub.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-10T10:48:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acctmarkethub.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b0a4532-e2db-598f-a060-d6d627e37919","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-07T15:54:31Z","modified":"2025-09-07T15:54:31Z","name":"Phishing domain: acctplugins.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acctplugins.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acctplugins.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-07T15:54:31Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acctplugins.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcdea1c2-8923-5e5e-bc29-e6ebfbda79b7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-01T03:48:32Z","modified":"2026-07-01T03:48:32Z","name":"Phishing domain: acctsphere.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acctsphere.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acctsphere.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-01T03:48:32Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acctsphere.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6599a42-c5ca-57fd-a341-a4ab8ffd6ad8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:18Z","modified":"2026-02-26T23:20:18Z","name":"Phishing domain: acctverifytele.surge.sh","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acctverifytele.surge.sh","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acctverifytele.surge.sh']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:18Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acctverifytele.surge.sh"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--73936472-6158-51ae-928c-9593c5cf230f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:48:35Z","modified":"2026-07-27T04:48:35Z","name":"Phishing domain: accumarkeassets.click","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/accumarkeassets.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accumarkeassets.click']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:48:35Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accumarkeassets.click"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--66d53002-5a11-5112-b8cb-bb52373214b3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-07T17:54:23Z","modified":"2025-08-07T17:54:23Z","name":"Phishing domain: accumarkets.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/accumarkets.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accumarkets.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-07T17:54:23Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accumarkets.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--879b86c7-35fc-52b8-a75a-6e3d8a4e7fd1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-31T19:06:25Z","modified":"2026-03-31T19:06:25Z","name":"Phishing domain: accumulatedtokens.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/accumulatedtokens.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accumulatedtokens.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-31T19:06:25Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accumulatedtokens.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--700c7f96-7aeb-508b-a1bc-b59a681de000","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-30T18:21:09Z","modified":"2026-03-30T18:21:09Z","name":"Phishing domain: accumulatedtokens.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/accumulatedtokens.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accumulatedtokens.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-30T18:21:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accumulatedtokens.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eac9982a-4b8e-5212-8935-09b11b9e0aed","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-25T12:30:42Z","modified":"2025-12-25T12:30:42Z","name":"Phishing domain: accuno-amex.koken-ishin.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/accuno-amex.koken-ishin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accuno-amex.koken-ishin.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-25T12:30:42Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accuno-amex.koken-ishin.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3abaf61-7334-58d7-ac2e-ad42adc0394b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-30T00:39:26Z","modified":"2025-12-30T00:39:26Z","name":"Phishing domain: accunt-amex.hakubavall.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/accunt-amex.hakubavall.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accunt-amex.hakubavall.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-30T00:39:26Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accunt-amex.hakubavall.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e035dd0-acb4-5b04-858d-cec3f0306e74","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-07-27T06:50:39Z","modified":"2025-07-27T06:50:39Z","name":"Phishing domain: accuont-preseach.icu","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/accuont-preseach.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accuont-preseach.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-07-27T06:50:39Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accuont-preseach.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ba55860-567c-541a-93ab-d0284413d121","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-24T23:00:37Z","modified":"2026-01-24T23:00:37Z","name":"Phishing domain: accurate-lime-2lmw3rvzhq-hbcfcgodx5.edgeone.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/accurate-lime-2lmw3rvzhq-hbcfcgodx5.edgeone.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accurate-lime-2lmw3rvzhq-hbcfcgodx5.edgeone.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-24T23:00:37Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accurate-lime-2lmw3rvzhq-hbcfcgodx5.edgeone.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8323c96f-e33b-5ad2-be9c-e35a9a83a5f5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T03:23:46Z","modified":"2026-08-10T03:23:46Z","name":"Phishing domain: accurateglobaltraders.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/accurateglobaltraders.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accurateglobaltraders.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T03:23:46Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accurateglobaltraders.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--76ce5d99-691e-5822-8b74-de6fca074ae4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T05:00:06Z","modified":"2026-07-27T05:00:06Z","name":"Phishing domain: accuratevesttec.live","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/accuratevesttec.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accuratevesttec.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T05:00:06Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accuratevesttec.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c19ea11-1681-56c4-ac9d-187bc38e2104","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T07:02:12Z","modified":"2026-07-27T07:02:12Z","name":"Phishing domain: accurewealthtrade.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/accurewealthtrade.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accurewealthtrade.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T07:02:12Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accurewealthtrade.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9af9cbb4-116b-5e5c-86f5-bd4ebf0ce8c6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-11T18:30:02Z","modified":"2026-03-11T18:30:02Z","name":"Phishing domain: accurnulated.finance","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/accurnulated.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accurnulated.finance']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-11T18:30:02Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accurnulated.finance"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b1b7410-a5c7-596a-872a-12ca82335d53","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-22T04:51:43Z","modified":"2026-01-22T04:51:43Z","name":"Phishing domain: accuszone.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/accuszone.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accuszone.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-22T04:51:43Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accuszone.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aef54e27-108f-5078-9abc-b10f6679f89f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-07T09:29:31Z","modified":"2026-01-07T09:29:31Z","name":"Phishing domain: accutrader360.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating argent. Report & evidence: https://phishdestroy.io/domain/accutrader360.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'accutrader360.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-07T09:29:31Z","labels":["malicious-activity","phishing","brand:argent"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/accutrader360.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6247057-6979-5f29-9fe8-f163498d35b7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-12T22:43:24Z","modified":"2026-02-12T22:43:24Z","name":"Phishing domain: acdcticket.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acdcticket.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acdcticket.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-12T22:43:24Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acdcticket.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb69fc70-d141-5e3a-bdbb-a5e8466a1b73","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-02T16:16:28Z","modified":"2026-03-02T16:16:28Z","name":"Phishing domain: ace-casino.pl","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ace-casino.pl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ace-casino.pl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-02T16:16:28Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ace-casino.pl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--805c3880-0ef7-58ee-925e-62dbb5474116","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:23Z","modified":"2026-02-26T23:22:23Z","name":"Phishing domain: ace-coins-bse-xtension-web.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/ace-coins-bse-xtension-web.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ace-coins-bse-xtension-web.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:23Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ace-coins-bse-xtension-web.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ba7ff27-4e7c-573d-ac16-235ecbe62b77","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T05:39:18Z","modified":"2026-02-13T05:39:18Z","name":"Phishing domain: ace-game.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ace-game.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ace-game.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T05:39:18Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ace-game.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--949abe21-0ff2-5de0-9541-ad3e29b8ca97","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-22T19:09:15Z","modified":"2025-10-22T19:09:15Z","name":"Phishing domain: acebeast.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating cryptoscam. Report & evidence: https://phishdestroy.io/domain/acebeast.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acebeast.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-22T19:09:15Z","labels":["malicious-activity","phishing","brand:cryptoscam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acebeast.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fb40e3d-0f21-595f-8b39-3fa063f5f949","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-18T21:50:06Z","modified":"2025-08-18T21:50:06Z","name":"Phishing domain: acecapitalpro.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/acecapitalpro.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acecapitalpro.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-18T21:50:06Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acecapitalpro.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2afb6723-f159-5dd0-a327-9821145d6017","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-18T21:50:03Z","modified":"2025-08-18T21:50:03Z","name":"Phishing domain: acecapitalpro.com.bitltdpro.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/acecapitalpro.com.bitltdpro.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acecapitalpro.com.bitltdpro.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-18T21:50:03Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acecapitalpro.com.bitltdpro.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bf4f02a-a8b5-5539-8ba6-4f263e8ec726","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-17T14:14:55Z","modified":"2026-06-17T14:14:55Z","name":"Phishing domain: aceccessos2026.sbs","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aceccessos2026.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aceccessos2026.sbs']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-17T14:14:55Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aceccessos2026.sbs"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--38e342bb-3a16-561d-a7c4-d83f6d6d4e3a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-25T16:50:18Z","modified":"2025-12-25T16:50:18Z","name":"Phishing domain: acedata.lat","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acedata.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acedata.lat']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-25T16:50:18Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acedata.lat"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e869a25-fe4c-56c6-ba62-351db0f9eb6d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-21T21:14:36Z","modified":"2025-11-21T21:14:36Z","name":"Phishing domain: acedata.network","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/acedata.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acedata.network']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-21T21:14:36Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acedata.network"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef3a9229-f4fa-5806-bfa9-875ad5b70c3f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-05T14:27:25Z","modified":"2025-11-05T14:27:25Z","name":"Phishing domain: acedeckpro.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating scroll. Report & evidence: https://phishdestroy.io/domain/acedeckpro.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acedeckpro.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-05T14:27:25Z","labels":["malicious-activity","phishing","brand:scroll"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acedeckpro.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f824dc26-b5a3-5f27-8eb8-2a16f6ab618a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-05T23:54:13Z","modified":"2026-02-05T23:54:13Z","name":"Phishing domain: acedex.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/acedex.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acedex.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-05T23:54:13Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acedex.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--59217d1f-a60b-5498-9bd6-d4aa7f1c7adc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-17T18:10:40Z","modified":"2026-02-17T18:10:40Z","name":"Phishing domain: acedex.info","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/acedex.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acedex.info']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-17T18:10:40Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acedex.info"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e71fef4-69bf-52ae-8240-d92cdaf6502b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-23T03:10:24Z","modified":"2025-10-23T03:10:24Z","name":"Phishing domain: acedex.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acedex.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acedex.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-23T03:10:24Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acedex.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e88e359b-e9c9-5853-97d3-3ccd9296e6cd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-07T16:42:46Z","modified":"2025-08-07T16:42:46Z","name":"Phishing domain: acedigitalhub.online","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/acedigitalhub.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acedigitalhub.online']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-07T16:42:46Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acedigitalhub.online"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--45da8846-e16c-5ea8-9366-c4210c4169c6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-19T17:50:05Z","modified":"2026-01-19T17:50:05Z","name":"Phishing domain: aceeyl.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aceeyl.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aceeyl.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-19T17:50:05Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aceeyl.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--93e5d6e3-6a2e-53e8-ac51-65185d3411bf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T05:31:01Z","modified":"2026-07-27T05:31:01Z","name":"Phishing domain: acefinanceinvest.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acefinanceinvest.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acefinanceinvest.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T05:31:01Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acefinanceinvest.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aaecacbf-b402-59ae-9aa5-45b3617c8d38","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-10T08:18:02Z","modified":"2025-12-10T08:18:02Z","name":"Phishing domain: acegam.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acegam.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acegam.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-10T08:18:02Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acegam.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2f4ff7a-f5bd-5d3b-9891-6a4486542c09","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-27T00:45:28Z","modified":"2026-03-27T00:45:28Z","name":"Phishing domain: acegame-casino.bet","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acegame-casino.bet","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acegame-casino.bet']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-27T00:45:28Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acegame-casino.bet"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f61a25e8-4f20-5fed-810c-a1ea46c4113d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-23T23:28:40Z","modified":"2026-02-23T23:28:40Z","name":"Phishing domain: acegame.bet","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acegame.bet","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acegame.bet']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-23T23:28:40Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acegame.bet"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--720d8061-a1de-5a3c-b092-ff6a3da44abf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-12T00:18:48Z","modified":"2025-08-12T00:18:48Z","name":"Phishing domain: aceholdinginc.ltd","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ethereum. Report & evidence: https://phishdestroy.io/domain/aceholdinginc.ltd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aceholdinginc.ltd']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-12T00:18:48Z","labels":["malicious-activity","phishing","brand:ethereum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aceholdinginc.ltd"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e4e341d-3985-5f6b-9ccd-8489bb1d1142","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-22T04:51:00Z","modified":"2026-01-22T04:51:00Z","name":"Phishing domain: aceleradofinlux.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating base. Report & evidence: https://phishdestroy.io/domain/aceleradofinlux.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aceleradofinlux.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-22T04:51:00Z","labels":["malicious-activity","phishing","brand:base"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aceleradofinlux.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--63e1bafd-5c14-5743-bb37-7084d53e1e57","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-18T15:31:00Z","modified":"2025-10-18T15:31:00Z","name":"Phishing domain: acelogger.icu","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acelogger.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acelogger.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-18T15:31:00Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acelogger.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5845bac6-cd77-5654-b652-8c381f368613","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:55Z","modified":"2026-02-26T23:19:55Z","name":"Phishing domain: acelogger.live","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acelogger.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acelogger.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:55Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acelogger.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--256ff1e8-12c7-5824-8358-efb42aafd657","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-13T06:23:59Z","modified":"2026-03-13T06:23:59Z","name":"Phishing domain: acelogstores.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating facebook. Report & evidence: https://phishdestroy.io/domain/acelogstores.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acelogstores.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-13T06:23:59Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acelogstores.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b160df15-18e8-5288-9df0-466964fd73d4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-20T22:42:52Z","modified":"2026-03-20T22:42:52Z","name":"Phishing domain: acelogstores.online","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acelogstores.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acelogstores.online']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-20T22:42:52Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acelogstores.online"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cab865a9-7437-5430-b683-9e74eb0fa115","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T12:02:03Z","modified":"2026-07-27T12:02:03Z","name":"Phishing domain: acelos.hu","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acelos.hu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acelos.hu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T12:02:03Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acelos.hu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--da724a11-be9e-5111-94b4-adc3c3b63d81","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-08T04:07:05Z","modified":"2025-08-08T04:07:05Z","name":"Phishing domain: acemarketplus.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/acemarketplus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acemarketplus.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-08T04:07:05Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acemarketplus.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--84981f89-d0d3-5b2a-a378-46491bca6466","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-04T16:52:59Z","modified":"2026-03-04T16:52:59Z","name":"Phishing domain: acemepros.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acemepros.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acemepros.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-04T16:52:59Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acemepros.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a1d1172-8c71-5c5d-b3e1-e278fb99cb7d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-14T19:49:29Z","modified":"2026-07-14T19:49:29Z","name":"Phishing domain: acemoney-transfer.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/acemoney-transfer.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acemoney-transfer.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-14T19:49:29Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acemoney-transfer.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--da1b54be-880e-5419-b92d-ce792b50bdae","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-04T16:14:11Z","modified":"2026-08-04T16:14:11Z","name":"Phishing domain: acemoneytransfer.netlify.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acemoneytransfer.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acemoneytransfer.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-04T16:14:11Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acemoneytransfer.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--840ff4ee-209a-56e1-8dde-7f255dbe7ac3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-30T07:09:16Z","modified":"2025-12-30T07:09:16Z","name":"Phishing domain: acenex.us","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/acenex.us","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acenex.us']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-30T07:09:16Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acenex.us"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f8055ef-32f4-5f2b-940a-66ccd6714f12","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-20T14:40:19Z","modified":"2026-04-20T14:40:19Z","name":"Phishing domain: aceone.bet","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aceone.bet","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aceone.bet']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-20T14:40:19Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aceone.bet"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4e40be4-e01e-5010-8bfc-611bf0c087f1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-07T19:02:29Z","modified":"2025-09-07T19:02:29Z","name":"Phishing domain: aceoptimaltrades.live","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/aceoptimaltrades.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aceoptimaltrades.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-07T19:02:29Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aceoptimaltrades.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7586145f-b418-5aeb-b5e3-5a7ccde117d5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-06T12:20:48Z","modified":"2025-08-06T12:20:48Z","name":"Phishing domain: aceov.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aceov.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aceov.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-06T12:20:48Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aceov.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--79211058-6217-5790-a47e-e50e3e8875d9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-05T13:15:52Z","modified":"2026-01-05T13:15:52Z","name":"Phishing domain: aceplay.casino","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/aceplay.casino","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aceplay.casino']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-05T13:15:52Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aceplay.casino"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7301fc5e-5471-53bb-844f-dee3ade4991a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-17T14:03:43Z","modified":"2025-09-17T14:03:43Z","name":"Phishing domain: aceprimer.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ethereum. Report & evidence: https://phishdestroy.io/domain/aceprimer.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aceprimer.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-17T14:03:43Z","labels":["malicious-activity","phishing","brand:ethereum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aceprimer.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c467ab0-10be-56f1-a0b6-c4deef2a5c52","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-17T07:43:26Z","modified":"2026-06-17T07:43:26Z","name":"Phishing domain: acepymt.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acepymt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acepymt.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-17T07:43:26Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acepymt.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7c91706-9069-504a-b800-01ccd26587b5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-25T16:52:16Z","modified":"2026-03-25T16:52:16Z","name":"Phishing domain: aceraspire5121-debug.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/aceraspire5121-debug.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aceraspire5121-debug.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-25T16:52:16Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aceraspire5121-debug.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3e28e0d-3d8c-5e9a-83bf-0d066635a088","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-10T11:45:55Z","modified":"2026-07-10T11:45:55Z","name":"Phishing domain: aceroterniunmty.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aceroterniunmty.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aceroterniunmty.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-10T11:45:55Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aceroterniunmty.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--55a6967e-d4e7-5fc3-90f3-57fe80f87ddd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-20T22:42:54Z","modified":"2026-03-20T22:42:54Z","name":"Phishing domain: acesmsverify.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acesmsverify.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acesmsverify.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-20T22:42:54Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acesmsverify.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--57466de2-a183-5619-a6b4-352fbae8fbe7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-11T14:42:01Z","modified":"2026-06-11T14:42:01Z","name":"Phishing domain: acesorvirtual-365--segoffice365.replit.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Microsoft. Report & evidence: https://phishdestroy.io/domain/acesorvirtual-365--segoffice365.replit.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acesorvirtual-365--segoffice365.replit.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-11T14:42:01Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acesorvirtual-365--segoffice365.replit.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--183d4b8a-66a2-53c6-ab67-5618bf10a9b6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-05T01:19:27Z","modified":"2026-03-05T01:19:27Z","name":"Phishing domain: acess-e-xodusweb.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/acess-e-xodusweb.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acess-e-xodusweb.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-05T01:19:27Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acess-e-xodusweb.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c858481-2d55-5c6e-8ebc-991d2930ddfe","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-21T10:19:45Z","modified":"2026-03-21T10:19:45Z","name":"Phishing domain: acess-ledger-x-live.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/acess-ledger-x-live.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acess-ledger-x-live.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-21T10:19:45Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acess-ledger-x-live.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d880c19-2ef3-5254-aeb1-887e78ba8b2a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T19:27:30Z","modified":"2026-06-15T19:27:30Z","name":"Phishing domain: acess-trazzr-io-en.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Trezor. Report & evidence: https://phishdestroy.io/domain/acess-trazzr-io-en.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acess-trazzr-io-en.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T19:27:30Z","labels":["malicious-activity","phishing","brand:trezor"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acess-trazzr-io-en.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f033472a-d4f7-5d5c-9361-1774913f9499","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-21T02:17:33Z","modified":"2026-07-21T02:17:33Z","name":"Phishing domain: acessarsafra.digital","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acessarsafra.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessarsafra.digital']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-21T02:17:33Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acessarsafra.digital"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f58bdd2b-157d-5900-b160-2d17312b7abd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-21T02:13:07Z","modified":"2026-07-21T02:13:07Z","name":"Phishing domain: acessesaaquioffftododia.com.br","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating magalu. Report & evidence: https://phishdestroy.io/domain/acessesaaquioffftododia.com.br","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessesaaquioffftododia.com.br']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-21T02:13:07Z","labels":["malicious-activity","phishing","brand:magalu"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acessesaaquioffftododia.com.br"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d50499c-a3fb-502c-856e-638f01dd34b9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-05T20:14:12Z","modified":"2025-08-05T20:14:12Z","name":"Phishing domain: acessmarkets.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating compound. Report & evidence: https://phishdestroy.io/domain/acessmarkets.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessmarkets.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-05T20:14:12Z","labels":["malicious-activity","phishing","brand:compound"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acessmarkets.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--de795ca0-04b3-5686-b4c0-4f0dc21df6f4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-21T03:19:52Z","modified":"2026-04-21T03:19:52Z","name":"Phishing domain: acesso.netempresa.tel","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating google. Report & evidence: https://phishdestroy.io/domain/acesso.netempresa.tel","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acesso.netempresa.tel']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-21T03:19:52Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acesso.netempresa.tel"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--145608e0-8eb9-5131-bba7-b370ab8ef4be","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-15T15:26:35Z","modified":"2025-10-15T15:26:35Z","name":"Phishing domain: acessoappwebssl1.dynv6.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bancobradesco. Report & evidence: https://phishdestroy.io/domain/acessoappwebssl1.dynv6.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessoappwebssl1.dynv6.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-15T15:26:35Z","labels":["malicious-activity","phishing","brand:bancobradesco"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acessoappwebssl1.dynv6.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b4749a0-232b-5583-a0ee-eda1685a1118","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-03T02:21:37Z","modified":"2026-07-03T02:21:37Z","name":"Phishing domain: acessocentralplus.online","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acessocentralplus.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessocentralplus.online']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-03T02:21:37Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acessocentralplus.online"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--40c38196-fb5a-5b8b-a2fb-972740418eb0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-14T02:27:44Z","modified":"2026-08-14T02:27:44Z","name":"Phishing domain: acessocert.netlify.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating tiktok. Report & evidence: https://phishdestroy.io/domain/acessocert.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessocert.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-14T02:27:44Z","labels":["malicious-activity","phishing","brand:tiktok"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acessocert.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c149d5ba-30e6-55ad-ba6e-631a6e064116","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-03T02:11:08Z","modified":"2026-07-03T02:11:08Z","name":"Phishing domain: acessoclientes.online","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acessoclientes.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessoclientes.online']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-03T02:11:08Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acessoclientes.online"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--79a93b55-22cc-5446-9f2b-8ab14a62b4a8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-27T02:22:15Z","modified":"2026-06-27T02:22:15Z","name":"Phishing domain: acessoclube.online","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acessoclube.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessoclube.online']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-27T02:22:15Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acessoclube.online"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--806cc565-0778-543f-a7dc-7d84a1ac033c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-14T02:28:57Z","modified":"2026-08-14T02:28:57Z","name":"Phishing domain: acessodhj.netlify.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating tiktok. Report & evidence: https://phishdestroy.io/domain/acessodhj.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessodhj.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-14T02:28:57Z","labels":["malicious-activity","phishing","brand:tiktok"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acessodhj.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca2802d8-a883-5cb2-a306-f87b46c6e8f6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T19:20:25Z","modified":"2026-02-13T19:20:25Z","name":"Phishing domain: acessodispositivo.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acessodispositivo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessodispositivo.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T19:20:25Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acessodispositivo.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--56fee259-911f-57b5-8d7d-62d57f57f693","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T00:20:11Z","modified":"2026-02-13T00:20:11Z","name":"Phishing domain: acessodosveiculosmg.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acessodosveiculosmg.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessodosveiculosmg.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T00:20:11Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acessodosveiculosmg.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0eec8eb1-ea03-55d0-8a05-f788b9c8ad92","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-16T17:58:56Z","modified":"2026-02-16T17:58:56Z","name":"Phishing domain: acessoficiosdemgminas.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acessoficiosdemgminas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessoficiosdemgminas.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-16T17:58:56Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acessoficiosdemgminas.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2871f4b-7658-50f0-a1db-12a661625596","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-15T02:23:04Z","modified":"2026-07-15T02:23:04Z","name":"Phishing domain: acessogoldnu.fun","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acessogoldnu.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessogoldnu.fun']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-15T02:23:04Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acessogoldnu.fun"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--95c14221-f9c4-5e63-863b-b9777902cf03","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-17T13:10:58Z","modified":"2025-11-17T13:10:58Z","name":"Phishing domain: acessoirrestrito.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acessoirrestrito.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessoirrestrito.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-17T13:10:58Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acessoirrestrito.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e9087ac-f576-50b1-9f04-4d511fdbf9c4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-15T02:16:11Z","modified":"2026-07-15T02:16:11Z","name":"Phishing domain: acessopremiumnu.fun","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acessopremiumnu.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessopremiumnu.fun']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-15T02:16:11Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acessopremiumnu.fun"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--feb3a4cb-b5b4-5add-956f-d1cb215e4e62","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-29T09:51:03Z","modified":"2025-11-29T09:51:03Z","name":"Phishing domain: acessoriafeira25.sbs","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acessoriafeira25.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessoriafeira25.sbs']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-29T09:51:03Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acessoriafeira25.sbs"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7e5e1c9-367d-5421-874b-0e7ddcabc97d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T14:42:15Z","modified":"2026-07-27T14:42:15Z","name":"Phishing domain: acessse.co","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating pedagiodigital. Report & evidence: https://phishdestroy.io/domain/acessse.co","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acessse.co']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T14:42:15Z","labels":["malicious-activity","phishing","brand:pedagiodigital"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acessse.co"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--333ac5eb-98db-5511-b083-51f3263269b0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-07T06:07:59Z","modified":"2026-05-07T06:07:59Z","name":"Phishing domain: acestokens.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Hyperliquid. Report & evidence: https://phishdestroy.io/domain/acestokens.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acestokens.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-07T06:07:59Z","labels":["malicious-activity","phishing","brand:hyperliquid"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acestokens.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--88fb8354-31de-55c9-8645-6f9d1d9ea287","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-23T18:55:02Z","modified":"2026-04-23T18:55:02Z","name":"Phishing domain: acestradex.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericscam. Report & evidence: https://phishdestroy.io/domain/acestradex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acestradex.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-23T18:55:02Z","labels":["malicious-activity","phishing","brand:genericscam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acestradex.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e804e979-48ce-5608-bede-c94bdc482f3d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-21T14:30:43Z","modified":"2026-05-21T14:30:43Z","name":"Phishing domain: acetrader.info","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/acetrader.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acetrader.info']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-21T14:30:43Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acetrader.info"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--28b4f00a-9d19-56f1-90aa-77ad9e7534d7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:53Z","modified":"2026-02-26T23:20:53Z","name":"Phishing domain: acetradevirtualpro.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bitcoin. Report & evidence: https://phishdestroy.io/domain/acetradevirtualpro.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acetradevirtualpro.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:53Z","labels":["malicious-activity","phishing","brand:bitcoin"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acetradevirtualpro.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--51914f21-51f0-5dbd-ab2e-87c99d93a968","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:35Z","modified":"2026-02-26T23:23:35Z","name":"Phishing domain: acetrders.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acetrders.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acetrders.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:35Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acetrders.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--43c9770d-eb85-58f7-b52d-b99de02a3af3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-07-11T13:06:07Z","modified":"2025-07-11T13:06:07Z","name":"Phishing domain: acewalletdrainer.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/acewalletdrainer.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acewalletdrainer.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-07-11T13:06:07Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acewalletdrainer.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ea66530-10a2-5bb8-8a04-e8ab0d3a7e33","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-05T13:14:09Z","modified":"2026-01-05T13:14:09Z","name":"Phishing domain: acey.bet","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/acey.bet","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acey.bet']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-05T13:14:09Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acey.bet"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d46d873-388e-5542-8ce2-107585359f33","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-05T16:52:23Z","modified":"2026-02-05T16:52:23Z","name":"Phishing domain: acezo.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/acezo.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acezo.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-05T16:52:23Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acezo.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cb284ca-f413-5ef3-8412-9767fcebb75d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-06T11:36:35Z","modified":"2025-08-06T11:36:35Z","name":"Phishing domain: ach-sushi.pro","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating SushiSwap. Report & evidence: https://phishdestroy.io/domain/ach-sushi.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ach-sushi.pro']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-06T11:36:35Z","labels":["malicious-activity","phishing","brand:sushiswap"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ach-sushi.pro"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bb66d22-2e97-50ea-8b56-93511484b62d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-01T04:55:43Z","modified":"2026-04-01T04:55:43Z","name":"Phishing domain: ach-swap.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ach-swap.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ach-swap.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-01T04:55:43Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ach-swap.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--17742164-dcc3-5e78-9de4-4aa3c2d14c1f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-31T14:08:51Z","modified":"2026-07-31T14:08:51Z","name":"Phishing domain: achelrblx.blogspot.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/achelrblx.blogspot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'achelrblx.blogspot.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-31T14:08:51Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/achelrblx.blogspot.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--88c8551a-88f5-566c-be36-59ad13627978","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-16T01:30:30Z","modified":"2025-11-16T01:30:30Z","name":"Phishing domain: acheter-trx.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acheter-trx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acheter-trx.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-16T01:30:30Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acheter-trx.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6a81203-72b5-5c51-9448-6024d1601877","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-02T16:19:04Z","modified":"2025-12-02T16:19:04Z","name":"Phishing domain: achieversjourneyi5.blogspot.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/achieversjourneyi5.blogspot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'achieversjourneyi5.blogspot.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-02T16:19:04Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/achieversjourneyi5.blogspot.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b69bb55-dfff-56f1-948e-17cddb20151b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-28T16:37:49Z","modified":"2026-05-28T16:37:49Z","name":"Phishing domain: achillscoinbase.netlify.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/achillscoinbase.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'achillscoinbase.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-28T16:37:49Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/achillscoinbase.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf395911-796f-525c-8313-87cba7a61478","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-31T08:05:56Z","modified":"2026-07-31T08:05:56Z","name":"Phishing domain: achonapp.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/achonapp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'achonapp.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-31T08:05:56Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/achonapp.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--24f94a55-cec5-55e5-bead-90bea50ab944","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-19T17:10:07Z","modified":"2026-07-19T17:10:07Z","name":"Phishing domain: aciaa.org.br","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aciaa.org.br","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aciaa.org.br']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-19T17:10:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aciaa.org.br"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--86123a89-2815-5f97-9108-06d39f6fed50","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-03T15:31:11Z","modified":"2026-06-03T15:31:11Z","name":"Phishing domain: acilproduksiyon.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating easybank. Report & evidence: https://phishdestroy.io/domain/acilproduksiyon.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acilproduksiyon.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-03T15:31:11Z","labels":["malicious-activity","phishing","brand:easybank"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acilproduksiyon.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9f507b9-9a64-55fc-8d04-2f125556bff2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-06T19:26:02Z","modified":"2026-02-06T19:26:02Z","name":"Phishing domain: acion.sbs","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/acion.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acion.sbs']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-06T19:26:02Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acion.sbs"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c50e354b-5960-593e-9743-d44b577f9b15","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-22T15:54:05Z","modified":"2026-03-22T15:54:05Z","name":"Phishing domain: acir.postofficeweb.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acir.postofficeweb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acir.postofficeweb.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-22T15:54:05Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acir.postofficeweb.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--291a498a-b9d0-5ce1-9bcf-aefbad2c50dd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-10T16:57:48Z","modified":"2026-02-10T16:57:48Z","name":"Phishing domain: acivinuusmc.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating nordea. Report & evidence: https://phishdestroy.io/domain/acivinuusmc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acivinuusmc.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-10T16:57:48Z","labels":["malicious-activity","phishing","brand:nordea"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acivinuusmc.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--824a85c0-631c-54a8-bc62-fff4fab136b4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-31T16:59:45Z","modified":"2026-03-31T16:59:45Z","name":"Phishing domain: ack.securebankinggroup.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ack.securebankinggroup.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ack.securebankinggroup.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-31T16:59:45Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ack.securebankinggroup.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d703b65a-ac14-5e23-b970-5fb2a591deb6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:26Z","modified":"2026-02-26T23:22:26Z","name":"Phishing domain: ackewor.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ackewor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ackewor.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:26Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ackewor.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3037a2a7-b896-5214-84c1-4d9cd7645082","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-19T08:06:37Z","modified":"2025-10-19T08:06:37Z","name":"Phishing domain: ackisaffiliate.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ackisaffiliate.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ackisaffiliate.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-19T08:06:37Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ackisaffiliate.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--60a38b0e-530c-55fa-adb5-7e9eb8f69a0e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-12T16:21:30Z","modified":"2026-07-12T16:21:30Z","name":"Phishing domain: acl-freightflow.top","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acl-freightflow.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acl-freightflow.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-12T16:21:30Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acl-freightflow.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--53b9d373-29dc-56ce-a32d-e8f6d4022a3a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-15T15:26:13Z","modified":"2025-10-15T15:26:13Z","name":"Phishing domain: aclaracion.digital","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aclaracion.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aclaracion.digital']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-15T15:26:13Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aclaracion.digital"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--346c020c-608d-558c-80bd-ff19977c81a2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T01:42:01Z","modified":"2026-02-13T01:42:01Z","name":"Phishing domain: acllfq.icu","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acllfq.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acllfq.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T01:42:01Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acllfq.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--91692d7c-d22d-5cc4-849a-629df7637292","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-28T21:09:16Z","modified":"2026-07-28T21:09:16Z","name":"Phishing domain: acmecoinwave.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating MetaMask. Report & evidence: https://phishdestroy.io/domain/acmecoinwave.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acmecoinwave.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-28T21:09:16Z","labels":["malicious-activity","phishing","brand:metamask"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acmecoinwave.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6e049b7-6d47-5a28-b058-d8874e49dda5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-21T14:27:39Z","modified":"2026-05-21T14:27:39Z","name":"Phishing domain: acn-migration.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/acn-migration.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acn-migration.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-21T14:27:39Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acn-migration.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--629a6815-d510-5bac-87bc-7dbc2ea963a1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T12:02:03Z","modified":"2026-07-27T12:02:03Z","name":"Phishing domain: acnesic.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acnesic.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acnesic.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T12:02:03Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acnesic.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d9f919a-91a2-529f-9425-f5731683d65c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T05:05:33Z","modified":"2026-07-27T05:05:33Z","name":"Phishing domain: acnportfolio.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acnportfolio.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acnportfolio.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T05:05:33Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acnportfolio.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--35705d97-1ced-5c08-98ee-2da64b8727fc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T13:09:45Z","modified":"2026-06-15T13:09:45Z","name":"Phishing domain: aco07ui.vip","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aco07ui.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aco07ui.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T13:09:45Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aco07ui.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4c5444e-3089-5443-bf38-d439e029bfd8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-02T16:05:17Z","modified":"2026-08-02T16:05:17Z","name":"Phishing domain: acocdn.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acocdn.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acocdn.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-02T16:05:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acocdn.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e81960e-ab41-58ff-b792-2745f4e56a76","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-23T13:02:13Z","modified":"2025-09-23T13:02:13Z","name":"Phishing domain: acon-traders.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ethereum. Report & evidence: https://phishdestroy.io/domain/acon-traders.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acon-traders.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-23T13:02:13Z","labels":["malicious-activity","phishing","brand:ethereum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acon-traders.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bff259d0-3777-5488-b26d-14c6d9f2648b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-24T06:22:29Z","modified":"2026-05-24T06:22:29Z","name":"Phishing domain: acoount-girocash.fun","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acoount-girocash.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acoount-girocash.fun']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-24T06:22:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acoount-girocash.fun"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--54ee82bf-3096-5804-8cad-a3a055df4d1e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-24T12:48:39Z","modified":"2026-06-24T12:48:39Z","name":"Phishing domain: acordo-certo.vercel.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acordo-certo.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acordo-certo.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-24T12:48:39Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acordo-certo.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--afdc9b59-9c2a-5125-a7e6-f1fb1384853b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:36Z","modified":"2026-02-26T23:20:36Z","name":"Phishing domain: acornbnk.live.luminacapital.pro","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating foundation. Report & evidence: https://phishdestroy.io/domain/acornbnk.live.luminacapital.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acornbnk.live.luminacapital.pro']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:36Z","labels":["malicious-activity","phishing","brand:foundation"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acornbnk.live.luminacapital.pro"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--57445690-58ad-587e-8135-f325d0b9b5a0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-06T12:41:35Z","modified":"2026-03-06T12:41:35Z","name":"Phishing domain: acountcourse-ads.sbs","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/acountcourse-ads.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acountcourse-ads.sbs']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-06T12:41:35Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acountcourse-ads.sbs"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d7e39b1-e0e5-59c7-8ec4-47cb016156f7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-11T04:50:22Z","modified":"2026-03-11T04:50:22Z","name":"Phishing domain: acozinhadepedra.online","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acozinhadepedra.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acozinhadepedra.online']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-11T04:50:22Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acozinhadepedra.online"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b9b3cc4-589d-5ce2-903f-739b35b57def","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-12T14:28:46Z","modified":"2026-07-12T14:28:46Z","name":"Phishing domain: acpadghanicp-rgb.github.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acpadghanicp-rgb.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acpadghanicp-rgb.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-12T14:28:46Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acpadghanicp-rgb.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--739df406-d7a3-5cd1-be78-31a8ef3848a8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T09:31:13Z","modified":"2026-02-13T09:31:13Z","name":"Phishing domain: acpartners.live","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acpartners.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acpartners.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T09:31:13Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acpartners.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2fce11b-07df-5c62-8c84-604246d8e3bc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-14T01:34:01Z","modified":"2025-12-14T01:34:01Z","name":"Phishing domain: acpro.baseportal.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acpro.baseportal.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acpro.baseportal.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-14T01:34:01Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acpro.baseportal.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d582401f-166f-5e25-b798-c43446acc6c7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-22T13:39:58Z","modified":"2026-06-22T13:39:58Z","name":"Phishing domain: acquisition-binance.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Binance. Report & evidence: https://phishdestroy.io/domain/acquisition-binance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acquisition-binance.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-22T13:39:58Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acquisition-binance.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c295ded7-582a-5949-b812-3ba02b01d368","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-03T15:06:20Z","modified":"2025-11-03T15:06:20Z","name":"Phishing domain: acrassbredge.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Across Protocol. Report & evidence: https://phishdestroy.io/domain/acrassbredge.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acrassbredge.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-03T15:06:20Z","labels":["malicious-activity","phishing","brand:across protocol"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acrassbredge.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b93d25f-b487-5f50-aae6-e5d3139be9cb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T05:11:17Z","modified":"2026-07-27T05:11:17Z","name":"Phishing domain: acrelegacy.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acrelegacy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acrelegacy.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T05:11:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acrelegacy.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--42d585be-0809-5916-8a5f-e974edf3144e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-07T12:43:49Z","modified":"2025-08-07T12:43:49Z","name":"Phishing domain: acrescoin.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/acrescoin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acrescoin.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-07T12:43:49Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acrescoin.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e63a5fc-8d63-5ac6-91df-3da1a03f766e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-18T20:01:14Z","modified":"2026-03-18T20:01:14Z","name":"Phishing domain: acrestbk.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acrestbk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acrestbk.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-18T20:01:14Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acrestbk.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dadd7ac6-53e7-589c-a39a-c339ab435c3c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-17T08:38:03Z","modified":"2025-09-17T08:38:03Z","name":"Phishing domain: acrodrome.financial","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acrodrome.financial","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acrodrome.financial']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-17T08:38:03Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acrodrome.financial"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--363cc774-2691-5c82-852a-a057b14ddfaa","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-12T21:00:01Z","modified":"2026-05-12T21:00:01Z","name":"Phishing domain: across.app.bridge.en-v4.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Across Protocol. Report & evidence: https://phishdestroy.io/domain/across.app.bridge.en-v4.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'across.app.bridge.en-v4.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-12T21:00:01Z","labels":["malicious-activity","phishing","brand:across protocol"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/across.app.bridge.en-v4.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d18ca54-d7f6-5d72-a86b-83127fb49781","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:20Z","modified":"2026-02-26T23:21:20Z","name":"Phishing domain: across.to-api-v3-app-wailet.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Across Protocol. Report & evidence: https://phishdestroy.io/domain/across.to-api-v3-app-wailet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'across.to-api-v3-app-wailet.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:20Z","labels":["malicious-activity","phishing","brand:across protocol"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/across.to-api-v3-app-wailet.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--69967713-91fe-5f13-98c1-604920fc804d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:31Z","modified":"2026-02-26T23:19:31Z","name":"Phishing domain: across.to-api-v3-app.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Across Protocol. Report & evidence: https://phishdestroy.io/domain/across.to-api-v3-app.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'across.to-api-v3-app.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:31Z","labels":["malicious-activity","phishing","brand:across protocol"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/across.to-api-v3-app.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8aa8e39-66cb-50d0-8a7b-864b228619f7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:42Z","modified":"2026-02-26T23:23:42Z","name":"Phishing domain: across.to-protocol-api-v3.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Across Protocol. Report & evidence: https://phishdestroy.io/domain/across.to-protocol-api-v3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'across.to-protocol-api-v3.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:42Z","labels":["malicious-activity","phishing","brand:across protocol"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/across.to-protocol-api-v3.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac345129-cbe5-51b5-85d2-e08caf0a3cfa","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-02T15:43:00Z","modified":"2026-05-02T15:43:00Z","name":"Phishing domain: across.to.bridge-and-swap.to","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Across Protocol. Report & evidence: https://phishdestroy.io/domain/across.to.bridge-and-swap.to","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'across.to.bridge-and-swap.to']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-02T15:43:00Z","labels":["malicious-activity","phishing","brand:across protocol"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/across.to.bridge-and-swap.to"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--88a36c9e-82e3-5c03-8612-1980aecff046","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-22T13:21:26Z","modified":"2026-06-22T13:21:26Z","name":"Phishing domain: acrossapp.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Across Protocol. Report & evidence: https://phishdestroy.io/domain/acrossapp.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acrossapp.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-22T13:21:26Z","labels":["malicious-activity","phishing","brand:across protocol"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acrossapp.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a89f2429-12ce-5ca7-a1df-b7b8cf9561ec","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-19T02:06:59Z","modified":"2025-09-19T02:06:59Z","name":"Phishing domain: acrossprotacol.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Across Protocol. Report & evidence: https://phishdestroy.io/domain/acrossprotacol.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acrossprotacol.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-19T02:06:59Z","labels":["malicious-activity","phishing","brand:across protocol"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acrossprotacol.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--013f1efa-028e-5575-a503-41f07103e926","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:29Z","modified":"2026-02-26T23:24:29Z","name":"Phishing domain: acrossprotocol.live","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Across Protocol. Report & evidence: https://phishdestroy.io/domain/acrossprotocol.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acrossprotocol.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:29Z","labels":["malicious-activity","phishing","brand:across protocol"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acrossprotocol.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc9cde79-cf46-5438-85ab-3ea17f43d797","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-24T16:49:49Z","modified":"2026-04-24T16:49:49Z","name":"Phishing domain: acrossprotocol.pro","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Across Protocol. Report & evidence: https://phishdestroy.io/domain/acrossprotocol.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acrossprotocol.pro']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-24T16:49:49Z","labels":["malicious-activity","phishing","brand:across protocol"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acrossprotocol.pro"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--34a2cb78-07c8-5358-9813-acc8d64af8bf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-11T16:31:07Z","modified":"2026-07-11T16:31:07Z","name":"Phishing domain: acrossrelay.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/acrossrelay.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acrossrelay.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-11T16:31:07Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acrossrelay.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--057632b4-9c71-5cf2-9700-ec9e838db865","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-19T02:06:58Z","modified":"2025-09-19T02:06:58Z","name":"Phishing domain: acrosstobredge.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Across Protocol. Report & evidence: https://phishdestroy.io/domain/acrosstobredge.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acrosstobredge.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-19T02:06:58Z","labels":["malicious-activity","phishing","brand:across protocol"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acrosstobredge.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc44b06e-3b4f-5b05-b856-83a6ff8c43c9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-19T03:28:48Z","modified":"2025-11-19T03:28:48Z","name":"Phishing domain: acrosstobrldge.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Across Protocol. Report & evidence: https://phishdestroy.io/domain/acrosstobrldge.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acrosstobrldge.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-19T03:28:48Z","labels":["malicious-activity","phishing","brand:across protocol"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acrosstobrldge.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8eca6f62-8ebf-567c-8931-9cbc305e41fe","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-19T02:06:48Z","modified":"2025-09-19T02:06:48Z","name":"Phishing domain: acrosstozora.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Zora. Report & evidence: https://phishdestroy.io/domain/acrosstozora.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acrosstozora.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-19T02:06:48Z","labels":["malicious-activity","phishing","brand:zora"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acrosstozora.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1054aa93-1da9-5f7d-9b0b-6bc7ab6733f1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-01T15:34:41Z","modified":"2026-05-01T15:34:41Z","name":"Phishing domain: acruast.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating paxful. Report & evidence: https://phishdestroy.io/domain/acruast.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acruast.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-01T15:34:41Z","labels":["malicious-activity","phishing","brand:paxful"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acruast.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1ac3418-b2c2-53a4-ae45-e8413863de7f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:15Z","modified":"2026-02-26T23:24:15Z","name":"Phishing domain: acrylicinvestment.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating compound. Report & evidence: https://phishdestroy.io/domain/acrylicinvestment.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acrylicinvestment.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:15Z","labels":["malicious-activity","phishing","brand:compound"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acrylicinvestment.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9b7d894-5e56-58e0-a886-d184f088096a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-28T23:30:39Z","modified":"2026-03-28T23:30:39Z","name":"Phishing domain: acs-4qz.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/acs-4qz.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acs-4qz.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-28T23:30:39Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acs-4qz.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2331f0e5-1bfd-5914-8cc1-5266accac2bf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-30T00:40:13Z","modified":"2025-12-30T00:40:13Z","name":"Phishing domain: acs-ch.info","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acs-ch.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acs-ch.info']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-30T00:40:13Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acs-ch.info"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1842bc14-5c46-5ce6-8b94-2a5871a1cf8a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-17T15:46:02Z","modified":"2026-06-17T15:46:02Z","name":"Phishing domain: acs.tensorai.co.uk","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Tensor. Report & evidence: https://phishdestroy.io/domain/acs.tensorai.co.uk","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acs.tensorai.co.uk']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-17T15:46:02Z","labels":["malicious-activity","phishing","brand:tensor"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acs.tensorai.co.uk"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--203a14d5-7216-554f-9021-0f1a39f3686c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-20T21:56:59Z","modified":"2026-02-20T21:56:59Z","name":"Phishing domain: acssusdc.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acssusdc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acssusdc.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-20T21:56:59Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acssusdc.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b0ce438-d827-56b6-9a34-35c6163132a8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-21T02:50:14Z","modified":"2026-02-21T02:50:14Z","name":"Phishing domain: act.robloxvictims.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Roblox. Report & evidence: https://phishdestroy.io/domain/act.robloxvictims.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'act.robloxvictims.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-21T02:50:14Z","labels":["malicious-activity","phishing","brand:roblox"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/act.robloxvictims.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4116fac8-8db3-5348-ae96-a397f35a1018","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-09T02:22:19Z","modified":"2026-07-09T02:22:19Z","name":"Phishing domain: act1varcu3nta.iceiy.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating microsoft. Report & evidence: https://phishdestroy.io/domain/act1varcu3nta.iceiy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'act1varcu3nta.iceiy.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-09T02:22:19Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/act1varcu3nta.iceiy.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--05fd2598-de83-50d7-8342-5d6815904fbf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-25T17:07:35Z","modified":"2026-03-25T17:07:35Z","name":"Phishing domain: act1vedapps.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/act1vedapps.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'act1vedapps.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-25T17:07:35Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/act1vedapps.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--054c8858-c7b9-594e-a682-e1ef86c6389c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-30T13:51:11Z","modified":"2026-07-30T13:51:11Z","name":"Phishing domain: actfun.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/actfun.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actfun.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-30T13:51:11Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/actfun.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd8b4aec-1ea5-5893-919d-9e64abbf4f75","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-23T07:45:35Z","modified":"2026-03-23T07:45:35Z","name":"Phishing domain: actif-evenementiel.fr","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/actif-evenementiel.fr","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actif-evenementiel.fr']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-23T07:45:35Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/actif-evenementiel.fr"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--396a0e86-020e-5512-a9d2-69de096cfac9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-09T10:23:19Z","modified":"2025-12-09T10:23:19Z","name":"Phishing domain: action-coinbase-exten.created.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/action-coinbase-exten.created.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'action-coinbase-exten.created.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-09T10:23:19Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/action-coinbase-exten.created.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5ab60e8-5979-58f3-9356-54d76ca3716a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-09T19:05:59Z","modified":"2025-12-09T19:05:59Z","name":"Phishing domain: action-coinbasext.created.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/action-coinbasext.created.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'action-coinbasext.created.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-09T19:05:59Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/action-coinbasext.created.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9590a071-1a79-5172-b3a1-10a399537079","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-06T15:42:21Z","modified":"2026-05-06T15:42:21Z","name":"Phishing domain: action-execution.accounts-admin-agency.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating facebook. Report & evidence: https://phishdestroy.io/domain/action-execution.accounts-admin-agency.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'action-execution.accounts-admin-agency.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-06T15:42:21Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/action-execution.accounts-admin-agency.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4fe6b9f-64d2-5e2e-aa81-8dffbdba2c65","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:13Z","modified":"2026-02-26T23:21:13Z","name":"Phishing domain: action-kash-upzold-web-legiz-auth.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/action-kash-upzold-web-legiz-auth.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'action-kash-upzold-web-legiz-auth.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:13Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/action-kash-upzold-web-legiz-auth.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3503d2b7-f856-5919-9db7-f542899f6777","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-27T05:43:32Z","modified":"2026-04-27T05:43:32Z","name":"Phishing domain: action-livlog-en-us.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/action-livlog-en-us.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'action-livlog-en-us.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-27T05:43:32Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/action-livlog-en-us.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--18ee1eef-0c63-50f5-8d35-15ff6b2cc5ae","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-08T11:23:35Z","modified":"2026-05-08T11:23:35Z","name":"Phishing domain: action-meta.invoice-ads-manager.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating facebook. Report & evidence: https://phishdestroy.io/domain/action-meta.invoice-ads-manager.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'action-meta.invoice-ads-manager.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-08T11:23:35Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/action-meta.invoice-ads-manager.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--57d130d8-579d-55d0-a528-af9518c97996","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-13T01:57:50Z","modified":"2026-04-13T01:57:50Z","name":"Phishing domain: action-wallet-ledgjor-live.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/action-wallet-ledgjor-live.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'action-wallet-ledgjor-live.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-13T01:57:50Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/action-wallet-ledgjor-live.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0aa4b21-e179-58c4-837e-70223fd5b502","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-07T12:38:05Z","modified":"2025-11-07T12:38:05Z","name":"Phishing domain: action.pub","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/action.pub","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'action.pub']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-07T12:38:05Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/action.pub"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--53c83a57-35cd-53aa-9736-6d4edc661f36","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-18T02:32:08Z","modified":"2025-12-18T02:32:08Z","name":"Phishing domain: actionbdh.wuaze.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/actionbdh.wuaze.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actionbdh.wuaze.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-18T02:32:08Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/actionbdh.wuaze.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4659281-9259-5c40-ab19-110ca65e6d76","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-11T17:49:23Z","modified":"2026-06-11T17:49:23Z","name":"Phishing domain: actionlinkwireless.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/actionlinkwireless.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actionlinkwireless.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-11T17:49:23Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/actionlinkwireless.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7ae66cf-8546-5764-ad08-674b446d0fe2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-23T23:46:06Z","modified":"2026-02-23T23:46:06Z","name":"Phishing domain: actions-gemini.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating gemini. Report & evidence: https://phishdestroy.io/domain/actions-gemini.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actions-gemini.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-23T23:46:06Z","labels":["malicious-activity","phishing","brand:gemini"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/actions-gemini.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a2b69ce-26c3-521c-a4c3-385e998258bb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-23T13:02:54Z","modified":"2025-09-23T13:02:54Z","name":"Phishing domain: actiontosavethechildren.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/actiontosavethechildren.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actiontosavethechildren.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-23T13:02:54Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/actiontosavethechildren.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--11c5c395-e0d7-593e-a6f3-054492fd555b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: actionverification3641.iceiy.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/actionverification3641.iceiy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actionverification3641.iceiy.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/actionverification3641.iceiy.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e29a8445-d27f-52d8-9eff-eccdd6c8212b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-07T16:34:33Z","modified":"2025-08-07T16:34:33Z","name":"Phishing domain: actiunion.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating foundation. Report & evidence: https://phishdestroy.io/domain/actiunion.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actiunion.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-07T16:34:33Z","labels":["malicious-activity","phishing","brand:foundation"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/actiunion.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--19fb94d8-e42a-5c11-b5a5-5c28376d260c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-28T10:53:12Z","modified":"2025-10-28T10:53:12Z","name":"Phishing domain: activacoomeva.webcindario.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Linea. Report & evidence: https://phishdestroy.io/domain/activacoomeva.webcindario.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activacoomeva.webcindario.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-28T10:53:12Z","labels":["malicious-activity","phishing","brand:linea"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/activacoomeva.webcindario.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf93db15-0e02-5353-8ee5-3cec4ebbf9dd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:39Z","modified":"2026-02-26T23:24:39Z","name":"Phishing domain: activameonline.fun","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bantrab. Report & evidence: https://phishdestroy.io/domain/activameonline.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activameonline.fun']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:39Z","labels":["malicious-activity","phishing","brand:bantrab"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/activameonline.fun"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8581fc0e-dfc7-58b3-8ed5-699cdf96d36d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-06T02:51:29Z","modified":"2026-08-06T02:51:29Z","name":"Phishing domain: activar-bhd.zya.me","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/activar-bhd.zya.me","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activar-bhd.zya.me']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-06T02:51:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/activar-bhd.zya.me"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f905f469-a14f-5dd6-8443-c0e36a85eaae","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-23T02:20:35Z","modified":"2026-07-23T02:20:35Z","name":"Phishing domain: activarcorreoelectronico.iceiy.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating microsoft. Report & evidence: https://phishdestroy.io/domain/activarcorreoelectronico.iceiy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activarcorreoelectronico.iceiy.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-23T02:20:35Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/activarcorreoelectronico.iceiy.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec5e6d4f-5243-5c1d-a414-f0adb5949543","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: activarcuernta.iceiy.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/activarcuernta.iceiy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activarcuernta.iceiy.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/activarcuernta.iceiy.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--60262e88-e405-5dc6-9c5e-64d767331c27","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:54Z","modified":"2026-02-26T23:22:54Z","name":"Phishing domain: activate-exchange.pro","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Facebook. Report & evidence: https://phishdestroy.io/domain/activate-exchange.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activate-exchange.pro']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:54Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/activate-exchange.pro"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5edf2b85-3958-5fe3-b1b6-f66a6cdeb985","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-11T20:54:04Z","modified":"2026-04-11T20:54:04Z","name":"Phishing domain: activate-kotaiproject.pro","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating revolut. Report & evidence: https://phishdestroy.io/domain/activate-kotaiproject.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activate-kotaiproject.pro']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-11T20:54:04Z","labels":["malicious-activity","phishing","brand:revolut"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/activate-kotaiproject.pro"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--de6c5693-f03e-560d-b442-259dbca62f78","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-30T15:41:36Z","modified":"2025-11-30T15:41:36Z","name":"Phishing domain: activate-online.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/activate-online.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activate-online.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-30T15:41:36Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/activate-online.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b410cfc1-efba-55fe-92a7-10d3823f3a8a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-24T00:10:01Z","modified":"2026-03-24T00:10:01Z","name":"Phishing domain: activate-pump.fun","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Pump.fun. Report & evidence: https://phishdestroy.io/domain/activate-pump.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activate-pump.fun']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-24T00:10:01Z","labels":["malicious-activity","phishing","brand:pump.fun"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/activate-pump.fun"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fec1bea8-b455-5d70-b4a3-592c6a2808b9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-08T14:14:02Z","modified":"2025-09-08T14:14:02Z","name":"Phishing domain: activate.pcrairdrop.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/activate.pcrairdrop.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activate.pcrairdrop.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-08T14:14:02Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/activate.pcrairdrop.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd515e32-6914-5314-bc36-ec489cc8bfbe","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-29T17:03:20Z","modified":"2025-08-29T17:03:20Z","name":"Phishing domain: activatednet.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/activatednet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activatednet.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-29T17:03:20Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/activatednet.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d9febfe-ee12-577d-8a79-7456dc5a9ae5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-02T16:15:02Z","modified":"2026-03-02T16:15:02Z","name":"Phishing domain: activatems.live","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/activatems.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activatems.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-02T16:15:02Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/activatems.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcf59b90-7c6e-5c40-a0ad-79feba973d2f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:57Z","modified":"2026-02-26T23:20:57Z","name":"Phishing domain: activatemycoinbasevault.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/activatemycoinbasevault.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activatemycoinbasevault.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:57Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/activatemycoinbasevault.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--211b446f-efb8-5dc9-aba9-9ad4f9ec8015","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:06Z","modified":"2026-02-26T23:21:06Z","name":"Phishing domain: activatep2ptrading.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/activatep2ptrading.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activatep2ptrading.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:06Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/activatep2ptrading.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8588a252-fb5f-5c6e-bff4-554cc5843a42","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-07T19:03:02Z","modified":"2025-11-07T19:03:02Z","name":"Phishing domain: activatep2ptrading.com.activatep2ptrade.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Facebook. Report & evidence: https://phishdestroy.io/domain/activatep2ptrading.com.activatep2ptrade.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activatep2ptrading.com.activatep2ptrade.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-07T19:03:02Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/activatep2ptrading.com.activatep2ptrade.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1538ebd7-9b98-51cd-84be-a35f4a8c1aab","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-30T03:46:23Z","modified":"2026-05-30T03:46:23Z","name":"Phishing domain: activatetron.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/activatetron.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activatetron.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-30T03:46:23Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/activatetron.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e84acbc-6739-593e-ae3f-aa42f5af490e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-04T02:38:46Z","modified":"2025-11-04T02:38:46Z","name":"Phishing domain: activateuser.onrender.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/activateuser.onrender.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activateuser.onrender.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-04T02:38:46Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/activateuser.onrender.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb96184c-7881-5bee-a35b-07a052b0d3a0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-16T07:53:13Z","modified":"2025-09-16T07:53:13Z","name":"Phishing domain: activationme.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/activationme.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activationme.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-16T07:53:13Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/activationme.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--21dfdfd2-fcb8-5a5e-895c-6629f85aaf62","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-30T02:41:25Z","modified":"2026-01-30T02:41:25Z","name":"Phishing domain: activator-kmspico.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/activator-kmspico.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activator-kmspico.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-30T02:41:25Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/activator-kmspico.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9082325-9633-5ae9-be63-145aa5436185","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-19T16:56:13Z","modified":"2026-02-19T16:56:13Z","name":"Phishing domain: activators-kms.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/activators-kms.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activators-kms.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-19T16:56:13Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/activators-kms.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b00ccac3-3231-50c7-a860-811c4990f8e1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-29T16:35:51Z","modified":"2026-06-29T16:35:51Z","name":"Phishing domain: active-emojis-478041.framer.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Trezor. Report & evidence: https://phishdestroy.io/domain/active-emojis-478041.framer.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'active-emojis-478041.framer.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-29T16:35:51Z","labels":["malicious-activity","phishing","brand:trezor"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/active-emojis-478041.framer.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--abeea8ba-98bb-50b6-84df-4cfb85f4acbe","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-07-12T13:59:09Z","modified":"2025-07-12T13:59:09Z","name":"Phishing domain: active-exchange.pro","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Facebook. Report & evidence: https://phishdestroy.io/domain/active-exchange.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'active-exchange.pro']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-07-12T13:59:09Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/active-exchange.pro"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf5b19da-6560-59bf-b745-6a440158d992","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-23T01:45:54Z","modified":"2026-03-23T01:45:54Z","name":"Phishing domain: active-hub.fun","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/active-hub.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'active-hub.fun']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-23T01:45:54Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/active-hub.fun"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1a3d283-3f83-560d-8816-0ee0c400bf94","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-11T15:24:06Z","modified":"2026-05-11T15:24:06Z","name":"Phishing domain: active-meta.accounts-admin-agency.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating metamask. Report & evidence: https://phishdestroy.io/domain/active-meta.accounts-admin-agency.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'active-meta.accounts-admin-agency.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-11T15:24:06Z","labels":["malicious-activity","phishing","brand:metamask"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/active-meta.accounts-admin-agency.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f491583a-7d2d-5a3d-b077-9b6b6f882c7f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-19T18:18:14Z","modified":"2025-11-19T18:18:14Z","name":"Phishing domain: active-nft.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating OpenSea. Report & evidence: https://phishdestroy.io/domain/active-nft.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'active-nft.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-19T18:18:14Z","labels":["malicious-activity","phishing","brand:opensea"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/active-nft.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5e22c3f-ebb1-5827-bbb2-c888be68b57a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:27Z","modified":"2026-02-26T23:20:27Z","name":"Phishing domain: active-suites-terzor.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Sui. Report & evidence: https://phishdestroy.io/domain/active-suites-terzor.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'active-suites-terzor.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:27Z","labels":["malicious-activity","phishing","brand:sui"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/active-suites-terzor.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd517a2b-6a7b-586c-af35-ff133f295cdc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-25T00:13:38Z","modified":"2025-10-25T00:13:38Z","name":"Phishing domain: active.network-panel-zone.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating facebook. Report & evidence: https://phishdestroy.io/domain/active.network-panel-zone.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'active.network-panel-zone.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-25T00:13:38Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/active.network-panel-zone.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddc4feed-3272-56aa-b29b-fa60d6046efb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-28T12:20:22Z","modified":"2025-09-28T12:20:22Z","name":"Phishing domain: active.swiftexchange.live","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/active.swiftexchange.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'active.swiftexchange.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-28T12:20:22Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/active.swiftexchange.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7e0fce9-ab60-50f2-bb7b-e5c97e33b50a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T14:57:34Z","modified":"2026-02-13T14:57:34Z","name":"Phishing domain: activedutycup.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating dota 2. Report & evidence: https://phishdestroy.io/domain/activedutycup.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activedutycup.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T14:57:34Z","labels":["malicious-activity","phishing","brand:dota 2"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/activedutycup.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5596cf59-93a6-5071-abd9-88e72e142abb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-07T18:12:48Z","modified":"2025-11-07T18:12:48Z","name":"Phishing domain: activefirma.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating dhl. Report & evidence: https://phishdestroy.io/domain/activefirma.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activefirma.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-07T18:12:48Z","labels":["malicious-activity","phishing","brand:dhl"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/activefirma.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef82a164-5171-5075-ba0b-7c4305d768f0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:24Z","modified":"2026-02-26T23:23:24Z","name":"Phishing domain: activefusionnet.vercel.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/activefusionnet.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activefusionnet.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:24Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/activefusionnet.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fb1c7c4-e0eb-5d07-9650-8dfdec3d9d18","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:55:14Z","modified":"2026-07-27T04:55:14Z","name":"Phishing domain: activefxgrant.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/activefxgrant.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activefxgrant.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:55:14Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/activefxgrant.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4be2c8b5-95a4-5648-807c-3418a18fb7ee","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-13T12:57:43Z","modified":"2026-05-13T12:57:43Z","name":"Phishing domain: activegate.shop","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/activegate.shop","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activegate.shop']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-13T12:57:43Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/activegate.shop"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3044a4e5-46b7-5b88-9481-df77499d7e68","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-08T19:06:25Z","modified":"2025-08-08T19:06:25Z","name":"Phishing domain: activeglobalskymining.click","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/activeglobalskymining.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activeglobalskymining.click']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-08T19:06:25Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/activeglobalskymining.click"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--de187e82-57cc-5c86-9ca9-d94d6d3e22f3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:40Z","modified":"2026-02-26T23:22:40Z","name":"Phishing domain: activeoptedstream.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/activeoptedstream.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activeoptedstream.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:40Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/activeoptedstream.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a92e676-6ce0-5d30-99fa-e75c9796d411","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:29Z","modified":"2026-02-26T23:22:29Z","name":"Phishing domain: activepimain.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/activepimain.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activepimain.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/activepimain.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7aa01a92-75d3-50f6-9453-b92a8d1bf4d9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-07-12T17:34:45Z","modified":"2025-07-12T17:34:45Z","name":"Phishing domain: activepremiumtrade.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ethereum. Report & evidence: https://phishdestroy.io/domain/activepremiumtrade.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activepremiumtrade.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-07-12T17:34:45Z","labels":["malicious-activity","phishing","brand:ethereum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/activepremiumtrade.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb08f427-d52d-57cc-a498-ac057a4e5d09","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-04T21:37:05Z","modified":"2026-04-04T21:37:05Z","name":"Phishing domain: activesecportalinc.info","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/activesecportalinc.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activesecportalinc.info']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-04T21:37:05Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/activesecportalinc.info"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--27c9cace-fa4e-5f98-8915-0dd33d071627","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-07T15:15:40Z","modified":"2025-08-07T15:15:40Z","name":"Phishing domain: activesignal-markets.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/activesignal-markets.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activesignal-markets.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-07T15:15:40Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/activesignal-markets.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--707c24ab-62d1-58de-93bd-c9fa518e3a3d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-29T13:45:32Z","modified":"2026-05-29T13:45:32Z","name":"Phishing domain: activetask.help","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/activetask.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activetask.help']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-29T13:45:32Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/activetask.help"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6614b263-ef2d-5144-b712-184ec882df3d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:50:45Z","modified":"2026-07-27T04:50:45Z","name":"Phishing domain: activetradesexchange.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Investment Scam. Report & evidence: https://phishdestroy.io/domain/activetradesexchange.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activetradesexchange.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:50:45Z","labels":["malicious-activity","phishing","brand:investment scam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/activetradesexchange.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8e956eb-1284-5c95-8063-8598123cb566","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-05T20:17:22Z","modified":"2025-08-05T20:17:22Z","name":"Phishing domain: activfrxonline.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/activfrxonline.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activfrxonline.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-05T20:17:22Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/activfrxonline.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--94015b17-b90c-5ab9-9181-542d61f66606","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-10T14:28:37Z","modified":"2026-07-10T14:28:37Z","name":"Phishing domain: actividadinusual2026.fwh.is","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating microsoft. Report & evidence: https://phishdestroy.io/domain/actividadinusual2026.fwh.is","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actividadinusual2026.fwh.is']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-10T14:28:37Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/actividadinusual2026.fwh.is"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--75cb3e98-c09d-56b1-b0a3-9b39f4f824e8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-02T14:44:05Z","modified":"2026-07-02T14:44:05Z","name":"Phishing domain: activisionvip.top","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/activisionvip.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activisionvip.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-02T14:44:05Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/activisionvip.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--34dc07b3-e43a-5bfa-b5d6-f56915089f82","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-14T16:14:05Z","modified":"2026-04-14T16:14:05Z","name":"Phishing domain: activity-kraken.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Kraken. Report & evidence: https://phishdestroy.io/domain/activity-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activity-kraken.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-14T16:14:05Z","labels":["malicious-activity","phishing","brand:kraken"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/activity-kraken.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe338c1d-c903-56f2-bbeb-f6f8d461efe9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-28T18:54:28Z","modified":"2026-07-28T18:54:28Z","name":"Phishing domain: activity.octofrost.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/activity.octofrost.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activity.octofrost.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-28T18:54:28Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/activity.octofrost.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--730ed8aa-a792-5a2d-9339-e710cea146b5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-01T02:03:41Z","modified":"2026-06-01T02:03:41Z","name":"Phishing domain: activonda.live","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/activonda.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'activonda.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-01T02:03:41Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/activonda.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bde31652-ea8a-5897-bf7a-43cc9693818f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-22T12:59:07Z","modified":"2025-12-22T12:59:07Z","name":"Phishing domain: actlife.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Facebook. Report & evidence: https://phishdestroy.io/domain/actlife.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actlife.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-22T12:59:07Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/actlife.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--19901ba3-b47e-5333-806b-f2dfb9ce571a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-15T03:32:46Z","modified":"2026-03-15T03:32:46Z","name":"Phishing domain: actnewswps.wpdevcloud.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating wordpress. Report & evidence: https://phishdestroy.io/domain/actnewswps.wpdevcloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actnewswps.wpdevcloud.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-15T03:32:46Z","labels":["malicious-activity","phishing","brand:wordpress"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/actnewswps.wpdevcloud.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--203ee278-ca7c-5e20-8939-d824896928e1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: actorstandups.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/actorstandups.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actorstandups.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/actorstandups.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2784b066-ed1f-5f4f-b5a1-aac0780e2765","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-01T05:52:39Z","modified":"2026-07-01T05:52:39Z","name":"Phishing domain: actsaylor.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/actsaylor.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actsaylor.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-01T05:52:39Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/actsaylor.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8544a2b1-5f75-51ea-93aa-9dc1d71c46e4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-29T12:14:37Z","modified":"2025-10-29T12:14:37Z","name":"Phishing domain: actu-flix.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/actu-flix.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actu-flix.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-29T12:14:37Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/actu-flix.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad31547a-beeb-5e29-b128-e9c57eb2677e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-24T14:28:10Z","modified":"2026-06-24T14:28:10Z","name":"Phishing domain: actu06bhd2026.yzz.me","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/actu06bhd2026.yzz.me","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actu06bhd2026.yzz.me']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-24T14:28:10Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/actu06bhd2026.yzz.me"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--758da114-f6c3-5cd5-9dc1-830dfbeee9e6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-10T14:20:18Z","modified":"2026-07-10T14:20:18Z","name":"Phishing domain: actu43bhdlog4.yzz.me","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/actu43bhdlog4.yzz.me","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actu43bhdlog4.yzz.me']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-10T14:20:18Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/actu43bhdlog4.yzz.me"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--42f9ad99-4d63-5886-82b9-28cd75c0fcd3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-06T02:39:53Z","modified":"2026-08-06T02:39:53Z","name":"Phishing domain: actua-bhdlogisecur23.yzz.me","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/actua-bhdlogisecur23.yzz.me","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actua-bhdlogisecur23.yzz.me']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-06T02:39:53Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/actua-bhdlogisecur23.yzz.me"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ffb4b7f-a17c-5eac-b235-b2450a09a996","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-25T15:14:26Z","modified":"2026-04-25T15:14:26Z","name":"Phishing domain: actualizacion-2025.iceiy.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Microsoft. Report & evidence: https://phishdestroy.io/domain/actualizacion-2025.iceiy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actualizacion-2025.iceiy.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-25T15:14:26Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/actualizacion-2025.iceiy.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce3e26a1-0887-5b35-bcb9-335a7e1f4308","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-31T17:55:08Z","modified":"2026-01-31T17:55:08Z","name":"Phishing domain: actualizacion-ledger-es.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/actualizacion-ledger-es.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actualizacion-ledger-es.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-31T17:55:08Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/actualizacion-ledger-es.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--69fd0132-9cbc-5a05-af16-41614befa096","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-05T18:36:19Z","modified":"2026-02-05T18:36:19Z","name":"Phishing domain: actualizacionbantrab.sbs","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bantrab. Report & evidence: https://phishdestroy.io/domain/actualizacionbantrab.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actualizacionbantrab.sbs']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-05T18:36:19Z","labels":["malicious-activity","phishing","brand:bantrab"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/actualizacionbantrab.sbs"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--da664df4-a295-5529-9f62-45867912f0d5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-13T20:55:19Z","modified":"2026-08-13T20:55:19Z","name":"Phishing domain: actualizacionmicros.weebly.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/actualizacionmicros.weebly.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actualizacionmicros.weebly.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-13T20:55:19Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/actualizacionmicros.weebly.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c5a691c-7c61-5188-934b-0fa4db77e07a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-25T15:22:08Z","modified":"2026-04-25T15:22:08Z","name":"Phishing domain: actualizar-entrar.iceiy.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Microsoft. Report & evidence: https://phishdestroy.io/domain/actualizar-entrar.iceiy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actualizar-entrar.iceiy.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-25T15:22:08Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/actualizar-entrar.iceiy.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--716db45e-e001-59b6-b32c-7921d3a2f9b3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T06:28:50Z","modified":"2026-06-15T06:28:50Z","name":"Phishing domain: actualizar365email.iceiy.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Microsoft. Report & evidence: https://phishdestroy.io/domain/actualizar365email.iceiy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actualizar365email.iceiy.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T06:28:50Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/actualizar365email.iceiy.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f576042d-6cb6-5bd9-8f79-80ddb46d7ff8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: actualizarcuenta2026.iceiy.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/actualizarcuenta2026.iceiy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actualizarcuenta2026.iceiy.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/actualizarcuenta2026.iceiy.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae750adc-bd68-5012-9cc6-580311717ffd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-03T14:19:30Z","modified":"2026-07-03T14:19:30Z","name":"Phishing domain: actulogbhd4795084.yzz.me","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/actulogbhd4795084.yzz.me","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'actulogbhd4795084.yzz.me']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-03T14:19:30Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/actulogbhd4795084.yzz.me"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4301cb8-c3de-5d37-914e-38d787e48785","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-03T06:22:00Z","modified":"2025-10-03T06:22:00Z","name":"Phishing domain: acuauyhdtzyddqbuwjytveqfcomsnnujfmzmf.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acuauyhdtzyddqbuwjytveqfcomsnnujfmzmf.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acuauyhdtzyddqbuwjytveqfcomsnnujfmzmf.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-03T06:22:00Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acuauyhdtzyddqbuwjytveqfcomsnnujfmzmf.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0c4245c-3491-579a-8f1a-5ddac5bc8176","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-23T12:51:46Z","modified":"2025-09-23T12:51:46Z","name":"Phishing domain: acuinvstor.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/acuinvstor.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acuinvstor.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-23T12:51:46Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acuinvstor.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b43e119-fcf1-52cb-8bac-c25a47b8f537","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-17T20:59:02Z","modified":"2025-12-17T20:59:02Z","name":"Phishing domain: acumenagencylab.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acumenagencylab.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acumenagencylab.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-17T20:59:02Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acumenagencylab.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--35e048e0-6641-514e-9f50-6fb778462ff9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:58:43Z","modified":"2026-07-27T04:58:43Z","name":"Phishing domain: acumenoption.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acumenoption.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acumenoption.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:58:43Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acumenoption.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0826f9ea-9dfc-5856-89ac-8fb901f48b54","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-11T18:30:03Z","modified":"2026-03-11T18:30:03Z","name":"Phishing domain: acumulated.finance","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/acumulated.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acumulated.finance']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-11T18:30:03Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acumulated.finance"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6a33bdc-a8ca-5e82-b483-3971cfbd99de","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T03:05:43Z","modified":"2026-08-10T03:05:43Z","name":"Phishing domain: acur.me","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acur.me","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acur.me']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T03:05:43Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acur.me"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--97a4db9f-c5f3-5a53-b7f5-0bd60e2b782e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-17T18:45:16Z","modified":"2026-03-17T18:45:16Z","name":"Phishing domain: acurast-lootbox.live","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acurast-lootbox.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acurast-lootbox.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-17T18:45:16Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acurast-lootbox.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3eaaa1c3-54d5-58d5-8617-705b63fe09fc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-28T07:58:40Z","modified":"2026-01-28T07:58:40Z","name":"Phishing domain: acurast.click","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating metamask. Report & evidence: https://phishdestroy.io/domain/acurast.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acurast.click']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-28T07:58:40Z","labels":["malicious-activity","phishing","brand:metamask"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acurast.click"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b173a417-4b65-5dbb-b40b-7939923801ce","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-17T18:51:31Z","modified":"2026-02-17T18:51:31Z","name":"Phishing domain: acurast.icu","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acurast.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acurast.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-17T18:51:31Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acurast.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d656e0b-8ad6-57cc-a25a-2e7f4dbd27b5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T04:29:52Z","modified":"2026-02-13T04:29:52Z","name":"Phishing domain: acurast.site","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acurast.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acurast.site']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T04:29:52Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acurast.site"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2beba134-f8d4-55cc-92af-15a69727677e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-30T08:53:37Z","modified":"2026-01-30T08:53:37Z","name":"Phishing domain: acurastclaim.click","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acurastclaim.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acurastclaim.click']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-30T08:53:37Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acurastclaim.click"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8149b152-7daf-5abe-8bc8-cb0425a3835a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-07T11:05:17Z","modified":"2026-02-07T11:05:17Z","name":"Phishing domain: acutabovebrazil.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acutabovebrazil.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acutabovebrazil.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-07T11:05:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acutabovebrazil.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--89e6df6d-a5e8-552f-8860-d2f001bd517a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:56:09Z","modified":"2026-07-27T04:56:09Z","name":"Phishing domain: acuteprofessionals.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acuteprofessionals.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acuteprofessionals.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:56:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acuteprofessionals.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--114482ff-e2f4-5a30-8323-9b49eb4dad91","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-04T13:56:42Z","modified":"2025-09-04T13:56:42Z","name":"Phishing domain: acvc.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aave. Report & evidence: https://phishdestroy.io/domain/acvc.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acvc.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-04T13:56:42Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acvc.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f59c6c87-8bbc-5302-9bdc-56cd6d284c65","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-25T14:10:19Z","modified":"2025-11-25T14:10:19Z","name":"Phishing domain: acve.pro","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/acve.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acve.pro']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-25T14:10:19Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acve.pro"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ff5a32b-15d7-549f-85ef-b0abceb701b7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-27T15:58:09Z","modified":"2026-03-27T15:58:09Z","name":"Phishing domain: acybershoke.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating [\"cs2\"]. Report & evidence: https://phishdestroy.io/domain/acybershoke.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'acybershoke.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-27T15:58:09Z","labels":["malicious-activity","phishing","brand:[\"cs2\"]"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/acybershoke.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--22f9fd99-fb67-570f-b2ae-c87676b0d37f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:01Z","modified":"2026-02-26T23:20:01Z","name":"Phishing domain: ad-5ws.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ad-5ws.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ad-5ws.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:01Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ad-5ws.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--afde9337-9bc2-56f3-940d-50d6072691dd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-04T16:09:30Z","modified":"2026-05-04T16:09:30Z","name":"Phishing domain: ad-account-authentication-division.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ad-account-authentication-division.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ad-account-authentication-division.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-04T16:09:30Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ad-account-authentication-division.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc6ab164-da49-5d18-bd80-19f18001af2a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-03T03:21:12Z","modified":"2026-03-03T03:21:12Z","name":"Phishing domain: ad-account-check-and-alert-system.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating facebook. Report & evidence: https://phishdestroy.io/domain/ad-account-check-and-alert-system.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ad-account-check-and-alert-system.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-03T03:21:12Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ad-account-check-and-alert-system.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fca3e753-cc5e-5496-8f48-8432dcb21d2b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-03T03:27:08Z","modified":"2026-03-03T03:27:08Z","name":"Phishing domain: ad-account-control-hub-5hv.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating facebook. Report & evidence: https://phishdestroy.io/domain/ad-account-control-hub-5hv.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ad-account-control-hub-5hv.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-03T03:27:08Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ad-account-control-hub-5hv.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddb95bb8-4f04-58a2-b16d-95afc355461a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-03T03:28:51Z","modified":"2026-03-03T03:28:51Z","name":"Phishing domain: ad-account-detection-system-hub.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating facebook. Report & evidence: https://phishdestroy.io/domain/ad-account-detection-system-hub.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ad-account-detection-system-hub.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-03T03:28:51Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ad-account-detection-system-hub.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad3db7b6-27c7-5f55-a702-2152ab38f34d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-03T03:29:36Z","modified":"2026-03-03T03:29:36Z","name":"Phishing domain: ad-account-event-tracking-center.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating facebook. Report & evidence: https://phishdestroy.io/domain/ad-account-event-tracking-center.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ad-account-event-tracking-center.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-03T03:29:36Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ad-account-event-tracking-center.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6fe7290-3b8f-5e4e-89ca-5fd358ae1da9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-03T03:22:35Z","modified":"2026-03-03T03:22:35Z","name":"Phishing domain: ad-account-inspection-hub-6sg.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating facebook. Report & evidence: https://phishdestroy.io/domain/ad-account-inspection-hub-6sg.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ad-account-inspection-hub-6sg.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-03T03:22:35Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ad-account-inspection-hub-6sg.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffa5d186-fa68-566a-9bfe-370a9f973d8d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-03T03:18:04Z","modified":"2026-03-03T03:18:04Z","name":"Phishing domain: ad-account-policy-check-center.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating facebook. Report & evidence: https://phishdestroy.io/domain/ad-account-policy-check-center.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ad-account-policy-check-center.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-03T03:18:04Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ad-account-policy-check-center.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6ed8f94-e283-5ea1-9de9-adc2a06d5635","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-31T16:49:51Z","modified":"2026-03-31T16:49:51Z","name":"Phishing domain: ad-account-security-audit-hub.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/ad-account-security-audit-hub.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ad-account-security-audit-hub.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-31T16:49:51Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ad-account-security-audit-hub.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--39258321-022b-5fbc-9761-733d5eb84d2f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-03T03:25:53Z","modified":"2026-03-03T03:25:53Z","name":"Phishing domain: ad-account-supervision-panel.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating facebook. Report & evidence: https://phishdestroy.io/domain/ad-account-supervision-panel.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ad-account-supervision-panel.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-03T03:25:53Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ad-account-supervision-panel.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0a795c9-70f7-5a9d-8e7b-08cbda390479","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-31T16:47:57Z","modified":"2026-03-31T16:47:57Z","name":"Phishing domain: ad-account-watch-service-console.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ad-account-watch-service-console.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ad-account-watch-service-console.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-31T16:47:57Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ad-account-watch-service-console.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4bca129-4933-58b8-9dc6-07f48bcc25f5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-02T05:47:29Z","modified":"2026-08-02T05:47:29Z","name":"Phishing domain: ad-channel-manager.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/ad-channel-manager.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ad-channel-manager.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-02T05:47:29Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ad-channel-manager.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa890ee9-5299-5eef-8a78-f9ecb4fea249","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-26T10:32:24Z","modified":"2026-01-26T10:32:24Z","name":"Phishing domain: ad-defieth-usdt.top","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ad-defieth-usdt.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ad-defieth-usdt.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-26T10:32:24Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ad-defieth-usdt.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c5568bb-6437-5ef9-959b-42b1916d6377","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-21T21:15:31Z","modified":"2025-11-21T21:15:31Z","name":"Phishing domain: ad-eth-usdc1.top","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ad-eth-usdc1.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ad-eth-usdc1.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-21T21:15:31Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ad-eth-usdc1.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2bff9c2-9cd6-5822-94cc-46b39aab9975","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-22T10:48:57Z","modified":"2025-11-22T10:48:57Z","name":"Phishing domain: ad-eth-vip10.top","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ad-eth-vip10.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ad-eth-vip10.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-22T10:48:57Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ad-eth-vip10.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ede9fea-4ef9-5dd7-8e6c-d94eb6cee65c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-04T01:51:38Z","modified":"2026-08-04T01:51:38Z","name":"Phishing domain: ad-id-core-2d3s3jrjy-qianyu-data-systems.vercel.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ad-id-core-2d3s3jrjy-qianyu-data-systems.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ad-id-core-2d3s3jrjy-qianyu-data-systems.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-04T01:51:38Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ad-id-core-2d3s3jrjy-qianyu-data-systems.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9ff557e-23d5-50b0-bd56-d4e53012952e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-04T01:12:57Z","modified":"2026-08-04T01:12:57Z","name":"Phishing domain: ad-id-core.vercel.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ad-id-core.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ad-id-core.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-04T01:12:57Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ad-id-core.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0546151d-43fb-5c68-8d7a-ba2a85b0eedd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:40Z","modified":"2026-02-26T23:22:40Z","name":"Phishing domain: ad-observe-hub.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/ad-observe-hub.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ad-observe-hub.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:40Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ad-observe-hub.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6299983e-0d2b-5367-ba5d-9ed5db042353","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-08T17:05:27Z","modified":"2026-05-08T17:05:27Z","name":"Phishing domain: ad-phantom.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Phantom. Report & evidence: https://phishdestroy.io/domain/ad-phantom.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ad-phantom.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-08T17:05:27Z","labels":["malicious-activity","phishing","brand:phantom"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ad-phantom.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--276ae563-e91f-584e-976c-2e114dd613ba","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-17T03:08:20Z","modified":"2026-02-17T03:08:20Z","name":"Phishing domain: ad-violation-monitor-hub-8hc.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating facebook. Report & evidence: https://phishdestroy.io/domain/ad-violation-monitor-hub-8hc.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ad-violation-monitor-hub-8hc.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-17T03:08:20Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ad-violation-monitor-hub-8hc.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--70c9fb77-32db-5836-b92b-ccb8e334847d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-16T14:41:32Z","modified":"2025-10-16T14:41:32Z","name":"Phishing domain: ad.bitskya.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ad.bitskya.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ad.bitskya.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-16T14:41:32Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ad.bitskya.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--126917c2-55ae-5b7f-b92b-56446ac6c93d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-28T22:34:19Z","modified":"2026-01-28T22:34:19Z","name":"Phishing domain: ad.coinbasecn.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/ad.coinbasecn.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ad.coinbasecn.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-28T22:34:19Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ad.coinbasecn.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--93c35684-14bd-5250-9704-9f085db09c98","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-20T06:43:54Z","modified":"2025-12-20T06:43:54Z","name":"Phishing domain: ad.exodus.build","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Exodus. Report & evidence: https://phishdestroy.io/domain/ad.exodus.build","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ad.exodus.build']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-20T06:43:54Z","labels":["malicious-activity","phishing","brand:exodus"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ad.exodus.build"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1be85565-85a0-5c50-9df7-1a8481d27a5e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-14T17:41:53Z","modified":"2026-07-14T17:41:53Z","name":"Phishing domain: ad.hyfysh1118.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating generic. Report & evidence: https://phishdestroy.io/domain/ad.hyfysh1118.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ad.hyfysh1118.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-14T17:41:53Z","labels":["malicious-activity","phishing","brand:generic"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ad.hyfysh1118.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce6b3e59-0d7b-5071-a7ec-b10d2ee04211","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-13T20:36:23Z","modified":"2026-08-13T20:36:23Z","name":"Phishing domain: ad0a60.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ad0a60.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ad0a60.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-13T20:36:23Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ad0a60.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5f16a32-1699-5666-b76f-b3b6de4f743d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-06T13:48:18Z","modified":"2026-05-06T13:48:18Z","name":"Phishing domain: ad8648.coinbase666.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/ad8648.coinbase666.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ad8648.coinbase666.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-06T13:48:18Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ad8648.coinbase666.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b927d808-31fb-5c0d-aadb-3441937117bb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:10Z","modified":"2026-02-26T23:24:10Z","name":"Phishing domain: ada-brunet.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating instagram. Report & evidence: https://phishdestroy.io/domain/ada-brunet.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ada-brunet.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:10Z","labels":["malicious-activity","phishing","brand:instagram"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ada-brunet.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--09221dd1-0718-5e1a-9a95-9d5892612b48","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-13T18:21:15Z","modified":"2025-11-13T18:21:15Z","name":"Phishing domain: ada-now.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ada-now.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ada-now.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-13T18:21:15Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ada-now.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc82da47-1997-5c96-8b32-7ca7a1fd27ca","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:01Z","modified":"2026-02-26T23:24:01Z","name":"Phishing domain: ada-sushi.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating SushiSwap. Report & evidence: https://phishdestroy.io/domain/ada-sushi.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ada-sushi.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:01Z","labels":["malicious-activity","phishing","brand:sushiswap"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ada-sushi.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e197a07-81fb-5803-b859-c50756dc995f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:40Z","modified":"2026-02-26T23:23:40Z","name":"Phishing domain: ada-sushi.cfd","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating SushiSwap. Report & evidence: https://phishdestroy.io/domain/ada-sushi.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ada-sushi.cfd']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:40Z","labels":["malicious-activity","phishing","brand:sushiswap"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ada-sushi.cfd"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8014d759-e9ca-54f2-a7b1-a7b777310a95","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-17T20:41:49Z","modified":"2025-12-17T20:41:49Z","name":"Phishing domain: ada.markets","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/ada.markets","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ada.markets']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-17T20:41:49Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ada.markets"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f745458e-f8e9-56cc-99bc-2f46076426c0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-24T11:15:23Z","modified":"2025-09-24T11:15:23Z","name":"Phishing domain: ada.sushistakes.biz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating SushiSwap. Report & evidence: https://phishdestroy.io/domain/ada.sushistakes.biz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ada.sushistakes.biz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-24T11:15:23Z","labels":["malicious-activity","phishing","brand:sushiswap"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ada.sushistakes.biz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--243b884b-1f8b-52f0-9122-315392731ccf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-24T11:13:25Z","modified":"2025-09-24T11:13:25Z","name":"Phishing domain: ada.sushistakes.info","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating SushiSwap. Report & evidence: https://phishdestroy.io/domain/ada.sushistakes.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ada.sushistakes.info']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-24T11:13:25Z","labels":["malicious-activity","phishing","brand:sushiswap"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ada.sushistakes.info"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--449e2f5b-a6ba-5a0f-89c8-e50f0967108d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-24T11:11:50Z","modified":"2025-09-24T11:11:50Z","name":"Phishing domain: ada.sushistakes.us","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating SushiSwap. Report & evidence: https://phishdestroy.io/domain/ada.sushistakes.us","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ada.sushistakes.us']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-24T11:11:50Z","labels":["malicious-activity","phishing","brand:sushiswap"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ada.sushistakes.us"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--95a00dc7-aa41-546b-96ec-cd16a2d121bd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:14Z","modified":"2026-02-26T23:22:14Z","name":"Phishing domain: ada25.gifts","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ada25.gifts","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ada25.gifts']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:14Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ada25.gifts"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac0b9985-b81d-596c-b4c1-1c1bcdebec41","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:11Z","modified":"2026-02-26T23:24:11Z","name":"Phishing domain: adabull.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adabull.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adabull.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:11Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adabull.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--638507e4-0d36-5539-bc4e-7ecff1d72eed","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:08Z","modified":"2026-02-26T23:21:08Z","name":"Phishing domain: adacharles2x.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating x.com. Report & evidence: https://phishdestroy.io/domain/adacharles2x.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adacharles2x.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:08Z","labels":["malicious-activity","phishing","brand:x.com"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adacharles2x.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ac109d4-a8a2-5e77-9316-20a3625b2e4c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-31T09:43:11Z","modified":"2025-12-31T09:43:11Z","name":"Phishing domain: adadao-staking.firebaseapp.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Binance. Report & evidence: https://phishdestroy.io/domain/adadao-staking.firebaseapp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adadao-staking.firebaseapp.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-31T09:43:11Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adadao-staking.firebaseapp.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f56b37db-1d86-5eb1-9e61-cfd3c702c621","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-31T18:54:52Z","modified":"2025-12-31T18:54:52Z","name":"Phishing domain: adaimbangbray.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adaimbangbray.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adaimbangbray.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-31T18:54:52Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adaimbangbray.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcab98fb-e17b-52e0-ad27-eaa45bb21bc6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-25T17:22:34Z","modified":"2026-03-25T17:22:34Z","name":"Phishing domain: adajadi.site","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Apple. Report & evidence: https://phishdestroy.io/domain/adajadi.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adajadi.site']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-25T17:22:34Z","labels":["malicious-activity","phishing","brand:apple"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adajadi.site"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--97ac5b67-8b90-5df5-87d9-8ee46a8d405e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-16T02:53:20Z","modified":"2026-05-16T02:53:20Z","name":"Phishing domain: adalite.co","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adalite.co","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adalite.co']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-16T02:53:20Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adalite.co"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--56832e99-355f-5444-aaf6-85b0bca779b5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-11T03:08:05Z","modified":"2026-04-11T03:08:05Z","name":"Phishing domain: adam-back.ai-cryptolist.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adam-back.ai-cryptolist.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adam-back.ai-cryptolist.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-11T03:08:05Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adam-back.ai-cryptolist.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--82fc45a7-0b7f-5d3d-a5e9-14ea84bc1710","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-20T21:57:01Z","modified":"2026-02-20T21:57:01Z","name":"Phishing domain: adamixer.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adamixer.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adamixer.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-20T21:57:01Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adamixer.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--47c298bb-b615-5a7c-8c98-7dfe64b35fee","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-27T13:54:15Z","modified":"2026-03-27T13:54:15Z","name":"Phishing domain: adamriub.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adamriub.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adamriub.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-27T13:54:15Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adamriub.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fb50526-bbca-5edd-97b3-383e629027cf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-20T03:46:22Z","modified":"2026-07-20T03:46:22Z","name":"Phishing domain: adanispacex.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adanispacex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adanispacex.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-20T03:46:22Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adanispacex.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c990d5c-69f2-5046-b914-2d848f7ce254","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-13T18:20:29Z","modified":"2025-11-13T18:20:29Z","name":"Phishing domain: adanow.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/adanow.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adanow.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-13T18:20:29Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adanow.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0a0729b-7f4f-5994-8a9e-167014109c32","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-27T12:31:08Z","modified":"2025-12-27T12:31:08Z","name":"Phishing domain: adapt-transaction-check.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adapt-transaction-check.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adapt-transaction-check.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-27T12:31:08Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adapt-transaction-check.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc58bf65-7d53-5574-851f-3c361dc3e241","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-28T10:58:00Z","modified":"2025-10-28T10:58:00Z","name":"Phishing domain: adapter3d.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/adapter3d.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adapter3d.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-28T10:58:00Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adapter3d.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b6d7c52-21a4-5c1a-aef1-3efa43dd1a26","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-01T15:23:13Z","modified":"2026-06-01T15:23:13Z","name":"Phishing domain: adarsh405.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Netflix. Report & evidence: https://phishdestroy.io/domain/adarsh405.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adarsh405.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-01T15:23:13Z","labels":["malicious-activity","phishing","brand:netflix"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adarsh405.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7513f43b-6fcb-534e-b22b-bdddeb5e8553","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-29T15:24:49Z","modified":"2026-03-29T15:24:49Z","name":"Phishing domain: adarshbhoutekar.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating netflix. Report & evidence: https://phishdestroy.io/domain/adarshbhoutekar.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adarshbhoutekar.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-29T15:24:49Z","labels":["malicious-activity","phishing","brand:netflix"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adarshbhoutekar.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e71a59e9-91b0-5777-9289-019789040713","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-07T01:12:42Z","modified":"2026-04-07T01:12:42Z","name":"Phishing domain: adavaultpool.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adavaultpool.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adavaultpool.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-07T01:12:42Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adavaultpool.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2c2583c-cae6-59e5-afad-6c1548d58e67","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-27T08:31:12Z","modified":"2026-02-27T08:31:12Z","name":"Phishing domain: adblockguard.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating [\"ups\"]. Report & evidence: https://phishdestroy.io/domain/adblockguard.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adblockguard.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-27T08:31:12Z","labels":["malicious-activity","phishing","brand:[\"ups\"]"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adblockguard.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a8f013f-ad87-5a3a-bc32-e2f9bdc302b8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-28T12:56:40Z","modified":"2026-06-28T12:56:40Z","name":"Phishing domain: adblocknoads.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adblocknoads.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adblocknoads.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-28T12:56:40Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adblocknoads.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f2ed7b0-9c9b-5315-b033-6b849f6b7aa7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-02T17:33:27Z","modified":"2026-04-02T17:33:27Z","name":"Phishing domain: adblockplus.digital","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating amazon. Report & evidence: https://phishdestroy.io/domain/adblockplus.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adblockplus.digital']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-02T17:33:27Z","labels":["malicious-activity","phishing","brand:amazon"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adblockplus.digital"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2ac9c92-2e23-5235-bed1-b0da8f39d9e7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:58:09Z","modified":"2026-07-27T04:58:09Z","name":"Phishing domain: adcapmarketrades.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Investment Scam. Report & evidence: https://phishdestroy.io/domain/adcapmarketrades.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adcapmarketrades.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:58:09Z","labels":["malicious-activity","phishing","brand:investment scam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adcapmarketrades.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bafd5e5d-6ac7-5000-8f73-316a1f6560d8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-18T16:08:27Z","modified":"2026-02-18T16:08:27Z","name":"Phishing domain: adcbaupdate.yxwvutsnmlkjihgfedsummer-conference-2026.mario-s-event-organization.fullsailevents.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adcbaupdate.yxwvutsnmlkjihgfedsummer-conference-2026.mario-s-event-organization.fullsailevents.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adcbaupdate.yxwvutsnmlkjihgfedsummer-conference-2026.mario-s-event-organization.fullsailevents.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-18T16:08:27Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adcbaupdate.yxwvutsnmlkjihgfedsummer-conference-2026.mario-s-event-organization.fullsailevents.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--41af6bc8-82e6-5786-b792-fe61e714707f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-18T16:16:39Z","modified":"2026-02-18T16:16:39Z","name":"Phishing domain: adcbuaedubai.myclickfunnels.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adcbuaedubai.myclickfunnels.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adcbuaedubai.myclickfunnels.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-18T16:16:39Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adcbuaedubai.myclickfunnels.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b1ed147-a966-536e-9a76-9c7e40a0ce0c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-22T23:37:52Z","modified":"2026-06-22T23:37:52Z","name":"Phishing domain: add-a-restrictions.surge.sh","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/add-a-restrictions.surge.sh","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'add-a-restrictions.surge.sh']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-22T23:37:52Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/add-a-restrictions.surge.sh"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--30999b51-b377-506d-adc6-ad2bf12069a8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-08T15:05:42Z","modified":"2026-03-08T15:05:42Z","name":"Phishing domain: add-money-trezor-wallet.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Trezor. Report & evidence: https://phishdestroy.io/domain/add-money-trezor-wallet.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'add-money-trezor-wallet.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-08T15:05:42Z","labels":["malicious-activity","phishing","brand:trezor"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/add-money-trezor-wallet.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc6b7850-eabc-58a0-8abd-234437246624","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-16T18:51:01Z","modified":"2025-12-16T18:51:01Z","name":"Phishing domain: add-puls.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/add-puls.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'add-puls.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-16T18:51:01Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/add-puls.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e593b630-2e5a-5aab-9637-00e2bbcbdbfe","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T21:11:29Z","modified":"2026-06-15T21:11:29Z","name":"Phishing domain: add-terra.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/add-terra.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'add-terra.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T21:11:29Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/add-terra.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e87922bc-1be7-52eb-b7fb-dc2d62917429","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-04T22:38:13Z","modified":"2026-04-04T22:38:13Z","name":"Phishing domain: add-trezr-suite.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Trezor. Report & evidence: https://phishdestroy.io/domain/add-trezr-suite.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'add-trezr-suite.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-04T22:38:13Z","labels":["malicious-activity","phishing","brand:trezor"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/add-trezr-suite.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4ef2eb5-0517-535a-91ee-1c01f80f0aed","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-30T06:14:18Z","modified":"2026-03-30T06:14:18Z","name":"Phishing domain: add-ubisoft-connect-friend.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/add-ubisoft-connect-friend.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'add-ubisoft-connect-friend.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-30T06:14:18Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/add-ubisoft-connect-friend.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7bcf032-cba0-5a30-b64e-462a723b7496","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-27T05:34:28Z","modified":"2026-04-27T05:34:28Z","name":"Phishing domain: add-ubisoft-connect-to-steam-deck.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Steam. Report & evidence: https://phishdestroy.io/domain/add-ubisoft-connect-to-steam-deck.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'add-ubisoft-connect-to-steam-deck.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-27T05:34:28Z","labels":["malicious-activity","phishing","brand:steam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/add-ubisoft-connect-to-steam-deck.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8abb20d2-9d35-58b0-a984-75c6530bc108","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-24T14:20:30Z","modified":"2025-12-24T14:20:30Z","name":"Phishing domain: add.gosoter.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/add.gosoter.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'add.gosoter.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-24T14:20:30Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/add.gosoter.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c86ad825-ad8b-5d3c-b4f8-2785f86ce62d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-02T17:49:18Z","modified":"2026-07-02T17:49:18Z","name":"Phishing domain: add2.shop","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/add2.shop","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'add2.shop']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-02T17:49:18Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/add2.shop"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6306360c-e881-5ad7-a7b6-36f614dc0f8e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-15T02:19:07Z","modified":"2026-07-15T02:19:07Z","name":"Phishing domain: addaarrssh.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating netflix. Report & evidence: https://phishdestroy.io/domain/addaarrssh.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'addaarrssh.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-15T02:19:07Z","labels":["malicious-activity","phishing","brand:netflix"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/addaarrssh.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--163cdab1-8ae2-5f47-a7be-769081f622c9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T17:15:40Z","modified":"2026-02-26T17:15:40Z","name":"Phishing domain: addaxtoken.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/addaxtoken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'addaxtoken.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T17:15:40Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/addaxtoken.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--59a8b7b6-a3f4-5359-943f-8ea2b5d581cc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-28T19:05:07Z","modified":"2026-04-28T19:05:07Z","name":"Phishing domain: adddad-click.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adddad-click.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adddad-click.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-28T19:05:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adddad-click.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c19e79e-43f9-5745-8cf0-fa055af7c304","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-17T02:13:23Z","modified":"2025-10-17T02:13:23Z","name":"Phishing domain: addicted-desktop.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/addicted-desktop.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'addicted-desktop.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-17T02:13:23Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/addicted-desktop.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c02c060e-9c8b-57ff-963f-f3baefa2a746","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-07T02:49:55Z","modified":"2025-10-07T02:49:55Z","name":"Phishing domain: addicted-fun.pro","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating solana. Report & evidence: https://phishdestroy.io/domain/addicted-fun.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'addicted-fun.pro']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-07T02:49:55Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/addicted-fun.pro"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--44a29f3e-22aa-5d11-bbd7-a9290be2b728","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-24T16:29:28Z","modified":"2026-01-24T16:29:28Z","name":"Phishing domain: addictedfun.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating solana. Report & evidence: https://phishdestroy.io/domain/addictedfun.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'addictedfun.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-24T16:29:28Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/addictedfun.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--007a521b-3357-5697-ad58-6a22e98bdb2a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-14T15:15:36Z","modified":"2025-10-14T15:15:36Z","name":"Phishing domain: addictedrewards.fun","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating solana. Report & evidence: https://phishdestroy.io/domain/addictedrewards.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'addictedrewards.fun']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-14T15:15:36Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/addictedrewards.fun"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--02e2df5d-0257-5ae3-8298-cf3a289c2164","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-01T03:46:12Z","modified":"2026-02-01T03:46:12Z","name":"Phishing domain: addictedtoshitcoins.wtf","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/addictedtoshitcoins.wtf","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'addictedtoshitcoins.wtf']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-01T03:46:12Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/addictedtoshitcoins.wtf"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd6a2bb1-cfeb-55c6-b6a2-3c2f0b1a7c59","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-17T20:45:33Z","modified":"2025-12-17T20:45:33Z","name":"Phishing domain: additionalfile.ghost.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/additionalfile.ghost.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'additionalfile.ghost.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-17T20:45:33Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/additionalfile.ghost.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d74d46f-b57c-5291-bc63-e7eb3f8b818b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-17T04:44:24Z","modified":"2025-08-17T04:44:24Z","name":"Phishing domain: additionalhublite.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/additionalhublite.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'additionalhublite.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-17T04:44:24Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/additionalhublite.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--22c78acf-13ee-5c65-9dd8-32867b483414","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-17T04:57:36Z","modified":"2025-08-17T04:57:36Z","name":"Phishing domain: additionalhublite.com.wexbull.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating telegram. Report & evidence: https://phishdestroy.io/domain/additionalhublite.com.wexbull.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'additionalhublite.com.wexbull.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-17T04:57:36Z","labels":["malicious-activity","phishing","brand:telegram"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/additionalhublite.com.wexbull.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--86284bc6-d48a-5dc3-b8c2-1ff5ee234f07","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-23T22:36:29Z","modified":"2026-03-23T22:36:29Z","name":"Phishing domain: additionalprimeedge.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/additionalprimeedge.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'additionalprimeedge.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-23T22:36:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/additionalprimeedge.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8e88ff8-ce47-5a9b-a4bf-6487f7c4b710","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-14T15:15:56Z","modified":"2025-10-14T15:15:56Z","name":"Phishing domain: addlcted.fun","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating solana. Report & evidence: https://phishdestroy.io/domain/addlcted.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'addlcted.fun']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-14T15:15:56Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/addlcted.fun"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--df031f58-5f9b-5fbd-9c6c-eb0cfdac5e36","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-05T15:56:48Z","modified":"2026-04-05T15:56:48Z","name":"Phishing domain: addon--mozilla--org.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Trust Wallet. Report & evidence: https://phishdestroy.io/domain/addon--mozilla--org.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'addon--mozilla--org.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-05T15:56:48Z","labels":["malicious-activity","phishing","brand:trust wallet"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/addon--mozilla--org.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c73cfe1-7652-5f53-9ba2-a69f2c8225dc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:17Z","modified":"2026-02-26T23:23:17Z","name":"Phishing domain: addons--mozilla--org.typedream.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aave. Report & evidence: https://phishdestroy.io/domain/addons--mozilla--org.typedream.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'addons--mozilla--org.typedream.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:17Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/addons--mozilla--org.typedream.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--628d8fa9-c211-568b-a86e-02c8c51c6b70","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T23:49:25Z","modified":"2026-08-09T23:49:25Z","name":"Phishing domain: addons-moz-illa-org.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Phantom. Report & evidence: https://phishdestroy.io/domain/addons-moz-illa-org.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'addons-moz-illa-org.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T23:49:25Z","labels":["malicious-activity","phishing","brand:phantom"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/addons-moz-illa-org.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--61531227-33e2-5453-b6de-0d8bd9b11600","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-10T06:03:58Z","modified":"2025-08-10T06:03:58Z","name":"Phishing domain: addons-mozilla--org-en.typedream.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating WalletConnect. Report & evidence: https://phishdestroy.io/domain/addons-mozilla--org-en.typedream.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'addons-mozilla--org-en.typedream.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-10T06:03:58Z","labels":["malicious-activity","phishing","brand:walletconnect"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/addons-mozilla--org-en.typedream.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4dd4277-be37-5495-828e-cce4728270be","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:47Z","modified":"2026-02-26T23:20:47Z","name":"Phishing domain: addons-mozilla-org-en.typedream.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/addons-mozilla-org-en.typedream.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'addons-mozilla-org-en.typedream.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:47Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/addons-mozilla-org-en.typedream.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a811564c-f9f6-5d64-91d3-69572a5a7df0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-28T00:55:31Z","modified":"2026-03-28T00:55:31Z","name":"Phishing domain: addoodles.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Polygon. Report & evidence: https://phishdestroy.io/domain/addoodles.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'addoodles.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-28T00:55:31Z","labels":["malicious-activity","phishing","brand:polygon"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/addoodles.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2206e936-348d-53cb-8172-7174507c13e6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:54Z","modified":"2026-02-26T23:24:54Z","name":"Phishing domain: addpuls.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating [\"curve\"]. Report & evidence: https://phishdestroy.io/domain/addpuls.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'addpuls.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:54Z","labels":["malicious-activity","phishing","brand:[\"curve\"]"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/addpuls.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fec4860-ad51-54bf-a183-8b1e9c4e71c0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-12T23:55:58Z","modified":"2026-02-12T23:55:58Z","name":"Phishing domain: address-analyse.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/address-analyse.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'address-analyse.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-12T23:55:58Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/address-analyse.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--16fb83c8-aacf-5ab0-9974-9c7019ad580a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-24T19:01:11Z","modified":"2026-01-24T19:01:11Z","name":"Phishing domain: address-track.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/address-track.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'address-track.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-24T19:01:11Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/address-track.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--de30c239-8ab6-5626-8814-99c87fe65d75","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-29T15:03:09Z","modified":"2025-10-29T15:03:09Z","name":"Phishing domain: address-validation.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating linkedin. Report & evidence: https://phishdestroy.io/domain/address-validation.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'address-validation.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-29T15:03:09Z","labels":["malicious-activity","phishing","brand:linkedin"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/address-validation.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--551845c3-86e1-54be-82f2-0c999cc8b2f7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-19T05:33:58Z","modified":"2026-06-19T05:33:58Z","name":"Phishing domain: address-verification.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/address-verification.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'address-verification.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-19T05:33:58Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/address-verification.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--89491985-eb34-53f7-9dae-78a6c91eade8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-05T16:30:55Z","modified":"2026-02-05T16:30:55Z","name":"Phishing domain: adds-wallet-dropdown.terminal.staging.lightningcluster.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adds-wallet-dropdown.terminal.staging.lightningcluster.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adds-wallet-dropdown.terminal.staging.lightningcluster.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-05T16:30:55Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adds-wallet-dropdown.terminal.staging.lightningcluster.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--719a4f0a-9a48-5094-be4d-afed6bb2e742","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-28T09:47:55Z","modified":"2026-01-28T09:47:55Z","name":"Phishing domain: addusdsteam.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Steam. Report & evidence: https://phishdestroy.io/domain/addusdsteam.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'addusdsteam.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-28T09:47:55Z","labels":["malicious-activity","phishing","brand:steam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/addusdsteam.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb132c66-75d3-5f7e-9afa-87c9a78f7fbc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-06T09:21:59Z","modified":"2026-05-06T09:21:59Z","name":"Phishing domain: addvice.store","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/addvice.store","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'addvice.store']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-06T09:21:59Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/addvice.store"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c9a281e-05ef-5e49-8428-337e15bb8236","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: addvip-ada.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/addvip-ada.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'addvip-ada.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/addvip-ada.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7dc2fbf7-6f6b-571e-a53a-5e7ecaa7f4f5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-07T16:34:21Z","modified":"2025-08-07T16:34:21Z","name":"Phishing domain: addyfxsmart.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/addyfxsmart.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'addyfxsmart.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-07T16:34:21Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/addyfxsmart.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a90113b-3973-5332-ab88-e54cf7e1017d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-07T16:34:31Z","modified":"2025-08-07T16:34:31Z","name":"Phishing domain: addyfxsmart.com.muddyex.ng","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/addyfxsmart.com.muddyex.ng","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'addyfxsmart.com.muddyex.ng']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-07T16:34:31Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/addyfxsmart.com.muddyex.ng"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--905bae75-9f4c-5d6d-8825-951ce8f393df","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-28T15:28:36Z","modified":"2026-06-28T15:28:36Z","name":"Phishing domain: adeccocampaign.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adeccocampaign.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adeccocampaign.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-28T15:28:36Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adeccocampaign.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e91c1e5-a910-5e23-a834-c8ba6505fa15","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-28T16:29:45Z","modified":"2026-06-28T16:29:45Z","name":"Phishing domain: adeccointmail.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adeccointmail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adeccointmail.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-28T16:29:45Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adeccointmail.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ced01007-98d2-5a05-a058-e68c0d3a4f68","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-28T15:48:04Z","modified":"2026-06-28T15:48:04Z","name":"Phishing domain: adeccooutreach.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adeccooutreach.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adeccooutreach.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-28T15:48:04Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adeccooutreach.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--853d86e4-3fc1-5cda-86a3-ae921f5ebb5d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-19T02:42:31Z","modified":"2026-06-19T02:42:31Z","name":"Phishing domain: adega-24h-ze.shop","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adega-24h-ze.shop","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adega-24h-ze.shop']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-19T02:42:31Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adega-24h-ze.shop"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9acbdac-522b-5fc8-896a-376db7625fbe","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-01T02:46:42Z","modified":"2026-07-01T02:46:42Z","name":"Phishing domain: adega-bebidas.click","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adega-bebidas.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adega-bebidas.click']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-01T02:46:42Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adega-bebidas.click"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ee906dc-b5ca-531d-8b79-d178e19a83c5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-07T14:19:51Z","modified":"2026-07-07T14:19:51Z","name":"Phishing domain: adellshop.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Kraken. Report & evidence: https://phishdestroy.io/domain/adellshop.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adellshop.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-07T14:19:51Z","labels":["malicious-activity","phishing","brand:kraken"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adellshop.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecbb5e7e-1acd-54ce-814c-6c62c7cef00f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-07-26T23:51:02Z","modified":"2025-07-26T23:51:02Z","name":"Phishing domain: adelphilbanplc.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/adelphilbanplc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adelphilbanplc.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-07-26T23:51:02Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adelphilbanplc.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6e9d537-98db-5224-b368-93f31028cb4e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-10T08:30:05Z","modified":"2026-02-10T08:30:05Z","name":"Phishing domain: aden-io.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating base. Report & evidence: https://phishdestroy.io/domain/aden-io.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aden-io.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-10T08:30:05Z","labels":["malicious-activity","phishing","brand:base"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aden-io.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d9b0f26-f01c-5e67-ba56-34f4d2ea7f09","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-17T21:06:11Z","modified":"2025-12-17T21:06:11Z","name":"Phishing domain: aden.exchange","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/aden.exchange","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aden.exchange']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-17T21:06:11Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aden.exchange"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d3f6fa5-ef48-5a35-8927-4f1cab14ad27","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-17T21:06:55Z","modified":"2025-12-17T21:06:55Z","name":"Phishing domain: aden.finance","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/aden.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aden.finance']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-17T21:06:55Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aden.finance"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6525ac7f-6039-5864-88fa-da93edd9406b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-10T08:25:55Z","modified":"2026-02-10T08:25:55Z","name":"Phishing domain: adene.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adene.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adene.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-10T08:25:55Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adene.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbdc8988-10ed-57a5-8357-75126c263dee","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-19T02:12:45Z","modified":"2026-06-19T02:12:45Z","name":"Phishing domain: adeptminingpool.live","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bitcoin. Report & evidence: https://phishdestroy.io/domain/adeptminingpool.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adeptminingpool.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-19T02:12:45Z","labels":["malicious-activity","phishing","brand:bitcoin"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adeptminingpool.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--273cdacc-e087-5feb-b756-e5d44730ff01","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:33:04Z","modified":"2026-06-15T00:33:04Z","name":"Phishing domain: adequate-techtrades.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adequate-techtrades.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adequate-techtrades.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:33:04Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adequate-techtrades.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6121a468-458f-55d3-94f9-ef859b893bf4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:33Z","modified":"2026-02-26T23:19:33Z","name":"Phishing domain: adetesting.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adetesting.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adetesting.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:33Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adetesting.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--00715929-195a-5277-b8c5-f67bbebcdb8f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: adev.icu","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adev.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adev.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adev.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--46d076e9-fb55-5918-ac1c-13db02c8f015","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T02:54:46Z","modified":"2026-02-13T02:54:46Z","name":"Phishing domain: adexdashboard.live","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adexdashboard.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adexdashboard.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T02:54:46Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adexdashboard.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cce0b9a-4f27-5ced-85bf-4d4bc9439eec","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-06T19:56:31Z","modified":"2026-02-06T19:56:31Z","name":"Phishing domain: adexpaq.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/adexpaq.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adexpaq.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-06T19:56:31Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adexpaq.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c9e20a9-8a93-5323-91fe-e4d881c13406","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: adfccc.blogspot.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Facebook. Report & evidence: https://phishdestroy.io/domain/adfccc.blogspot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adfccc.blogspot.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adfccc.blogspot.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a4f9374-39ea-558c-9af3-931cccf89944","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-01T13:07:07Z","modified":"2025-11-01T13:07:07Z","name":"Phishing domain: adfdf31.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Apple. Report & evidence: https://phishdestroy.io/domain/adfdf31.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adfdf31.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-01T13:07:07Z","labels":["malicious-activity","phishing","brand:apple"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adfdf31.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--44378852-8888-5493-a71d-6db92b6bf3eb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-01T12:24:07Z","modified":"2025-12-01T12:24:07Z","name":"Phishing domain: adfdf74.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating fakeshop. Report & evidence: https://phishdestroy.io/domain/adfdf74.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adfdf74.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-01T12:24:07Z","labels":["malicious-activity","phishing","brand:fakeshop"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adfdf74.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbb3183f-a38c-5036-8abb-54a8aa31d813","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T13:43:40Z","modified":"2026-02-13T13:43:40Z","name":"Phishing domain: adfdtender.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adfdtender.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adfdtender.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T13:43:40Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adfdtender.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--26bb569f-b3be-55a7-b9e6-d5e2b3204c45","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-29T23:27:17Z","modified":"2026-07-29T23:27:17Z","name":"Phishing domain: adflow-browser-usage-v3.vercel.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adflow-browser-usage-v3.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adflow-browser-usage-v3.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-29T23:27:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adflow-browser-usage-v3.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ffe3c57-4109-5134-9650-5a671607cabc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-29T18:51:46Z","modified":"2026-07-29T18:51:46Z","name":"Phishing domain: adflow-browser-usage.vercel.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adflow-browser-usage.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adflow-browser-usage.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-29T18:51:46Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adflow-browser-usage.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b209db25-9e15-56ff-8a5d-9fec985c939c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T13:56:56Z","modified":"2026-02-13T13:56:56Z","name":"Phishing domain: adflow.ltd","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/adflow.ltd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adflow.ltd']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T13:56:56Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adflow.ltd"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--24d578c1-8a0d-5b51-8a75-12ea45b4b1be","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-07T01:33:45Z","modified":"2026-07-07T01:33:45Z","name":"Phishing domain: adfn02u.top","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adfn02u.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adfn02u.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-07T01:33:45Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adfn02u.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--abb50f8f-3188-5c12-95ed-35b362c9fd57","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-06T14:13:06Z","modified":"2025-12-06T14:13:06Z","name":"Phishing domain: adftoken.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating apple. Report & evidence: https://phishdestroy.io/domain/adftoken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adftoken.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-06T14:13:06Z","labels":["malicious-activity","phishing","brand:apple"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adftoken.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5595ef8-24da-5f7f-85a0-3f14ed3cc501","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-25T17:27:38Z","modified":"2026-03-25T17:27:38Z","name":"Phishing domain: adfx.aurumdomusfund.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adfx.aurumdomusfund.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adfx.aurumdomusfund.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-25T17:27:38Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adfx.aurumdomusfund.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--57e622bf-d458-50ff-afe7-6b17ee84526f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-07T16:47:59Z","modified":"2025-08-07T16:47:59Z","name":"Phishing domain: adge-gov.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/adge-gov.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adge-gov.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-07T16:47:59Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adge-gov.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5041a506-65bf-595c-83f8-4bc3c0158b31","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T02:39:59Z","modified":"2026-02-13T02:39:59Z","name":"Phishing domain: adgegegerg.info","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adgegegerg.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adgegegerg.info']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T02:39:59Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adgegegerg.info"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--08cd2731-44e1-5112-a7d3-91a9985e6420","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-25T16:33:20Z","modified":"2026-03-25T16:33:20Z","name":"Phishing domain: adgroupofcompanies.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/adgroupofcompanies.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adgroupofcompanies.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-25T16:33:20Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adgroupofcompanies.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d989d88f-39d7-5e2f-897e-825b59654c87","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-08T15:00:54Z","modified":"2026-03-08T15:00:54Z","name":"Phishing domain: adgrowthpath.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adgrowthpath.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adgrowthpath.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-08T15:00:54Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adgrowthpath.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a7e8a78-1f73-5415-b037-4afb09e8f5a8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-14T20:20:07Z","modified":"2026-02-14T20:20:07Z","name":"Phishing domain: adguardtech.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adguardtech.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adguardtech.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-14T20:20:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adguardtech.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1dcdf38-769a-5839-a62a-f1a4a9b81c59","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-31T20:13:29Z","modified":"2026-07-31T20:13:29Z","name":"Phishing domain: adguardtools.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/adguardtools.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adguardtools.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-31T20:13:29Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adguardtools.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--787503e7-8ea8-5143-ae3f-0130c6d7b3f7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-02T23:24:58Z","modified":"2026-03-02T23:24:58Z","name":"Phishing domain: adhdcto.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/adhdcto.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adhdcto.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-02T23:24:58Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adhdcto.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--898666bf-655b-5eff-bf10-0b7e18808734","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-27T13:54:21Z","modified":"2026-03-27T13:54:21Z","name":"Phishing domain: adhdpharm.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adhdpharm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adhdpharm.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-27T13:54:21Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adhdpharm.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fbb7211-9c8a-5e05-a122-b420770114b2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-31T17:53:01Z","modified":"2026-03-31T17:53:01Z","name":"Phishing domain: adherence-digital.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adherence-digital.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adherence-digital.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-31T17:53:01Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adherence-digital.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--29396da9-4ace-5223-80b0-a6202c6d5a46","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-25T16:32:59Z","modified":"2026-03-25T16:32:59Z","name":"Phishing domain: adhil-max.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/adhil-max.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adhil-max.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-25T16:32:59Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adhil-max.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f906639a-a671-5a84-80a3-4f8e1c9f7c52","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-15T15:35:00Z","modified":"2026-07-15T15:35:00Z","name":"Phishing domain: adhunprasanth99-design.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating netflix. Report & evidence: https://phishdestroy.io/domain/adhunprasanth99-design.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adhunprasanth99-design.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-15T15:35:00Z","labels":["malicious-activity","phishing","brand:netflix"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adhunprasanth99-design.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6955816-3cc9-550f-a9c6-7ce207ec1056","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:23Z","modified":"2026-02-26T23:22:23Z","name":"Phishing domain: adi-foundation.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating foundation. Report & evidence: https://phishdestroy.io/domain/adi-foundation.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adi-foundation.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:23Z","labels":["malicious-activity","phishing","brand:foundation"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adi-foundation.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--167d80d2-25aa-5031-839b-2f5d94f8cfa9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T07:25:00Z","modified":"2026-08-10T07:25:00Z","name":"Phishing domain: adi-foundation.info","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating foundation. Report & evidence: https://phishdestroy.io/domain/adi-foundation.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adi-foundation.info']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T07:25:00Z","labels":["malicious-activity","phishing","brand:foundation"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adi-foundation.info"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c71a25a7-90d3-5041-ace5-e8a18365b02c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-13T09:12:17Z","modified":"2026-07-13T09:12:17Z","name":"Phishing domain: adi-predictions.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adi-predictions.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adi-predictions.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-13T09:12:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adi-predictions.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4ce0eec-d4ec-59da-ba40-6348fbdc8b82","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-30T03:17:49Z","modified":"2026-03-30T03:17:49Z","name":"Phishing domain: adiappl.netlify.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Apple. Report & evidence: https://phishdestroy.io/domain/adiappl.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adiappl.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-30T03:17:49Z","labels":["malicious-activity","phishing","brand:apple"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adiappl.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2c50450-adc1-572c-96c0-d73ba8fdab15","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:54:25Z","modified":"2026-07-27T04:54:25Z","name":"Phishing domain: adiccionalatecnologia.com.mx","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adiccionalatecnologia.com.mx","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adiccionalatecnologia.com.mx']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:54:25Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adiccionalatecnologia.com.mx"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8676d219-e2af-567d-a3a0-7463dc03865e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-20T19:36:17Z","modified":"2025-12-20T19:36:17Z","name":"Phishing domain: adida.foundation","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating foundation. Report & evidence: https://phishdestroy.io/domain/adida.foundation","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adida.foundation']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-20T19:36:17Z","labels":["malicious-activity","phishing","brand:foundation"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adida.foundation"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--42db4242-bcff-5c19-bec3-5d3c0cb74681","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-25T20:35:49Z","modified":"2026-03-25T20:35:49Z","name":"Phishing domain: adidas-eligibility.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adidas-eligibility.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adidas-eligibility.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-25T20:35:49Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adidas-eligibility.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--213b3f64-4184-57d1-832d-a69bbebefa1a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-06T22:42:27Z","modified":"2026-07-06T22:42:27Z","name":"Phishing domain: adidas-hiring.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating generic. Report & evidence: https://phishdestroy.io/domain/adidas-hiring.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adidas-hiring.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-06T22:42:27Z","labels":["malicious-activity","phishing","brand:generic"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adidas-hiring.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--093fa8dc-6a72-5c43-a6d6-30e02effb9ee","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-23T22:34:12Z","modified":"2026-03-23T22:34:12Z","name":"Phishing domain: adidas.access-metaverse.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adidas.access-metaverse.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adidas.access-metaverse.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-23T22:34:12Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adidas.access-metaverse.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f680ce3f-4281-52b3-b780-b3e38b19d4d7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-25T09:39:12Z","modified":"2025-12-25T09:39:12Z","name":"Phishing domain: adidasape.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating metamask. Report & evidence: https://phishdestroy.io/domain/adidasape.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adidasape.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-25T09:39:12Z","labels":["malicious-activity","phishing","brand:metamask"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adidasape.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f130d129-973d-58c5-b1c8-eabe43d44a28","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-24T01:05:48Z","modified":"2026-03-24T01:05:48Z","name":"Phishing domain: adil199011.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating facebook. Report & evidence: https://phishdestroy.io/domain/adil199011.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adil199011.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-24T01:05:48Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adil199011.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5757f0a-7b09-5ee5-af58-f9cfbbaa0f3f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-24T11:34:19Z","modified":"2026-01-24T11:34:19Z","name":"Phishing domain: adilisclown.fun","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adilisclown.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adilisclown.fun']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-24T11:34:19Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adilisclown.fun"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6308e2ad-8000-5bb2-b144-17b23576c6b2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T21:01:10Z","modified":"2026-02-13T21:01:10Z","name":"Phishing domain: adilonfundon.cfd","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bitcoin. Report & evidence: https://phishdestroy.io/domain/adilonfundon.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adilonfundon.cfd']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T21:01:10Z","labels":["malicious-activity","phishing","brand:bitcoin"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adilonfundon.cfd"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--de7086b7-3ed2-584e-b90a-5edc39bb9dde","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-25T16:45:46Z","modified":"2026-03-25T16:45:46Z","name":"Phishing domain: adilsonribeiroalmeida.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating amazon. Report & evidence: https://phishdestroy.io/domain/adilsonribeiroalmeida.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adilsonribeiroalmeida.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-25T16:45:46Z","labels":["malicious-activity","phishing","brand:amazon"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adilsonribeiroalmeida.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9f26c3b-1964-56ec-93f1-0da71aa6d692","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:41Z","modified":"2026-02-26T23:21:41Z","name":"Phishing domain: adilverse-zone.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating netflix. Report & evidence: https://phishdestroy.io/domain/adilverse-zone.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adilverse-zone.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:41Z","labels":["malicious-activity","phishing","brand:netflix"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adilverse-zone.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--38761f7a-91aa-5161-aaae-6b3dd01cb78f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-23T02:42:26Z","modified":"2026-02-23T02:42:26Z","name":"Phishing domain: adincas.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating cryptoscam. Report & evidence: https://phishdestroy.io/domain/adincas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adincas.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-23T02:42:26Z","labels":["malicious-activity","phishing","brand:cryptoscam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adincas.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d27c0a8-104d-5c23-9dc7-c3b400c3e7ab","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-11T12:48:33Z","modified":"2025-08-11T12:48:33Z","name":"Phishing domain: adinspin.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adinspin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adinspin.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-11T12:48:33Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adinspin.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--856134e2-654d-5ee3-a586-c3b775c019f9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-22T22:12:11Z","modified":"2026-06-22T22:12:11Z","name":"Phishing domain: adinwin.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/adinwin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adinwin.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-22T22:12:11Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adinwin.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c71ae75-0095-54df-898a-ef5fea494e5f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-14T13:22:53Z","modified":"2025-12-14T13:22:53Z","name":"Phishing domain: adiraneazkuenaga.es","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Facebook. Report & evidence: https://phishdestroy.io/domain/adiraneazkuenaga.es","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adiraneazkuenaga.es']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-14T13:22:53Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adiraneazkuenaga.es"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8389b242-5a4d-524a-a009-43e13a733226","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T18:40:07Z","modified":"2026-08-09T18:40:07Z","name":"Phishing domain: aditalcapital.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aditalcapital.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aditalcapital.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T18:40:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aditalcapital.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3eff69e6-0c60-5758-8b09-27513f9bee1d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-20T09:55:54Z","modified":"2026-06-20T09:55:54Z","name":"Phishing domain: adithya2788.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/adithya2788.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adithya2788.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-20T09:55:54Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adithya2788.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6de91cfa-aac4-52ed-bc97-134f09716492","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-07T01:52:54Z","modified":"2026-06-07T01:52:54Z","name":"Phishing domain: adithya2809.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Netflix. Report & evidence: https://phishdestroy.io/domain/adithya2809.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adithya2809.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-07T01:52:54Z","labels":["malicious-activity","phishing","brand:netflix"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adithya2809.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6327e658-241d-5c09-a3d5-a42c97f61438","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-12T11:13:32Z","modified":"2026-06-12T11:13:32Z","name":"Phishing domain: adithyac18.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating netflix. Report & evidence: https://phishdestroy.io/domain/adithyac18.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adithyac18.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-12T11:13:32Z","labels":["malicious-activity","phishing","brand:netflix"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adithyac18.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b594887-4f9e-54c2-a530-22a8418f2c9c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-28T04:01:35Z","modified":"2026-03-28T04:01:35Z","name":"Phishing domain: aditi884.github.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aditi884.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aditi884.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-28T04:01:35Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aditi884.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c748a200-8e58-52dc-98ff-0396c0e388a8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-19T14:25:33Z","modified":"2026-06-19T14:25:33Z","name":"Phishing domain: aditieeeee.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/aditieeeee.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aditieeeee.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-19T14:25:33Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aditieeeee.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd3366b2-0a98-579f-8ddb-09d0c8bb3848","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-12T15:42:54Z","modified":"2026-04-12T15:42:54Z","name":"Phishing domain: aditip01-cloud.github.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aditip01-cloud.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aditip01-cloud.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-12T15:42:54Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aditip01-cloud.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--68a39f65-fb69-511f-b62f-dbfbb6db885e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-03T13:05:21Z","modified":"2026-06-03T13:05:21Z","name":"Phishing domain: aditipriya03.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating netflix. Report & evidence: https://phishdestroy.io/domain/aditipriya03.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aditipriya03.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-03T13:05:21Z","labels":["malicious-activity","phishing","brand:netflix"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aditipriya03.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dedcd6ca-c568-5c16-9961-ba6a462428dd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-05T03:57:10Z","modified":"2026-03-05T03:57:10Z","name":"Phishing domain: aditivishwakarma01.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating linkedin. Report & evidence: https://phishdestroy.io/domain/aditivishwakarma01.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aditivishwakarma01.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-05T03:57:10Z","labels":["malicious-activity","phishing","brand:linkedin"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aditivishwakarma01.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--83c24d21-86ac-590e-a5e7-68245c5f977e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-18T13:09:55Z","modified":"2026-06-18T13:09:55Z","name":"Phishing domain: aditsharma12.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Amazon. Report & evidence: https://phishdestroy.io/domain/aditsharma12.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aditsharma12.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-18T13:09:55Z","labels":["malicious-activity","phishing","brand:amazon"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aditsharma12.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bf7f3e7-d439-591a-9b0f-b4c9b838503a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-15T03:15:31Z","modified":"2026-04-15T03:15:31Z","name":"Phishing domain: adity4-4.github.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adity4-4.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adity4-4.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-15T03:15:31Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adity4-4.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2eb19213-728e-54c2-807b-e57266640007","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-05T11:44:29Z","modified":"2026-08-05T11:44:29Z","name":"Phishing domain: aditya-kr-007.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating apple. Report & evidence: https://phishdestroy.io/domain/aditya-kr-007.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aditya-kr-007.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-05T11:44:29Z","labels":["malicious-activity","phishing","brand:apple"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aditya-kr-007.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe5b3064-1f8c-5599-9f66-916cc09d70ee","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-24T16:53:34Z","modified":"2026-04-24T16:53:34Z","name":"Phishing domain: aditya-rakesh.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating netflix. Report & evidence: https://phishdestroy.io/domain/aditya-rakesh.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aditya-rakesh.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-24T16:53:34Z","labels":["malicious-activity","phishing","brand:netflix"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aditya-rakesh.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b1159fd-948c-5373-a5da-9b238088e195","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-15T03:10:31Z","modified":"2026-04-15T03:10:31Z","name":"Phishing domain: aditya-vrm.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating netflix. Report & evidence: https://phishdestroy.io/domain/aditya-vrm.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aditya-vrm.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-15T03:10:31Z","labels":["malicious-activity","phishing","brand:netflix"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aditya-vrm.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--27c84e90-a01d-50e7-9bda-2e1ef41db890","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-24T14:19:50Z","modified":"2026-03-24T14:19:50Z","name":"Phishing domain: adityaadarii.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating netflix. Report & evidence: https://phishdestroy.io/domain/adityaadarii.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adityaadarii.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-24T14:19:50Z","labels":["malicious-activity","phishing","brand:netflix"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adityaadarii.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ecc9bd2-7434-5f9d-8034-18a70457cc9d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-23T14:33:24Z","modified":"2026-06-23T14:33:24Z","name":"Phishing domain: adityab9990.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Microsoft. Report & evidence: https://phishdestroy.io/domain/adityab9990.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adityab9990.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-23T14:33:24Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adityab9990.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b642616-b31f-5736-bd79-5f4f9655d3d7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-03T15:20:36Z","modified":"2026-06-03T15:20:36Z","name":"Phishing domain: adityachaurasia1676.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Netflix. Report & evidence: https://phishdestroy.io/domain/adityachaurasia1676.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adityachaurasia1676.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-03T15:20:36Z","labels":["malicious-activity","phishing","brand:netflix"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adityachaurasia1676.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--90721f37-69ee-54a6-9dea-c54d104fb779","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-07T14:23:45Z","modified":"2026-07-07T14:23:45Z","name":"Phishing domain: adityagit-code.github.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adityagit-code.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adityagit-code.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-07T14:23:45Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adityagit-code.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--075ae605-38c3-5d16-8fc2-a0e56309ff17","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-10T16:09:11Z","modified":"2026-04-10T16:09:11Z","name":"Phishing domain: adityahiremath449.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating netflix. Report & evidence: https://phishdestroy.io/domain/adityahiremath449.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adityahiremath449.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-10T16:09:11Z","labels":["malicious-activity","phishing","brand:netflix"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adityahiremath449.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a47da187-db57-5c3b-a708-57d5c8694ffb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-12T03:29:17Z","modified":"2026-08-12T03:29:17Z","name":"Phishing domain: adityakumar1241.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating amazon. Report & evidence: https://phishdestroy.io/domain/adityakumar1241.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adityakumar1241.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-12T03:29:17Z","labels":["malicious-activity","phishing","brand:amazon"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adityakumar1241.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2ad4d47-a889-556d-a1d3-87bf77837f8b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-07T01:28:21Z","modified":"2026-06-07T01:28:21Z","name":"Phishing domain: adityakumar712.github.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adityakumar712.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adityakumar712.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-07T01:28:21Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adityakumar712.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--06001f7a-2d11-5b53-a4c4-f3f5f1004fb5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-03T14:25:30Z","modified":"2026-08-03T14:25:30Z","name":"Phishing domain: adityakumar763.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating apple. Report & evidence: https://phishdestroy.io/domain/adityakumar763.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adityakumar763.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-03T14:25:30Z","labels":["malicious-activity","phishing","brand:apple"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adityakumar763.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b58bb2c-e9eb-58ef-ab71-59a992b88949","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-22T12:13:23Z","modified":"2026-06-22T12:13:23Z","name":"Phishing domain: adityapandey87.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/adityapandey87.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adityapandey87.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-22T12:13:23Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adityapandey87.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--78f04394-4624-5e6b-9f5c-9c87c2cef571","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-15T03:15:04Z","modified":"2026-04-15T03:15:04Z","name":"Phishing domain: adityayadav176.github.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adityayadav176.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adityayadav176.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-15T03:15:04Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adityayadav176.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3eafeff7-608f-5888-b26c-f1e204d0f553","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-15T01:15:45Z","modified":"2025-10-15T01:15:45Z","name":"Phishing domain: adixairdrop.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/adixairdrop.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adixairdrop.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-15T01:15:45Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adixairdrop.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--42020d00-7c5f-52e1-847b-8de83235ad64","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T15:06:51Z","modified":"2026-02-13T15:06:51Z","name":"Phishing domain: adjara-gudju1.cfd","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adjara-gudju1.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adjara-gudju1.cfd']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T15:06:51Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adjara-gudju1.cfd"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c561ab6-a221-5958-98c7-60ec99213d7f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-12T21:26:16Z","modified":"2026-02-12T21:26:16Z","name":"Phishing domain: adjara-gudju2.cfd","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adjara-gudju2.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adjara-gudju2.cfd']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-12T21:26:16Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adjara-gudju2.cfd"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--50d49e1c-e992-5c62-9eb1-18eafe238ecf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-12T21:26:58Z","modified":"2026-02-12T21:26:58Z","name":"Phishing domain: adjara-gudju3.cfd","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adjara-gudju3.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adjara-gudju3.cfd']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-12T21:26:58Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adjara-gudju3.cfd"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d7ee322-1bd3-5332-a48a-4a3ba23728f7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-12T21:27:41Z","modified":"2026-02-12T21:27:41Z","name":"Phishing domain: adjara-gudju4.cfd","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adjara-gudju4.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adjara-gudju4.cfd']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-12T21:27:41Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adjara-gudju4.cfd"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--821f99cb-71d3-5b0d-a990-129a51f19d90","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-12T21:27:04Z","modified":"2026-02-12T21:27:04Z","name":"Phishing domain: adjara-gudju5.cfd","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adjara-gudju5.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adjara-gudju5.cfd']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-12T21:27:04Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adjara-gudju5.cfd"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a6c3706-eb34-5ab2-885d-a66343322b5b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-25T09:40:24Z","modified":"2025-12-25T09:40:24Z","name":"Phishing domain: adjudicator-ods.insolvency-development.co.uk","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating UK Government. Report & evidence: https://phishdestroy.io/domain/adjudicator-ods.insolvency-development.co.uk","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adjudicator-ods.insolvency-development.co.uk']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-25T09:40:24Z","labels":["malicious-activity","phishing","brand:uk government"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adjudicator-ods.insolvency-development.co.uk"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--565fec70-78af-5eb3-9e07-54fa259b30f9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-30T19:21:33Z","modified":"2026-06-30T19:21:33Z","name":"Phishing domain: adjuntardatosrequeridosw.iceiy.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adjuntardatosrequeridosw.iceiy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adjuntardatosrequeridosw.iceiy.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-30T19:21:33Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adjuntardatosrequeridosw.iceiy.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f568ffbd-8c14-5d6e-a9d8-f108a70c32a3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-10T16:24:56Z","modified":"2026-04-10T16:24:56Z","name":"Phishing domain: adk8wm2.meiqiea.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating imtoken. Report & evidence: https://phishdestroy.io/domain/adk8wm2.meiqiea.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adk8wm2.meiqiea.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-10T16:24:56Z","labels":["malicious-activity","phishing","brand:imtoken"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adk8wm2.meiqiea.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a67b403-5b85-5ce6-83fd-ef8cb97f2690","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-02T21:08:41Z","modified":"2026-04-02T21:08:41Z","name":"Phishing domain: adl-dev-1.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adl-dev-1.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adl-dev-1.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-02T21:08:41Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adl-dev-1.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a830c4f-093f-5636-972a-d40fde146280","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-07T14:57:17Z","modified":"2026-07-07T14:57:17Z","name":"Phishing domain: adlerdolomiti.spahotel.guru","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adlerdolomiti.spahotel.guru","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adlerdolomiti.spahotel.guru']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-07T14:57:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adlerdolomiti.spahotel.guru"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--756f333d-2a50-540e-9425-cf2e4ccde588","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-02T23:28:04Z","modified":"2026-03-02T23:28:04Z","name":"Phishing domain: adm-ap.site","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adm-ap.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adm-ap.site']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-02T23:28:04Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adm-ap.site"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f4eca1a-105d-57ce-a9ce-de71ac6931d0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-27T09:39:18Z","modified":"2026-04-27T09:39:18Z","name":"Phishing domain: adm-informatique.fr","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adm-informatique.fr","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adm-informatique.fr']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-27T09:39:18Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adm-informatique.fr"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--07210529-0677-5954-b112-e7f7319c058c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-15T20:43:01Z","modified":"2026-05-15T20:43:01Z","name":"Phishing domain: adm-pulse.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adm-pulse.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adm-pulse.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-15T20:43:01Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adm-pulse.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--90b7c4d8-6ece-588d-a305-422452521841","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-10T16:32:59Z","modified":"2026-04-10T16:32:59Z","name":"Phishing domain: adm-swap.outwallet.world","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adm-swap.outwallet.world","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adm-swap.outwallet.world']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-10T16:32:59Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adm-swap.outwallet.world"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--90fb3c38-4520-5b34-8dcd-c5101008bf08","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-28T18:26:09Z","modified":"2026-07-28T18:26:09Z","name":"Phishing domain: adm.87985-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/adm.87985-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adm.87985-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-28T18:26:09Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adm.87985-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--adafdcea-a643-5e2d-adc2-75288d8e0a5e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-18T16:20:47Z","modified":"2025-10-18T16:20:47Z","name":"Phishing domain: adm.loginsecurecoinbaseid.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/adm.loginsecurecoinbaseid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adm.loginsecurecoinbaseid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-18T16:20:47Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adm.loginsecurecoinbaseid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b6d2910-f22f-5c50-8c3c-17cfa8d2bf8b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-26T16:35:09Z","modified":"2026-01-26T16:35:09Z","name":"Phishing domain: adm.pro-deepgtp.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/adm.pro-deepgtp.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adm.pro-deepgtp.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-26T16:35:09Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adm.pro-deepgtp.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5d81731-4dc8-5b26-b7cd-86f9fc0015bb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-17T14:09:52Z","modified":"2026-06-17T14:09:52Z","name":"Phishing domain: admanagement.do","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating spectrum. Report & evidence: https://phishdestroy.io/domain/admanagement.do","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admanagement.do']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-17T14:09:52Z","labels":["malicious-activity","phishing","brand:spectrum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admanagement.do"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3539af11-4e97-5e7b-8561-53adc6ebd485","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-21T12:23:33Z","modified":"2026-04-21T12:23:33Z","name":"Phishing domain: admbybit.info","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bybit. Report & evidence: https://phishdestroy.io/domain/admbybit.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admbybit.info']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-21T12:23:33Z","labels":["malicious-activity","phishing","brand:bybit"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admbybit.info"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1b8bbe3-9f8a-5ed2-a268-45f014d8e624","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T13:08:38Z","modified":"2026-01-02T13:08:38Z","name":"Phishing domain: admc.deep-world.vip","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/admc.deep-world.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admc.deep-world.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T13:08:38Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admc.deep-world.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9f7b581-3f67-51cf-a937-7118d831b90b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-14T18:08:09Z","modified":"2026-06-14T18:08:09Z","name":"Phishing domain: admhr.execsuccessmetrics.de","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/admhr.execsuccessmetrics.de","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admhr.execsuccessmetrics.de']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-14T18:08:09Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admhr.execsuccessmetrics.de"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--93240f5e-c31a-5051-a72c-825ccf8a011c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-21T02:13:32Z","modified":"2026-07-21T02:13:32Z","name":"Phishing domain: admimn.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating owa. Report & evidence: https://phishdestroy.io/domain/admimn.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admimn.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-21T02:13:32Z","labels":["malicious-activity","phishing","brand:owa"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admimn.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b7e0908-5257-5276-b7dd-cb3c2073ebde","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-19T03:39:24Z","modified":"2026-05-19T03:39:24Z","name":"Phishing domain: admin-0001-de.weebly.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Microsoft. Report & evidence: https://phishdestroy.io/domain/admin-0001-de.weebly.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin-0001-de.weebly.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-19T03:39:24Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin-0001-de.weebly.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d3dcee8-909f-5bda-bc1b-dc78467472fa","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-24T15:04:41Z","modified":"2025-11-24T15:04:41Z","name":"Phishing domain: admin-002-com.weebly.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Microsoft. Report & evidence: https://phishdestroy.io/domain/admin-002-com.weebly.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin-002-com.weebly.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-24T15:04:41Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin-002-com.weebly.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--db5663d6-4f8d-5881-928b-b3acbd455152","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-29T12:14:48Z","modified":"2025-10-29T12:14:48Z","name":"Phishing domain: admin-027-com.weebly.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Microsoft. Report & evidence: https://phishdestroy.io/domain/admin-027-com.weebly.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin-027-com.weebly.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-29T12:14:48Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin-027-com.weebly.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--164caf07-3f45-5a6d-86b5-61e85d680420","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-12T12:41:07Z","modified":"2025-11-12T12:41:07Z","name":"Phishing domain: admin-28396.bubbleapps.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/admin-28396.bubbleapps.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin-28396.bubbleapps.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-12T12:41:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin-28396.bubbleapps.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--01370d84-4124-50ea-b36f-6b3f6d54f2d6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-07T18:19:41Z","modified":"2026-08-07T18:19:41Z","name":"Phishing domain: admin-8ledger.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/admin-8ledger.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin-8ledger.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-07T18:19:41Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin-8ledger.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a89d281b-941f-5128-84cd-5c1bd3cab511","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:33Z","modified":"2026-02-26T23:21:33Z","name":"Phishing domain: admin-api.echowebsites.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/admin-api.echowebsites.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin-api.echowebsites.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:33Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin-api.echowebsites.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c98e865d-492d-5123-9713-150abea2400b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-01T09:29:18Z","modified":"2026-04-01T09:29:18Z","name":"Phishing domain: admin-apply.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/admin-apply.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin-apply.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-01T09:29:18Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin-apply.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f1977b5-862d-5c79-a5e0-9c0d65e95fb6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-05T13:47:01Z","modified":"2026-01-05T13:47:01Z","name":"Phishing domain: admin-bcgame.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/admin-bcgame.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin-bcgame.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-05T13:47:01Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin-bcgame.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e95d4bc9-b66c-5c3a-9f53-d7fbb4fa962f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-30T13:59:01Z","modified":"2026-07-30T13:59:01Z","name":"Phishing domain: admin-care-centeranetseurereviewaccounttoday.square.site","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/admin-care-centeranetseurereviewaccounttoday.square.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin-care-centeranetseurereviewaccounttoday.square.site']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-30T13:59:01Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin-care-centeranetseurereviewaccounttoday.square.site"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac193a30-d1cc-5306-a219-1ca32c61582f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-24T18:03:57Z","modified":"2026-04-24T18:03:57Z","name":"Phishing domain: admin-desktop.wixstudio.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/admin-desktop.wixstudio.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin-desktop.wixstudio.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-24T18:03:57Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin-desktop.wixstudio.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7235803f-2671-5140-bd34-3337102c8278","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T12:02:03Z","modified":"2026-07-27T12:02:03Z","name":"Phishing domain: admin-dev.blackuptech.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/admin-dev.blackuptech.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin-dev.blackuptech.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T12:02:03Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin-dev.blackuptech.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--198b4fc9-e319-5f61-bef5-603ae15f7ed4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-07T14:47:41Z","modified":"2025-12-07T14:47:41Z","name":"Phishing domain: admin-eth-usdc.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/admin-eth-usdc.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin-eth-usdc.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-07T14:47:41Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin-eth-usdc.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--06dcdff9-5c64-5b70-a751-71cfecbc48b0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-09T15:20:28Z","modified":"2026-05-09T15:20:28Z","name":"Phishing domain: admin-meta.program-ads-agency.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating meta. Report & evidence: https://phishdestroy.io/domain/admin-meta.program-ads-agency.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin-meta.program-ads-agency.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-09T15:20:28Z","labels":["malicious-activity","phishing","brand:meta"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin-meta.program-ads-agency.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--88ca5f52-b66f-5bbb-8d94-1d9459d5aa69","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-11T06:59:13Z","modified":"2026-02-11T06:59:13Z","name":"Phishing domain: admin-moderna-72-dev-2-verify.apprentice.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/admin-moderna-72-dev-2-verify.apprentice.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin-moderna-72-dev-2-verify.apprentice.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-11T06:59:13Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin-moderna-72-dev-2-verify.apprentice.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fea2a5a-d300-5389-919f-8e8e3b7e37ac","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-12T19:14:04Z","modified":"2026-03-12T19:14:04Z","name":"Phishing domain: admin-panel.lazurewallet.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/admin-panel.lazurewallet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin-panel.lazurewallet.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-12T19:14:04Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin-panel.lazurewallet.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--08a70ad1-36b7-5058-b7e5-71251ed32318","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-22T19:17:55Z","modified":"2025-10-22T19:17:55Z","name":"Phishing domain: admin-stake.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating cryptoscam. Report & evidence: https://phishdestroy.io/domain/admin-stake.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin-stake.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-22T19:17:55Z","labels":["malicious-activity","phishing","brand:cryptoscam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin-stake.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--715b4c0f-5a6e-565e-b988-736a01e0dbbc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-12T21:13:57Z","modified":"2026-06-12T21:13:57Z","name":"Phishing domain: admin-supportextranet.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/admin-supportextranet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin-supportextranet.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-12T21:13:57Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin-supportextranet.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--19b709c2-b411-5551-91ce-8f3fad123a46","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-16T14:42:18Z","modified":"2025-10-16T14:42:18Z","name":"Phishing domain: admin.535787.top","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/admin.535787.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.535787.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-16T14:42:18Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.535787.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--28884d92-350d-5420-86c8-0c305c767788","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-03T00:13:36Z","modified":"2026-01-03T00:13:36Z","name":"Phishing domain: admin.68698.vip","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/admin.68698.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.68698.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-03T00:13:36Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.68698.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea0e7e62-f638-58a7-9fbb-dd692f7d3f5e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-03T00:19:57Z","modified":"2026-01-03T00:19:57Z","name":"Phishing domain: admin.768139.vip","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/admin.768139.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.768139.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-03T00:19:57Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.768139.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c872f7d-a340-5569-a42a-cf46683d6459","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-05T15:08:11Z","modified":"2026-02-05T15:08:11Z","name":"Phishing domain: admin.altyshka-drop.space","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating cs2. Report & evidence: https://phishdestroy.io/domain/admin.altyshka-drop.space","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.altyshka-drop.space']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-05T15:08:11Z","labels":["malicious-activity","phishing","brand:cs2"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.altyshka-drop.space"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--99acd86d-4ed4-5be6-bcfa-7deceadc5a5b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-28T10:53:41Z","modified":"2025-10-28T10:53:41Z","name":"Phishing domain: admin.amazontw.shop","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating binance. Report & evidence: https://phishdestroy.io/domain/admin.amazontw.shop","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.amazontw.shop']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-28T10:53:41Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.amazontw.shop"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--99f12488-768b-5b7f-a1fa-cee5cdd95018","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-23T12:15:49Z","modified":"2025-10-23T12:15:49Z","name":"Phishing domain: admin.bahusande.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aave. Report & evidence: https://phishdestroy.io/domain/admin.bahusande.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.bahusande.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-23T12:15:49Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.bahusande.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7083db4f-089a-5742-8c6f-fa0e09e38494","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-15T00:53:29Z","modified":"2025-10-15T00:53:29Z","name":"Phishing domain: admin.berachainbuild.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating berachain. Report & evidence: https://phishdestroy.io/domain/admin.berachainbuild.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.berachainbuild.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-15T00:53:29Z","labels":["malicious-activity","phishing","brand:berachain"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.berachainbuild.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--81e4e3c8-6c39-5311-b02a-8e47185db519","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-12T22:31:17Z","modified":"2025-12-12T22:31:17Z","name":"Phishing domain: admin.bifrostlive.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/admin.bifrostlive.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.bifrostlive.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-12T22:31:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.bifrostlive.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--208162a1-d2ca-5ae4-acfd-d11b136eeaef","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-04T16:56:14Z","modified":"2026-03-04T16:56:14Z","name":"Phishing domain: admin.bikacoin.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Kraken. Report & evidence: https://phishdestroy.io/domain/admin.bikacoin.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.bikacoin.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-04T16:56:14Z","labels":["malicious-activity","phishing","brand:kraken"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.bikacoin.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e60889c2-7f7a-5ce3-aca2-2fe58f51258e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-13T15:01:10Z","modified":"2026-06-13T15:01:10Z","name":"Phishing domain: admin.bitkmcc.one","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/admin.bitkmcc.one","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.bitkmcc.one']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-13T15:01:10Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.bitkmcc.one"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--58091ef4-25d3-5320-ac6d-f4b906579d05","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-12T21:23:08Z","modified":"2026-06-12T21:23:08Z","name":"Phishing domain: admin.bookingsccomdubaidesertsafari.webflow.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/admin.bookingsccomdubaidesertsafari.webflow.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.bookingsccomdubaidesertsafari.webflow.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-12T21:23:08Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.bookingsccomdubaidesertsafari.webflow.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--839b534b-a2d2-569f-9a79-d71ac0d1c778","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-23T11:54:47Z","modified":"2026-03-23T11:54:47Z","name":"Phishing domain: admin.card-trustwallet.online","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Trust Wallet. Report & evidence: https://phishdestroy.io/domain/admin.card-trustwallet.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.card-trustwallet.online']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-23T11:54:47Z","labels":["malicious-activity","phishing","brand:trust wallet"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.card-trustwallet.online"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--44e91021-1f8c-5053-bebb-f3bb48271b95","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-23T18:55:00Z","modified":"2026-04-23T18:55:00Z","name":"Phishing domain: admin.chainbytecontrol.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/admin.chainbytecontrol.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.chainbytecontrol.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-23T18:55:00Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.chainbytecontrol.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcda9801-c84d-5815-b983-24dca94bdb8b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-02T15:44:57Z","modified":"2026-05-02T15:44:57Z","name":"Phishing domain: admin.circleapp.ink","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/admin.circleapp.ink","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.circleapp.ink']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-02T15:44:57Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.circleapp.ink"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5147b3b7-73c9-5b95-a3fa-232416a167fc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-25T15:08:13Z","modified":"2026-05-25T15:08:13Z","name":"Phishing domain: admin.circlenet.social","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/admin.circlenet.social","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.circlenet.social']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-25T15:08:13Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.circlenet.social"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--80b262b8-afbf-581d-ba4f-c25794b9c487","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:51Z","modified":"2026-02-26T23:20:51Z","name":"Phishing domain: admin.coccin.vip","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/admin.coccin.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.coccin.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:51Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.coccin.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a8c95bc-67c7-5dbb-a28a-bf74410b1a0e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-07T15:18:02Z","modified":"2026-02-07T15:18:02Z","name":"Phishing domain: admin.coinbace5.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/admin.coinbace5.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.coinbace5.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-07T15:18:02Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.coinbace5.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--57a31fed-38e9-5ef3-a639-d534847e47cc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-23T16:18:39Z","modified":"2026-05-23T16:18:39Z","name":"Phishing domain: admin.coinbase-china.info","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/admin.coinbase-china.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.coinbase-china.info']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-23T16:18:39Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.coinbase-china.info"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bde089b9-56e8-5d72-9cf5-472d57a840f5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-13T19:25:29Z","modified":"2026-03-13T19:25:29Z","name":"Phishing domain: admin.coinbase-defi-pro.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/admin.coinbase-defi-pro.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.coinbase-defi-pro.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-13T19:25:29Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.coinbase-defi-pro.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--28255ca7-cb08-5b6e-9cdf-41e1257c92b0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-25T15:43:07Z","modified":"2026-03-25T15:43:07Z","name":"Phishing domain: admin.coinbasee.one","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/admin.coinbasee.one","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.coinbasee.one']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-25T15:43:07Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.coinbasee.one"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6de6365b-6620-5948-b340-8b22066e9693","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-09T06:42:05Z","modified":"2025-10-09T06:42:05Z","name":"Phishing domain: admin.coinbasefinancedepartment.art","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/admin.coinbasefinancedepartment.art","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.coinbasefinancedepartment.art']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-09T06:42:05Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.coinbasefinancedepartment.art"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e556795-e192-5ecc-a448-79cc759b312d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-11T17:42:50Z","modified":"2025-11-11T17:42:50Z","name":"Phishing domain: admin.coinbasesabms.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/admin.coinbasesabms.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.coinbasesabms.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-11T17:42:50Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.coinbasesabms.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a79b16f6-efd5-5477-811e-c8431d747171","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-10T15:06:15Z","modified":"2026-03-10T15:06:15Z","name":"Phishing domain: admin.coinbasew.mobi","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/admin.coinbasew.mobi","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.coinbasew.mobi']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-10T15:06:15Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.coinbasew.mobi"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6c1c8f2-68d4-511e-a2df-02c7c6c2a2a7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-15T00:55:02Z","modified":"2025-10-15T00:55:02Z","name":"Phishing domain: admin.connectwallet.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/admin.connectwallet.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.connectwallet.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-15T00:55:02Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.connectwallet.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c0b084f-4005-5d65-8abd-f6e5d74cdee9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-04T14:52:36Z","modified":"2026-01-04T14:52:36Z","name":"Phishing domain: admin.content-deepgtp.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/admin.content-deepgtp.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.content-deepgtp.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-04T14:52:36Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.content-deepgtp.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc3679af-498c-58fd-8cb6-5e18be952a0b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-28T16:24:05Z","modified":"2026-04-28T16:24:05Z","name":"Phishing domain: admin.cosmosdetermina.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/admin.cosmosdetermina.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.cosmosdetermina.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-28T16:24:05Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.cosmosdetermina.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3444234-ac87-56f9-9637-4cdd1f6cb42e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-21T02:31:16Z","modified":"2026-02-21T02:31:16Z","name":"Phishing domain: admin.coupleswap.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/admin.coupleswap.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.coupleswap.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-21T02:31:16Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.coupleswap.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cde11211-988b-5ac6-9852-339d610983de","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-16T14:42:16Z","modified":"2025-10-16T14:42:16Z","name":"Phishing domain: admin.cryptoapponchain.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/admin.cryptoapponchain.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.cryptoapponchain.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-16T14:42:16Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.cryptoapponchain.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--86bb799d-6540-5fe2-881d-63a91efe6d96","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-29T17:49:51Z","modified":"2026-03-29T17:49:51Z","name":"Phishing domain: admin.cs-kraken.digital","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Kraken. Report & evidence: https://phishdestroy.io/domain/admin.cs-kraken.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.cs-kraken.digital']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-29T17:49:51Z","labels":["malicious-activity","phishing","brand:kraken"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.cs-kraken.digital"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae9ad83f-7e35-5d67-966f-f03e91ffc0d3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-19T02:01:30Z","modified":"2025-09-19T02:01:30Z","name":"Phishing domain: admin.cultportal.cloud","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating chainlink. Report & evidence: https://phishdestroy.io/domain/admin.cultportal.cloud","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.cultportal.cloud']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-19T02:01:30Z","labels":["malicious-activity","phishing","brand:chainlink"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.cultportal.cloud"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7897b4cc-7c9b-5dc4-b2d0-7854d32877a0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: admin.cyusd.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/admin.cyusd.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.cyusd.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.cyusd.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed909369-08d5-56a9-9f0d-26f2e60c88ce","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T06:45:54Z","modified":"2026-06-15T06:45:54Z","name":"Phishing domain: admin.deribit-trade.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/admin.deribit-trade.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.deribit-trade.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T06:45:54Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.deribit-trade.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--226566e7-f1cf-51cb-9793-3e6d9992dfab","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T12:02:03Z","modified":"2026-07-27T12:02:03Z","name":"Phishing domain: admin.dev.upnotch.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/admin.dev.upnotch.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.dev.upnotch.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T12:02:03Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.dev.upnotch.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--57e66fc9-e8cd-5c23-a4c2-12e13298b06b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-16T14:42:31Z","modified":"2025-10-16T14:42:31Z","name":"Phishing domain: admin.dqotz.cfd","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/admin.dqotz.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.dqotz.cfd']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-16T14:42:31Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.dqotz.cfd"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f55e227-3c8d-5fe0-8adc-509f327e4d28","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-12T12:42:18Z","modified":"2025-11-12T12:42:18Z","name":"Phishing domain: admin.elevate-business.info","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/admin.elevate-business.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.elevate-business.info']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-12T12:42:18Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.elevate-business.info"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ff4423a-71dc-5a7f-a562-5e7c45c419ff","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: admin.estatehack.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/admin.estatehack.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.estatehack.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.estatehack.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--15038afd-2d8d-5827-b419-168906d118d2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-07T01:23:12Z","modified":"2026-01-07T01:23:12Z","name":"Phishing domain: admin.ethercorepool.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating base. Report & evidence: https://phishdestroy.io/domain/admin.ethercorepool.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.ethercorepool.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-07T01:23:12Z","labels":["malicious-activity","phishing","brand:base"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.ethercorepool.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--96609de2-ab5c-5fb9-9d61-e8bf37188ee9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-28T16:53:55Z","modified":"2025-10-28T16:53:55Z","name":"Phishing domain: admin.eurclex.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/admin.eurclex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.eurclex.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-28T16:53:55Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.eurclex.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ace418e1-76ce-5dd9-9668-28c077927e84","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-28T16:54:01Z","modified":"2025-10-28T16:54:01Z","name":"Phishing domain: admin.eurclexv.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/admin.eurclexv.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.eurclexv.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-28T16:54:01Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.eurclexv.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f22a1812-47a4-5501-8486-a508f786f015","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-28T16:53:43Z","modified":"2025-10-28T16:53:43Z","name":"Phishing domain: admin.eurclexx.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/admin.eurclexx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.eurclexx.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-28T16:53:43Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.eurclexx.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--308fc11e-47f2-5c36-b862-249d0f2b5021","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-12T23:53:51Z","modified":"2025-10-12T23:53:51Z","name":"Phishing domain: admin.extension-metamask-wallet.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating MetaMask. Report & evidence: https://phishdestroy.io/domain/admin.extension-metamask-wallet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.extension-metamask-wallet.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-12T23:53:51Z","labels":["malicious-activity","phishing","brand:metamask"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.extension-metamask-wallet.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d50f50d4-2aa1-53bd-8d43-c0d1782326dc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-20T07:29:28Z","modified":"2025-11-20T07:29:28Z","name":"Phishing domain: admin.feedbacknexus.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/admin.feedbacknexus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.feedbacknexus.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-20T07:29:28Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.feedbacknexus.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ec84a15-6edc-5b06-906b-e4096a25c9bc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-22T09:13:56Z","modified":"2026-05-22T09:13:56Z","name":"Phishing domain: admin.flexcontrol.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating att. Report & evidence: https://phishdestroy.io/domain/admin.flexcontrol.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.flexcontrol.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-22T09:13:56Z","labels":["malicious-activity","phishing","brand:att"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.flexcontrol.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6719e186-8f63-5428-9707-ca494b5fbb81","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-21T02:17:08Z","modified":"2026-07-21T02:17:08Z","name":"Phishing domain: admin.go.non-steam.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Steam. Report & evidence: https://phishdestroy.io/domain/admin.go.non-steam.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.go.non-steam.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-21T02:17:08Z","labels":["malicious-activity","phishing","brand:steam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.go.non-steam.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--968d036e-1272-513b-a425-c73d81f7a8e9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-14T20:19:51Z","modified":"2026-03-14T20:19:51Z","name":"Phishing domain: admin.harrisfirmllp.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Kraken. Report & evidence: https://phishdestroy.io/domain/admin.harrisfirmllp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.harrisfirmllp.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-14T20:19:51Z","labels":["malicious-activity","phishing","brand:kraken"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.harrisfirmllp.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2486116d-790b-52f5-8d4f-39ae6f46ffea","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-16T14:41:32Z","modified":"2025-10-16T14:41:32Z","name":"Phishing domain: admin.inthanoncoin.top","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/admin.inthanoncoin.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.inthanoncoin.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-16T14:41:32Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.inthanoncoin.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1af3f003-b14c-5a62-bdd4-1a735fbea119","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-26T15:57:02Z","modified":"2026-04-26T15:57:02Z","name":"Phishing domain: admin.invoice-ads-agency.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating meta. Report & evidence: https://phishdestroy.io/domain/admin.invoice-ads-agency.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.invoice-ads-agency.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-26T15:57:02Z","labels":["malicious-activity","phishing","brand:meta"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.invoice-ads-agency.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c450ed23-238a-5022-ba8c-f8d2e62abe98","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-05T03:18:26Z","modified":"2026-05-05T03:18:26Z","name":"Phishing domain: admin.invoice-ads-process.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating facebook. Report & evidence: https://phishdestroy.io/domain/admin.invoice-ads-process.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.invoice-ads-process.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-05T03:18:26Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.invoice-ads-process.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4844db4-8705-5195-b66c-b46502fd8e9d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-21T02:11:18Z","modified":"2026-07-21T02:11:18Z","name":"Phishing domain: admin.jlsmladmin.non-steam.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Steam. Report & evidence: https://phishdestroy.io/domain/admin.jlsmladmin.non-steam.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.jlsmladmin.non-steam.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-21T02:11:18Z","labels":["malicious-activity","phishing","brand:steam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.jlsmladmin.non-steam.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--037a24bf-40cf-56a8-bcd3-1070856fc327","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:07Z","modified":"2026-02-26T23:24:07Z","name":"Phishing domain: admin.jp-nasdaq.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/admin.jp-nasdaq.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.jp-nasdaq.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.jp-nasdaq.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b9fb8cb-653e-5db6-80d1-7a456bbfb407","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-19T00:01:18Z","modified":"2026-01-19T00:01:18Z","name":"Phishing domain: admin.kaz-kraken.cfd","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating kraken. Report & evidence: https://phishdestroy.io/domain/admin.kaz-kraken.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.kaz-kraken.cfd']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-19T00:01:18Z","labels":["malicious-activity","phishing","brand:kraken"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.kaz-kraken.cfd"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a2cbd0f-cb3d-5691-9b83-221cc9017940","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-17T13:27:25Z","modified":"2025-11-17T13:27:25Z","name":"Phishing domain: admin.kra-----40----cc.ru","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/admin.kra-----40----cc.ru","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.kra-----40----cc.ru']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-17T13:27:25Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.kra-----40----cc.ru"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--93ce6285-c458-5440-becd-f65f37306cbf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-05T14:52:31Z","modified":"2025-12-05T14:52:31Z","name":"Phishing domain: admin.kra46-------cc.ru","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/admin.kra46-------cc.ru","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.kra46-------cc.ru']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-05T14:52:31Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.kra46-------cc.ru"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--073f5f4a-ef57-5021-bc14-cd56d64da36b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-27T19:44:41Z","modified":"2025-11-27T19:44:41Z","name":"Phishing domain: admin.kraken-hk.vip","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Kraken. Report & evidence: https://phishdestroy.io/domain/admin.kraken-hk.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.kraken-hk.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-27T19:44:41Z","labels":["malicious-activity","phishing","brand:kraken"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.kraken-hk.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--25ed876d-cffa-5df7-b6d1-158703baf8c0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-27T08:37:13Z","modified":"2026-02-27T08:37:13Z","name":"Phishing domain: admin.kraken-ni.vip","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Kraken. Report & evidence: https://phishdestroy.io/domain/admin.kraken-ni.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.kraken-ni.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-27T08:37:13Z","labels":["malicious-activity","phishing","brand:kraken"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.kraken-ni.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c65321e2-287c-58f4-b8e1-bb9b098024ad","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-02T00:38:39Z","modified":"2026-05-02T00:38:39Z","name":"Phishing domain: admin.kraken.com.sc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Kraken. Report & evidence: https://phishdestroy.io/domain/admin.kraken.com.sc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.kraken.com.sc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-02T00:38:39Z","labels":["malicious-activity","phishing","brand:kraken"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.kraken.com.sc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b17c7a4-d92a-56fb-9082-923d1a64e3ea","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T06:26:57Z","modified":"2026-06-15T06:26:57Z","name":"Phishing domain: admin.krakenaaspdd.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Kraken. Report & evidence: https://phishdestroy.io/domain/admin.krakenaaspdd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.krakenaaspdd.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T06:26:57Z","labels":["malicious-activity","phishing","brand:kraken"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.krakenaaspdd.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0afdedc5-00d8-5f50-bb65-23af51bbc7bd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-28T00:05:18Z","modified":"2025-11-28T00:05:18Z","name":"Phishing domain: admin.krakenapi.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Kraken. Report & evidence: https://phishdestroy.io/domain/admin.krakenapi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.krakenapi.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-28T00:05:18Z","labels":["malicious-activity","phishing","brand:kraken"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.krakenapi.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--68456473-ef1a-5b24-8ff7-1b692ccdcf89","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-26T02:46:03Z","modified":"2026-01-26T02:46:03Z","name":"Phishing domain: admin.legendsnt.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/admin.legendsnt.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.legendsnt.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-26T02:46:03Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.legendsnt.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcdbe78c-2cc9-5aa1-9fd2-0e14a82594e4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T03:47:32Z","modified":"2026-06-15T03:47:32Z","name":"Phishing domain: admin.luxurywatchesus.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/admin.luxurywatchesus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.luxurywatchesus.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T03:47:32Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.luxurywatchesus.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--307451b2-0906-546c-8271-7b9af693370d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-05T18:40:10Z","modified":"2026-08-05T18:40:10Z","name":"Phishing domain: admin.metadao-dex.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/admin.metadao-dex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.metadao-dex.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-05T18:40:10Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.metadao-dex.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a40ae5ce-cae6-53c1-9eed-4de83d2ccbce","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-07T15:54:22Z","modified":"2025-09-07T15:54:22Z","name":"Phishing domain: admin.mypayship.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/admin.mypayship.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.mypayship.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-07T15:54:22Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.mypayship.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d43f9b5-b540-590e-af54-c968490cbf08","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-21T02:12:21Z","modified":"2026-07-21T02:12:21Z","name":"Phishing domain: admin.notexistsefgetjgpgcbeta.non-steam.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Steam. Report & evidence: https://phishdestroy.io/domain/admin.notexistsefgetjgpgcbeta.non-steam.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.notexistsefgetjgpgcbeta.non-steam.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-21T02:12:21Z","labels":["malicious-activity","phishing","brand:steam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.notexistsefgetjgpgcbeta.non-steam.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9afeab42-3c7b-5516-a528-350fe17b2244","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:11Z","modified":"2026-02-26T23:21:11Z","name":"Phishing domain: admin.partner-agency-network.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/admin.partner-agency-network.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.partner-agency-network.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:11Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.partner-agency-network.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--de35f080-765f-5217-b41b-3a2e4190fb8b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-03T15:33:24Z","modified":"2026-03-03T15:33:24Z","name":"Phishing domain: admin.phantom-bot.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Phantom. Report & evidence: https://phishdestroy.io/domain/admin.phantom-bot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.phantom-bot.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-03T15:33:24Z","labels":["malicious-activity","phishing","brand:phantom"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.phantom-bot.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5eba089c-499f-56b5-b622-b5ba5338aacc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-25T12:35:41Z","modified":"2025-11-25T12:35:41Z","name":"Phishing domain: admin.pwffood.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/admin.pwffood.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.pwffood.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-25T12:35:41Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.pwffood.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c43748e0-4b16-521f-a795-e634456dc82e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T12:02:03Z","modified":"2026-07-27T12:02:03Z","name":"Phishing domain: admin.qaschool.com.ua","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/admin.qaschool.com.ua","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.qaschool.com.ua']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T12:02:03Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.qaschool.com.ua"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e73d94e-5682-503f-ad9d-05512ab26c9a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:59Z","modified":"2026-02-26T23:23:59Z","name":"Phishing domain: admin.quantfuturesio.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/admin.quantfuturesio.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.quantfuturesio.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:59Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.quantfuturesio.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--694c0dab-d864-5c45-a1ce-942f64d74aad","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-25T15:25:38Z","modified":"2026-01-25T15:25:38Z","name":"Phishing domain: admin.register.org.im","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating tiktokshop. Report & evidence: https://phishdestroy.io/domain/admin.register.org.im","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.register.org.im']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-25T15:25:38Z","labels":["malicious-activity","phishing","brand:tiktokshop"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.register.org.im"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--05cff7fb-2b56-5537-8574-8a8f3f0191d9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:50Z","modified":"2026-02-26T23:23:50Z","name":"Phishing domain: admin.scotiaverificationregistry.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating scotiabank. Report & evidence: https://phishdestroy.io/domain/admin.scotiaverificationregistry.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.scotiaverificationregistry.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:50Z","labels":["malicious-activity","phishing","brand:scotiabank"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.scotiaverificationregistry.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6dc6eb3b-5df3-5ab2-9376-8e07099bd21e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:58Z","modified":"2026-02-26T23:22:58Z","name":"Phishing domain: admin.stake-rocketpooi.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/admin.stake-rocketpooi.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.stake-rocketpooi.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:58Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.stake-rocketpooi.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e61a91a-0fcd-5615-8f1b-5e2d45bd2989","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-24T07:23:35Z","modified":"2026-01-24T07:23:35Z","name":"Phishing domain: admin.stock-deepgtp.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/admin.stock-deepgtp.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.stock-deepgtp.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-24T07:23:35Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.stock-deepgtp.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--757ae1f2-fe5b-574e-a01c-26650f811018","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-23T13:02:36Z","modified":"2025-09-23T13:02:36Z","name":"Phishing domain: admin.swiftwritingdigital.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/admin.swiftwritingdigital.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.swiftwritingdigital.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-23T13:02:36Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.swiftwritingdigital.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfd2fb62-c58e-5b93-bde5-43347205efb8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-23T14:34:41Z","modified":"2026-06-23T14:34:41Z","name":"Phishing domain: admin.taggz.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Facebook. Report & evidence: https://phishdestroy.io/domain/admin.taggz.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.taggz.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-23T14:34:41Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.taggz.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--417a753e-01f4-59bc-93d7-f8b89c54ac58","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-10T14:34:08Z","modified":"2026-06-10T14:34:08Z","name":"Phishing domain: admin.the-echo-market.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/admin.the-echo-market.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.the-echo-market.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-10T14:34:08Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.the-echo-market.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5689da75-33c8-5c64-a0e7-f56b1297cd16","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T12:02:03Z","modified":"2026-07-27T12:02:03Z","name":"Phishing domain: admin.tint-wrap.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/admin.tint-wrap.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.tint-wrap.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T12:02:03Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.tint-wrap.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3172c4c2-0805-56eb-8e4f-6d2dcd988848","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-29T17:50:07Z","modified":"2026-03-29T17:50:07Z","name":"Phishing domain: admin.uniswap-invest.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Uniswap. Report & evidence: https://phishdestroy.io/domain/admin.uniswap-invest.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.uniswap-invest.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-29T17:50:07Z","labels":["malicious-activity","phishing","brand:uniswap"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.uniswap-invest.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3536ec94-61b5-5f69-b4ac-6ce0d79fbe19","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-29T13:01:25Z","modified":"2025-12-29T13:01:25Z","name":"Phishing domain: admin.upholdf.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/admin.upholdf.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.upholdf.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-29T13:01:25Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.upholdf.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--639bf514-53fb-576c-9b61-70c30189c261","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-28T09:02:03Z","modified":"2026-07-28T09:02:03Z","name":"Phishing domain: admin.vip.pearson367.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/admin.vip.pearson367.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.vip.pearson367.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-28T09:02:03Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.vip.pearson367.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd43f57d-0071-503b-b302-8c924a970deb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-21T02:15:35Z","modified":"2026-07-21T02:15:35Z","name":"Phishing domain: admin.www.cpanel.non-steam.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Steam. Report & evidence: https://phishdestroy.io/domain/admin.www.cpanel.non-steam.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.www.cpanel.non-steam.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-21T02:15:35Z","labels":["malicious-activity","phishing","brand:steam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.www.cpanel.non-steam.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e240efc-427a-57f7-b808-083672d995cc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-21T02:19:24Z","modified":"2026-07-21T02:19:24Z","name":"Phishing domain: admin.www.gtest.non-steam.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Steam. Report & evidence: https://phishdestroy.io/domain/admin.www.gtest.non-steam.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.www.gtest.non-steam.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-21T02:19:24Z","labels":["malicious-activity","phishing","brand:steam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.www.gtest.non-steam.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d56f0ab5-d0d9-5e51-b0ff-5bc86d11d32e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:49Z","modified":"2026-02-26T23:20:49Z","name":"Phishing domain: admin.xn--lautstrke-02a.de","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/admin.xn--lautstrke-02a.de","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.xn--lautstrke-02a.de']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:49Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.xn--lautstrke-02a.de"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdf48ff4-b9a4-5667-9b37-b67586d217ab","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-03T00:17:14Z","modified":"2026-01-03T00:17:14Z","name":"Phishing domain: admin.yqbjdb.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/admin.yqbjdb.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin.yqbjdb.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-03T00:17:14Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin.yqbjdb.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc0cb5a7-40b0-58d4-b532-ab32173f0726","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-31T17:41:50Z","modified":"2026-01-31T17:41:50Z","name":"Phishing domain: admin0919.ethereumhub003.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ethereum. Report & evidence: https://phishdestroy.io/domain/admin0919.ethereumhub003.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin0919.ethereumhub003.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-31T17:41:50Z","labels":["malicious-activity","phishing","brand:ethereum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin0919.ethereumhub003.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--db923e22-f1d1-550e-87ea-abd25682aeba","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-27T16:57:44Z","modified":"2026-02-27T16:57:44Z","name":"Phishing domain: admin2.ondoc.co.kr","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/admin2.ondoc.co.kr","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admin2.ondoc.co.kr']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-27T16:57:44Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admin2.ondoc.co.kr"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e15d2971-c717-54da-971d-6bb0246ddf77","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-20T21:40:25Z","modified":"2026-03-20T21:40:25Z","name":"Phishing domain: adminadsadd.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating facebook. Report & evidence: https://phishdestroy.io/domain/adminadsadd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adminadsadd.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-20T21:40:25Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adminadsadd.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--464e8cf5-e131-5838-a2c3-6fc0287255c6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-20T21:30:48Z","modified":"2026-03-20T21:30:48Z","name":"Phishing domain: adminadsprocessing.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating facebook. Report & evidence: https://phishdestroy.io/domain/adminadsprocessing.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adminadsprocessing.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-20T21:30:48Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adminadsprocessing.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff73d072-0773-5899-97a7-78c70d77df84","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-30T13:40:51Z","modified":"2026-03-30T13:40:51Z","name":"Phishing domain: adminaganwa.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adminaganwa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adminaganwa.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-30T13:40:51Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adminaganwa.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--76ab85eb-818d-5870-9114-f02013594993","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-14T17:47:38Z","modified":"2026-03-14T17:47:38Z","name":"Phishing domain: adminapi.coinbasepro.hk","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/adminapi.coinbasepro.hk","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adminapi.coinbasepro.hk']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-14T17:47:38Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adminapi.coinbasepro.hk"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3877abe-15f2-53e7-847b-08a4701d2332","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-06T18:06:50Z","modified":"2026-07-06T18:06:50Z","name":"Phishing domain: adminapi.itite998.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adminapi.itite998.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adminapi.itite998.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-06T18:06:50Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adminapi.itite998.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c234b16-90aa-5715-bece-4f24b997816f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-02T15:49:05Z","modified":"2026-02-02T15:49:05Z","name":"Phishing domain: adminapi.jiuzhouw.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating amazon. Report & evidence: https://phishdestroy.io/domain/adminapi.jiuzhouw.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adminapi.jiuzhouw.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-02T15:49:05Z","labels":["malicious-activity","phishing","brand:amazon"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adminapi.jiuzhouw.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--13d1bc7a-5dad-5cb7-a086-f1f45d0a75f3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-15T15:26:18Z","modified":"2025-10-15T15:26:18Z","name":"Phishing domain: adminciwei.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/adminciwei.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adminciwei.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-15T15:26:18Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adminciwei.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a60f1a0-e5d7-51de-adf9-0f29d66dc422","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-21T13:42:27Z","modified":"2025-11-21T13:42:27Z","name":"Phishing domain: admincoinbase.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/admincoinbase.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admincoinbase.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-21T13:42:27Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admincoinbase.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0557751-82ef-574a-93cd-54043e9c8266","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-08T14:16:31Z","modified":"2025-09-08T14:16:31Z","name":"Phishing domain: adminer.airdropsms.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adminer.airdropsms.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adminer.airdropsms.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-08T14:16:31Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adminer.airdropsms.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5d09359-7d42-5bf2-b31d-7d3a691c4be6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:53Z","modified":"2026-02-26T23:22:53Z","name":"Phishing domain: admingemini.botair.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Gemini. Report & evidence: https://phishdestroy.io/domain/admingemini.botair.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admingemini.botair.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:53Z","labels":["malicious-activity","phishing","brand:gemini"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admingemini.botair.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7bf42c5-4875-59c8-a814-0db892f2046e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-22T14:18:01Z","modified":"2026-06-22T14:18:01Z","name":"Phishing domain: administration1.wasmer.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating nfcu. Report & evidence: https://phishdestroy.io/domain/administration1.wasmer.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'administration1.wasmer.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-22T14:18:01Z","labels":["malicious-activity","phishing","brand:nfcu"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/administration1.wasmer.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a784bb8-9fd7-55ff-ad98-8f2b915ba099","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-25T15:20:31Z","modified":"2026-04-25T15:20:31Z","name":"Phishing domain: administrator.invoice-partners-agency.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating meta. Report & evidence: https://phishdestroy.io/domain/administrator.invoice-partners-agency.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'administrator.invoice-partners-agency.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-25T15:20:31Z","labels":["malicious-activity","phishing","brand:meta"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/administrator.invoice-partners-agency.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9f1de2a-7143-5e32-8eb8-fc0f62b17538","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-25T02:16:42Z","modified":"2026-06-25T02:16:42Z","name":"Phishing domain: adminitracion-serviciosbhd2026.iceiy.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/adminitracion-serviciosbhd2026.iceiy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adminitracion-serviciosbhd2026.iceiy.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-25T02:16:42Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adminitracion-serviciosbhd2026.iceiy.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba976ddd-d7e5-56be-82db-720d8a025387","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:21Z","modified":"2026-02-26T23:24:21Z","name":"Phishing domain: adminka-monstersinc.us","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating steam. Report & evidence: https://phishdestroy.io/domain/adminka-monstersinc.us","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adminka-monstersinc.us']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:21Z","labels":["malicious-activity","phishing","brand:steam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adminka-monstersinc.us"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--26ce2c37-e30c-58e9-9ee8-cb6374971ba1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:03Z","modified":"2026-02-26T23:24:03Z","name":"Phishing domain: adminka.gammonef.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adminka.gammonef.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adminka.gammonef.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:03Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adminka.gammonef.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--49549184-70b4-5c1b-871d-fac8c73682ff","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-07-31T09:09:43Z","modified":"2025-07-31T09:09:43Z","name":"Phishing domain: adminkawork.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adminkawork.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adminkawork.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-07-31T09:09:43Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adminkawork.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7582674-7bfd-590e-b112-7df9140a94ce","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-29T15:42:52Z","modified":"2026-01-29T15:42:52Z","name":"Phishing domain: adminmailrelase-sysopp.ssmailer.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adminmailrelase-sysopp.ssmailer.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adminmailrelase-sysopp.ssmailer.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-29T15:42:52Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adminmailrelase-sysopp.ssmailer.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bc71d5c-484d-5853-a158-8ddac56b217c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-01T17:24:04Z","modified":"2026-06-01T17:24:04Z","name":"Phishing domain: adminmng.faccebookcngg.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adminmng.faccebookcngg.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adminmng.faccebookcngg.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-01T17:24:04Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adminmng.faccebookcngg.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d10a571-7b29-594d-b3e9-97b57c2956ad","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:57Z","modified":"2026-02-26T23:21:57Z","name":"Phishing domain: adminodes.site","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adminodes.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adminodes.site']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:57Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adminodes.site"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9506b496-da13-5129-b23b-037861fa1571","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-15T01:00:05Z","modified":"2025-10-15T01:00:05Z","name":"Phishing domain: adminoo1.weebly.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adminoo1.weebly.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adminoo1.weebly.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-15T01:00:05Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adminoo1.weebly.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc28ddb9-af93-5ea1-a345-68e95e16d198","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-14T18:36:17Z","modified":"2026-05-14T18:36:17Z","name":"Phishing domain: admins.fxporza.top","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/admins.fxporza.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admins.fxporza.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-14T18:36:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admins.fxporza.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dba394d-715b-59d9-8309-384865ae3688","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-04T19:34:12Z","modified":"2026-03-04T19:34:12Z","name":"Phishing domain: adminsdao.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adminsdao.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adminsdao.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-04T19:34:12Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adminsdao.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b5ad2a7-dc4f-5846-af1f-8339eacd25b2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-18T19:07:07Z","modified":"2026-07-18T19:07:07Z","name":"Phishing domain: admirable-sunburst-809404.netlify.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericemail. Report & evidence: https://phishdestroy.io/domain/admirable-sunburst-809404.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admirable-sunburst-809404.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-18T19:07:07Z","labels":["malicious-activity","phishing","brand:genericemail"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admirable-sunburst-809404.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4eab02bd-e5d7-5ffd-bdff-475eb059877f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-04T15:05:16Z","modified":"2026-01-04T15:05:16Z","name":"Phishing domain: admiralbet.de","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/admiralbet.de","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admiralbet.de']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-04T15:05:16Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admiralbet.de"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb8e7f9b-821c-54be-974f-2a08a4b49986","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:55:47Z","modified":"2026-07-27T04:55:47Z","name":"Phishing domain: admiraledgesync.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/admiraledgesync.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admiraledgesync.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:55:47Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admiraledgesync.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8a05dc3-2979-5036-9c32-63af55574107","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-08T11:17:04Z","modified":"2025-08-08T11:17:04Z","name":"Phishing domain: admiralsglobal.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/admiralsglobal.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admiralsglobal.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-08T11:17:04Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admiralsglobal.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0671041-516a-5b08-b517-0e5548ce05b1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-06T12:22:59Z","modified":"2025-12-06T12:22:59Z","name":"Phishing domain: admissiblevideo.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Polygon. Report & evidence: https://phishdestroy.io/domain/admissiblevideo.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admissiblevideo.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-06T12:22:59Z","labels":["malicious-activity","phishing","brand:polygon"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admissiblevideo.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--78aa14f1-d39a-50b4-8e54-023d904c8b0f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-16T21:40:48Z","modified":"2026-04-16T21:40:48Z","name":"Phishing domain: admission-x.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Twitter/X. Report & evidence: https://phishdestroy.io/domain/admission-x.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admission-x.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-16T21:40:48Z","labels":["malicious-activity","phishing","brand:twitter/x"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admission-x.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b6168ca-5c8e-56bb-a6f7-5d55c0efa3bf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-06T18:07:02Z","modified":"2026-07-06T18:07:02Z","name":"Phishing domain: admlbase.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/admlbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admlbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-06T18:07:02Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admlbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ccc1213-fc19-5467-85f4-343ce369d8d8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-24T18:52:11Z","modified":"2026-02-24T18:52:11Z","name":"Phishing domain: admlplus.top","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/admlplus.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admlplus.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-24T18:52:11Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admlplus.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--36c81132-ae01-5dd1-8f76-271ea46126e4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-16T22:58:17Z","modified":"2026-07-16T22:58:17Z","name":"Phishing domain: admos-gleitlager.de","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/admos-gleitlager.de","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admos-gleitlager.de']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-16T22:58:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admos-gleitlager.de"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0df7e01-8b6e-5e08-809f-fb130d763f3d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-30T23:30:40Z","modified":"2026-06-30T23:30:40Z","name":"Phishing domain: admservers.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/admservers.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'admservers.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-30T23:30:40Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/admservers.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--531dcf89-00d2-520e-8769-aff10d99f4c0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-17T15:19:17Z","modified":"2026-05-17T15:19:17Z","name":"Phishing domain: adnaan24-pixel.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating netflix. Report & evidence: https://phishdestroy.io/domain/adnaan24-pixel.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adnaan24-pixel.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-17T15:19:17Z","labels":["malicious-activity","phishing","brand:netflix"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adnaan24-pixel.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a52fdc28-38d4-5f59-84a3-8d39f0b8ebcb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-29T03:13:07Z","modified":"2026-04-29T03:13:07Z","name":"Phishing domain: adnan11610076.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating netflix. Report & evidence: https://phishdestroy.io/domain/adnan11610076.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adnan11610076.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-29T03:13:07Z","labels":["malicious-activity","phishing","brand:netflix"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adnan11610076.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d184ae6-a88f-5d38-badd-7a8cd4b39591","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-22T15:24:51Z","modified":"2026-04-22T15:24:51Z","name":"Phishing domain: adnanbaloch8923-ship-it.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating linkedin. Report & evidence: https://phishdestroy.io/domain/adnanbaloch8923-ship-it.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adnanbaloch8923-ship-it.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-22T15:24:51Z","labels":["malicious-activity","phishing","brand:linkedin"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adnanbaloch8923-ship-it.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dec9c72a-d266-54c5-bffa-998989322678","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-03T09:21:52Z","modified":"2025-08-03T09:21:52Z","name":"Phishing domain: adnexis.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adnexis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adnexis.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-03T09:21:52Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adnexis.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf725e31-2b57-5641-ad38-251f1a010600","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-19T00:02:02Z","modified":"2026-01-19T00:02:02Z","name":"Phishing domain: adnocprofit.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/adnocprofit.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adnocprofit.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-19T00:02:02Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adnocprofit.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fcaedea-3649-5d3e-8e80-1a29d5239df0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-18T00:19:10Z","modified":"2025-12-18T00:19:10Z","name":"Phishing domain: adob-nle.global.ssl.fastly.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adob-nle.global.ssl.fastly.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adob-nle.global.ssl.fastly.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-18T00:19:10Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adob-nle.global.ssl.fastly.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a221cb1-25a0-5ab7-b5e8-0feec483a25d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T03:06:14Z","modified":"2026-06-15T03:06:14Z","name":"Phishing domain: adobe-4s9.kpenza-htrenchless-com-s-account.workers.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Adobe. Report & evidence: https://phishdestroy.io/domain/adobe-4s9.kpenza-htrenchless-com-s-account.workers.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adobe-4s9.kpenza-htrenchless-com-s-account.workers.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T03:06:14Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adobe-4s9.kpenza-htrenchless-com-s-account.workers.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--41999bbc-83e1-5270-a2c3-ed7967c40a86","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: adobe-7t9.cfreda-radonh2o-com-s-account.workers.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Adobe. Report & evidence: https://phishdestroy.io/domain/adobe-7t9.cfreda-radonh2o-com-s-account.workers.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adobe-7t9.cfreda-radonh2o-com-s-account.workers.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adobe-7t9.cfreda-radonh2o-com-s-account.workers.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e350a78-70fc-5330-ae5c-f675bd7a5a50","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T03:06:15Z","modified":"2026-06-15T03:06:15Z","name":"Phishing domain: adobe-ael.saliphaberylin.workers.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Adobe. Report & evidence: https://phishdestroy.io/domain/adobe-ael.saliphaberylin.workers.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adobe-ael.saliphaberylin.workers.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T03:06:15Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adobe-ael.saliphaberylin.workers.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4eecc798-b1fc-5f2c-89cc-4b3146b8e7c2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-16T13:32:47Z","modified":"2025-12-16T13:32:47Z","name":"Phishing domain: adobe-clone.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/adobe-clone.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adobe-clone.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-16T13:32:47Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adobe-clone.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4b6ff6b-713e-51a8-97c1-73aae9523f59","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-21T18:14:24Z","modified":"2026-02-21T18:14:24Z","name":"Phishing domain: adobe-creative-cloud-free.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating [\"adobe\"]. Report & evidence: https://phishdestroy.io/domain/adobe-creative-cloud-free.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adobe-creative-cloud-free.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-21T18:14:24Z","labels":["malicious-activity","phishing","brand:[\"adobe\"]"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adobe-creative-cloud-free.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4dea983-5078-5491-aa4f-2e4f4ca27440","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-29T15:11:14Z","modified":"2026-03-29T15:11:14Z","name":"Phishing domain: adobe-docs.us","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Adobe. Report & evidence: https://phishdestroy.io/domain/adobe-docs.us","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adobe-docs.us']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-29T15:11:14Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adobe-docs.us"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee8a73c7-23b3-5d6b-9db8-65a81f8e8b83","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-10T05:02:04Z","modified":"2025-12-10T05:02:04Z","name":"Phishing domain: adobe-dynamic-inquiry-order.netlify.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating [\"adobe\"]. Report & evidence: https://phishdestroy.io/domain/adobe-dynamic-inquiry-order.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adobe-dynamic-inquiry-order.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-10T05:02:04Z","labels":["malicious-activity","phishing","brand:[\"adobe\"]"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adobe-dynamic-inquiry-order.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3ba659e-04f5-5521-bc1a-d4b465c7bbc0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-19T09:30:51Z","modified":"2025-11-19T09:30:51Z","name":"Phishing domain: adobe-pdf-yangwoo-company-ltd.netlify.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating [\"adobe\"]. Report & evidence: https://phishdestroy.io/domain/adobe-pdf-yangwoo-company-ltd.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adobe-pdf-yangwoo-company-ltd.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-19T09:30:51Z","labels":["malicious-activity","phishing","brand:[\"adobe\"]"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adobe-pdf-yangwoo-company-ltd.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bdde032-7bf1-5ba7-8918-d9e53263b46b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-23T00:10:20Z","modified":"2026-06-23T00:10:20Z","name":"Phishing domain: adobe-qox.jermaine-totalwarehouse-com-s-account.workers.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Adobe. Report & evidence: https://phishdestroy.io/domain/adobe-qox.jermaine-totalwarehouse-com-s-account.workers.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adobe-qox.jermaine-totalwarehouse-com-s-account.workers.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-23T00:10:20Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adobe-qox.jermaine-totalwarehouse-com-s-account.workers.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c559c58e-8632-5ca4-9a68-fc326e1ea36a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-31T14:32:47Z","modified":"2026-07-31T14:32:47Z","name":"Phishing domain: adobe-review.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Adobe. Report & evidence: https://phishdestroy.io/domain/adobe-review.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adobe-review.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-31T14:32:47Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adobe-review.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d117b189-a674-5939-b703-2cce344796ed","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T03:06:14Z","modified":"2026-06-15T03:06:14Z","name":"Phishing domain: adobe-xaf.azavier-cavion-dropons-com-s-account.workers.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Adobe. Report & evidence: https://phishdestroy.io/domain/adobe-xaf.azavier-cavion-dropons-com-s-account.workers.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adobe-xaf.azavier-cavion-dropons-com-s-account.workers.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T03:06:14Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adobe-xaf.azavier-cavion-dropons-com-s-account.workers.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--707db5f4-6110-54ed-be24-b0c4805aa217","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-30T14:01:39Z","modified":"2026-07-30T14:01:39Z","name":"Phishing domain: adobe-yzz.ejkim-gsglobalusa-us-s-account.workers.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Adobe. Report & evidence: https://phishdestroy.io/domain/adobe-yzz.ejkim-gsglobalusa-us-s-account.workers.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adobe-yzz.ejkim-gsglobalusa-us-s-account.workers.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-30T14:01:39Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adobe-yzz.ejkim-gsglobalusa-us-s-account.workers.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--150a5677-a3c8-5342-a812-3f8835447670","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-01T12:21:58Z","modified":"2025-12-01T12:21:58Z","name":"Phishing domain: adobe.appwrite.network","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Excel / PDF download. Report & evidence: https://phishdestroy.io/domain/adobe.appwrite.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adobe.appwrite.network']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-01T12:21:58Z","labels":["malicious-activity","phishing","brand:excel / pdf download"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adobe.appwrite.network"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a118cedb-b25c-5586-8cdb-39d442ce8af7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-08T15:15:02Z","modified":"2026-08-08T15:15:02Z","name":"Phishing domain: adobe.athena.captivatechat.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/adobe.athena.captivatechat.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adobe.athena.captivatechat.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-08T15:15:02Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adobe.athena.captivatechat.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--697f4a99-8dd4-5898-bb4a-558a10bb1444","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-07T15:48:27Z","modified":"2026-03-07T15:48:27Z","name":"Phishing domain: adobe.ce1.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Adobe. Report & evidence: https://phishdestroy.io/domain/adobe.ce1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adobe.ce1.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-07T15:48:27Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adobe.ce1.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2a8461d-5369-5364-9823-48db109619b6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-13T14:28:52Z","modified":"2026-06-13T14:28:52Z","name":"Phishing domain: adobeasia.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Adobe. Report & evidence: https://phishdestroy.io/domain/adobeasia.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adobeasia.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-13T14:28:52Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adobeasia.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--648db5b1-fa36-5deb-862b-c18d8785f7d3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-31T16:59:34Z","modified":"2026-03-31T16:59:34Z","name":"Phishing domain: adobedrive-developproject.appwrite.network","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Adobe. Report & evidence: https://phishdestroy.io/domain/adobedrive-developproject.appwrite.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adobedrive-developproject.appwrite.network']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-31T16:59:34Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adobedrive-developproject.appwrite.network"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b656e0cc-757d-534d-9be2-d5d588446065","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-19T15:14:03Z","modified":"2026-04-19T15:14:03Z","name":"Phishing domain: adobeevoiv.duckdns.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/adobeevoiv.duckdns.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adobeevoiv.duckdns.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-19T15:14:03Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adobeevoiv.duckdns.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4606df2-d7d0-5e04-80ba-c26fd4997d69","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:03Z","modified":"2026-02-26T23:23:03Z","name":"Phishing domain: adobeexperience.com.br","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Adobe. Report & evidence: https://phishdestroy.io/domain/adobeexperience.com.br","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adobeexperience.com.br']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:03Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adobeexperience.com.br"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ad6191b-26bf-50ca-8b83-2a68a9a781cf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-25T03:53:08Z","modified":"2026-02-25T03:53:08Z","name":"Phishing domain: adobefilesopener.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Adobe. Report & evidence: https://phishdestroy.io/domain/adobefilesopener.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adobefilesopener.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-25T03:53:08Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adobefilesopener.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff17c503-6e3b-5ebd-bde5-e1df18e9e785","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-26T18:16:09Z","modified":"2026-01-26T18:16:09Z","name":"Phishing domain: adobeflashplayer.su","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adobeflashplayer.su","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adobeflashplayer.su']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-26T18:16:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adobeflashplayer.su"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a46c8206-84a4-5655-bd5c-5098f07ee3e4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-05T16:02:17Z","modified":"2025-12-05T16:02:17Z","name":"Phishing domain: adobepdf-crostata-material.netlify.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating [\"adobe\"]. Report & evidence: https://phishdestroy.io/domain/adobepdf-crostata-material.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adobepdf-crostata-material.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-05T16:02:17Z","labels":["malicious-activity","phishing","brand:[\"adobe\"]"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adobepdf-crostata-material.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fc9f235-f357-5f95-a939-c7b7094c6647","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-28T14:47:46Z","modified":"2025-11-28T14:47:46Z","name":"Phishing domain: adopters-prvxt.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/adopters-prvxt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adopters-prvxt.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-28T14:47:46Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adopters-prvxt.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fce3abf6-b021-50a8-805e-281abeb145c5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:13Z","modified":"2026-02-26T23:21:13Z","name":"Phishing domain: adopters.firebaseapp.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating base. Report & evidence: https://phishdestroy.io/domain/adopters.firebaseapp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adopters.firebaseapp.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:13Z","labels":["malicious-activity","phishing","brand:base"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adopters.firebaseapp.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdfcf190-5c33-52d1-bf61-0ce24a7bdead","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2024-04-16T16:27:59Z","modified":"2024-04-16T16:27:59Z","name":"Phishing domain: adoptmeappeals.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating discord. Report & evidence: https://phishdestroy.io/domain/adoptmeappeals.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adoptmeappeals.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2024-04-16T16:27:59Z","labels":["malicious-activity","phishing","brand:discord"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adoptmeappeals.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac08f46f-2172-55d2-a4fc-b7ab44cdcb77","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-31T20:53:08Z","modified":"2026-07-31T20:53:08Z","name":"Phishing domain: adoptmebio.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adoptmebio.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adoptmebio.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-31T20:53:08Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adoptmebio.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--51eae9ea-a5b4-5a4e-87f8-f2a832ce8b62","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-07T14:17:36Z","modified":"2026-06-07T14:17:36Z","name":"Phishing domain: adoptmebio.online","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adoptmebio.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adoptmebio.online']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-07T14:17:36Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adoptmebio.online"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--81600207-d929-5b6c-86be-994d3ac09343","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-01T13:04:32Z","modified":"2026-08-01T13:04:32Z","name":"Phishing domain: adoptmebio.site","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adoptmebio.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adoptmebio.site']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-01T13:04:32Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adoptmebio.site"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--20d2ae49-996f-53ee-a21e-24063f16ed84","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-22T07:48:14Z","modified":"2026-06-22T07:48:14Z","name":"Phishing domain: adoptmefree.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adoptmefree.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adoptmefree.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-22T07:48:14Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adoptmefree.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a2662c9-84ee-5b41-9a0a-d4dc76d03d26","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-20T17:55:33Z","modified":"2026-07-20T17:55:33Z","name":"Phishing domain: adoptmekorea.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adoptmekorea.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adoptmekorea.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-20T17:55:33Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adoptmekorea.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f79ddd31-cf64-59ea-96a4-8ef75f3a6fbc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-07T12:23:46Z","modified":"2026-06-07T12:23:46Z","name":"Phishing domain: adoptmekorea.online","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adoptmekorea.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adoptmekorea.online']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-07T12:23:46Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adoptmekorea.online"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c714672-51f4-56e4-bdb2-f2fbfe29d787","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-07T12:24:33Z","modified":"2026-06-07T12:24:33Z","name":"Phishing domain: adoptmekorean.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adoptmekorean.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adoptmekorean.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-07T12:24:33Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adoptmekorean.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--77899a0d-5f8a-5671-8cd8-a4613a1b5176","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-07T12:22:04Z","modified":"2026-06-07T12:22:04Z","name":"Phishing domain: adoptmepets.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adoptmepets.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adoptmepets.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-07T12:22:04Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adoptmepets.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0065a888-03a9-5d5d-ab5d-cea3264093f3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-12T21:24:33Z","modified":"2026-06-12T21:24:33Z","name":"Phishing domain: adoraahu.watch","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adoraahu.watch","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adoraahu.watch']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-12T21:24:33Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adoraahu.watch"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c10c38b2-d9d6-5cf2-94c5-7e2dabd00f7c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-18T15:34:56Z","modified":"2025-10-18T15:34:56Z","name":"Phishing domain: adorable-capybara-6787eb.netlify.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adorable-capybara-6787eb.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adorable-capybara-6787eb.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-18T15:34:56Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adorable-capybara-6787eb.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0132263b-e826-5830-a8f9-acbf3c665384","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: adorable-gelato-921c2a.netlify.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating TikTok. Report & evidence: https://phishdestroy.io/domain/adorable-gelato-921c2a.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adorable-gelato-921c2a.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing","brand:tiktok"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adorable-gelato-921c2a.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd8cf640-7249-53c0-a56a-68f31ec9cf44","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-07T15:13:31Z","modified":"2026-04-07T15:13:31Z","name":"Phishing domain: adorable-notes-312832.framer.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating microsoft. Report & evidence: https://phishdestroy.io/domain/adorable-notes-312832.framer.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adorable-notes-312832.framer.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-07T15:13:31Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adorable-notes-312832.framer.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--caa1218f-ba48-536f-b71a-4c0df2e37dfe","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:25Z","modified":"2026-02-26T23:22:25Z","name":"Phishing domain: adpend.capital","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/adpend.capital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adpend.capital']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:25Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adpend.capital"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6238d816-2ab7-5a1c-8f56-9534c5c1d4c5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-04T14:21:42Z","modified":"2026-07-04T14:21:42Z","name":"Phishing domain: adpflikbl.nfy.fyi","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/adpflikbl.nfy.fyi","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adpflikbl.nfy.fyi']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-04T14:21:42Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adpflikbl.nfy.fyi"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6db151b-c31d-58d2-914a-cdea3692cb8a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-07T17:33:03Z","modified":"2025-08-07T17:33:03Z","name":"Phishing domain: adpurenestbk.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating [\"across\"]. Report & evidence: https://phishdestroy.io/domain/adpurenestbk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adpurenestbk.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-07T17:33:03Z","labels":["malicious-activity","phishing","brand:[\"across\"]"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adpurenestbk.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a157fc6b-42f5-5942-8bab-1041dccc617c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:49Z","modified":"2026-02-26T23:21:49Z","name":"Phishing domain: adrasteafi.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adrasteafi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adrasteafi.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:49Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adrasteafi.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--79289e00-6bb1-597e-b9d3-baf6a3fa2852","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T11:15:31Z","modified":"2026-02-13T11:15:31Z","name":"Phishing domain: adrasteafinance.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/adrasteafinance.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adrasteafinance.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T11:15:31Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adrasteafinance.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6800515-3321-5fb3-b3ed-f403c2bc1adb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-13T17:36:53Z","modified":"2025-11-13T17:36:53Z","name":"Phishing domain: adrcas.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/adrcas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adrcas.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-13T17:36:53Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adrcas.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d04ead5e-2ec2-5353-97c2-e22a6225409f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-14T15:38:49Z","modified":"2026-03-14T15:38:49Z","name":"Phishing domain: adrenalin.win","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adrenalin.win","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adrenalin.win']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-14T15:38:49Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adrenalin.win"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ffe3d8f-aa29-5a5f-869a-14266779eb1e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T06:41:08Z","modified":"2026-06-15T06:41:08Z","name":"Phishing domain: adresler-2026.icu","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adresler-2026.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adresler-2026.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T06:41:08Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adresler-2026.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0014d26-577f-5707-847b-74391dd23854","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T10:17:52Z","modified":"2026-02-13T10:17:52Z","name":"Phishing domain: adreslerri-casibom.vip","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adreslerri-casibom.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adreslerri-casibom.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T10:17:52Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adreslerri-casibom.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fabbeee-3f14-59dc-994b-956126a5c95e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T10:20:24Z","modified":"2026-02-13T10:20:24Z","name":"Phishing domain: adreslerrr-casibom.vip","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adreslerrr-casibom.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adreslerrr-casibom.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T10:20:24Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adreslerrr-casibom.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--970582ef-c422-5763-84f8-8ffd59efa575","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T06:41:08Z","modified":"2026-06-15T06:41:08Z","name":"Phishing domain: adress.icu","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adress.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adress.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T06:41:08Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adress.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--05aaa19e-c851-54b9-abb2-78c667ca38e5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-28T15:57:21Z","modified":"2025-12-28T15:57:21Z","name":"Phishing domain: adrianairbnb.netlify.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/adrianairbnb.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adrianairbnb.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-28T15:57:21Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adrianairbnb.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--86ffdc9a-e016-54d3-bb8c-138451a8f8fa","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-19T02:58:30Z","modified":"2026-06-19T02:58:30Z","name":"Phishing domain: adrianstore.com.co","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating sbbch. Report & evidence: https://phishdestroy.io/domain/adrianstore.com.co","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adrianstore.com.co']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-19T02:58:30Z","labels":["malicious-activity","phishing","brand:sbbch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adrianstore.com.co"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7968aebe-9fe5-52c2-8cb5-6f3c1bba4346","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-25T03:09:44Z","modified":"2026-04-25T03:09:44Z","name":"Phishing domain: adrishikharchowdhury.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating amazon. Report & evidence: https://phishdestroy.io/domain/adrishikharchowdhury.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adrishikharchowdhury.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-25T03:09:44Z","labels":["malicious-activity","phishing","brand:amazon"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adrishikharchowdhury.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c857a8e7-458e-5679-8e00-5329dfae7a70","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-02T14:16:03Z","modified":"2026-06-02T14:16:03Z","name":"Phishing domain: ads-okx.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating OKX. Report & evidence: https://phishdestroy.io/domain/ads-okx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ads-okx.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-02T14:16:03Z","labels":["malicious-activity","phishing","brand:okx"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ads-okx.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--853a8be5-76f6-5ee0-b722-3cd1adc0770a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T06:44:33Z","modified":"2026-06-15T06:44:33Z","name":"Phishing domain: ads-phantom.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Phantom. Report & evidence: https://phishdestroy.io/domain/ads-phantom.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ads-phantom.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T06:44:33Z","labels":["malicious-activity","phishing","brand:phantom"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ads-phantom.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--87f863e8-0904-5c5a-b834-d61fa8cd8034","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:19Z","modified":"2026-02-26T23:21:19Z","name":"Phishing domain: ads-pooli-righ2x.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/ads-pooli-righ2x.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ads-pooli-righ2x.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:19Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ads-pooli-righ2x.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d2d5c22-1960-5982-843e-32e181d6e69a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-25T07:40:32Z","modified":"2026-07-25T07:40:32Z","name":"Phishing domain: ads-support-verification.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ads-support-verification.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ads-support-verification.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-25T07:40:32Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ads-support-verification.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--911920da-20c8-5605-bb4c-b8235342b45a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:14Z","modified":"2026-02-26T23:20:14Z","name":"Phishing domain: ads-supports-5m72.vercel.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ads-supports-5m72.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ads-supports-5m72.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:14Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ads-supports-5m72.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5d8539a-c8b5-5a7b-b309-03e221b77afa","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-01T23:39:30Z","modified":"2026-08-01T23:39:30Z","name":"Phishing domain: ads-tron-click.vercel.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ads-tron-click.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ads-tron-click.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-01T23:39:30Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ads-tron-click.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9936243-5895-5120-b34f-06e212e61522","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-03T13:39:35Z","modified":"2026-06-03T13:39:35Z","name":"Phishing domain: ads-trust.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericscam. Report & evidence: https://phishdestroy.io/domain/ads-trust.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ads-trust.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-03T13:39:35Z","labels":["malicious-activity","phishing","brand:genericscam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ads-trust.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--573fed32-9c6f-5672-bf46-bf2eaecc68e2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T12:02:03Z","modified":"2026-07-27T12:02:03Z","name":"Phishing domain: ads.mhictgroup.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ads.mhictgroup.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ads.mhictgroup.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T12:02:03Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ads.mhictgroup.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3080bbd4-1c64-5f71-9eaa-6efd6a18417f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:42Z","modified":"2026-02-26T23:19:42Z","name":"Phishing domain: ads.nvs-bankrot-netdolgov.ru","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ads.nvs-bankrot-netdolgov.ru","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ads.nvs-bankrot-netdolgov.ru']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:42Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ads.nvs-bankrot-netdolgov.ru"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3be69013-8a08-5864-8b68-ca0753e3f364","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-12T00:17:11Z","modified":"2025-08-12T00:17:11Z","name":"Phishing domain: ads.quantumtraders.ai","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ads.quantumtraders.ai","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ads.quantumtraders.ai']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-12T00:17:11Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ads.quantumtraders.ai"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4edf3064-c62c-572b-9bf0-bc03beb24c14","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-12T16:30:03Z","modified":"2026-03-12T16:30:03Z","name":"Phishing domain: adsaddada.top","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adsaddada.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adsaddada.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-12T16:30:03Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adsaddada.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d928b3cc-e4a5-5900-b072-6d3d1faa597f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-26T09:02:11Z","modified":"2026-03-26T09:02:11Z","name":"Phishing domain: adsdaddaasdasd.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adsdaddaasdasd.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adsdaddaasdasd.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-26T09:02:11Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adsdaddaasdasd.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9acd617-535a-5465-8fbe-c92ed427a8ce","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-07T16:49:34Z","modified":"2025-08-07T16:49:34Z","name":"Phishing domain: adsg-gov.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/adsg-gov.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adsg-gov.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-07T16:49:34Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adsg-gov.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--592d0481-c149-5a76-b758-3f9c23b7aa01","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-20T16:00:42Z","modified":"2025-11-20T16:00:42Z","name":"Phishing domain: adsplatform.us","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ethereum. Report & evidence: https://phishdestroy.io/domain/adsplatform.us","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adsplatform.us']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-20T16:00:42Z","labels":["malicious-activity","phishing","brand:ethereum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adsplatform.us"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--44826531-e25a-5e92-8d82-2ff6f07f2edf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-18T16:52:00Z","modified":"2025-09-18T16:52:00Z","name":"Phishing domain: adspower-ru.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating amazon. Report & evidence: https://phishdestroy.io/domain/adspower-ru.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adspower-ru.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-18T16:52:00Z","labels":["malicious-activity","phishing","brand:amazon"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adspower-ru.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb1977b1-9002-539e-86e5-31cae849ef04","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-04T11:57:41Z","modified":"2026-05-04T11:57:41Z","name":"Phishing domain: adssssss.invoice-ads-process.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating facebook. Report & evidence: https://phishdestroy.io/domain/adssssss.invoice-ads-process.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adssssss.invoice-ads-process.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-04T11:57:41Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adssssss.invoice-ads-process.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d66eeaf7-3b07-55af-a645-4eb708b46fa8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-03T13:59:24Z","modified":"2025-11-03T13:59:24Z","name":"Phishing domain: adsxwa.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating argent. Report & evidence: https://phishdestroy.io/domain/adsxwa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adsxwa.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-03T13:59:24Z","labels":["malicious-activity","phishing","brand:argent"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adsxwa.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--73edac10-91b7-573b-86f3-c59ebe36a65d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-14T21:45:41Z","modified":"2026-05-14T21:45:41Z","name":"Phishing domain: adteam.am.in","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adteam.am.in","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adteam.am.in']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-14T21:45:41Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adteam.am.in"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a873c13d-c0a7-5f2f-9c90-c5dbcc41443a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-01T03:18:40Z","modified":"2026-04-01T03:18:40Z","name":"Phishing domain: adtracking06.agency-partner-platform.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating [\"google\"]. Report & evidence: https://phishdestroy.io/domain/adtracking06.agency-partner-platform.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adtracking06.agency-partner-platform.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-01T03:18:40Z","labels":["malicious-activity","phishing","brand:[\"google\"]"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adtracking06.agency-partner-platform.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac7015be-7179-557a-a963-bd1c12f576b4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: adtradehub.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/adtradehub.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adtradehub.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adtradehub.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e57d6c4c-dc5d-54d0-97ca-51e565c4bd9f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:05Z","modified":"2026-02-26T23:21:05Z","name":"Phishing domain: aduiywbd.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating telstra. Report & evidence: https://phishdestroy.io/domain/aduiywbd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aduiywbd.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:05Z","labels":["malicious-activity","phishing","brand:telstra"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aduiywbd.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0becc50-c9d8-5206-a3f2-37e742407b0f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-05T15:59:47Z","modified":"2026-03-05T15:59:47Z","name":"Phishing domain: adult-pump.fun","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Pump.fun. Report & evidence: https://phishdestroy.io/domain/adult-pump.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adult-pump.fun']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-05T15:59:47Z","labels":["malicious-activity","phishing","brand:pump.fun"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adult-pump.fun"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--613cd2b9-909e-5b8a-a62e-dc92aad33c2b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-05T13:46:02Z","modified":"2026-01-05T13:46:02Z","name":"Phishing domain: adultcas.top","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adultcas.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adultcas.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-05T13:46:02Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adultcas.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b2811e5-7fad-5118-aa9c-77f8f7a6e41d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-28T17:32:48Z","modified":"2026-04-28T17:32:48Z","name":"Phishing domain: adultnest.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adultnest.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adultnest.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-28T17:32:48Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adultnest.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--668cabac-a9ef-55a3-8a9f-fb3168bc1088","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-08T13:51:47Z","modified":"2026-07-08T13:51:47Z","name":"Phishing domain: adurite-205.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adurite-205.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adurite-205.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-08T13:51:47Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adurite-205.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b371f7b4-447b-5fa9-ac2a-18f4d7f11b2f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:57Z","modified":"2026-02-26T23:19:57Z","name":"Phishing domain: aduvix.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bitcoin. Report & evidence: https://phishdestroy.io/domain/aduvix.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aduvix.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:57Z","labels":["malicious-activity","phishing","brand:bitcoin"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aduvix.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--754686f9-a222-51cc-a44b-6a38f0870073","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T13:09:40Z","modified":"2026-06-15T13:09:40Z","name":"Phishing domain: adux03a.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating MetaMask. Report & evidence: https://phishdestroy.io/domain/adux03a.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adux03a.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T13:09:40Z","labels":["malicious-activity","phishing","brand:metamask"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adux03a.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bca2002b-294b-5d8f-a274-9df7435f3adf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-24T16:06:37Z","modified":"2026-03-24T16:06:37Z","name":"Phishing domain: adv-ledgr-wllt-live.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/adv-ledgr-wllt-live.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adv-ledgr-wllt-live.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-24T16:06:37Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adv-ledgr-wllt-live.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3b67b45-58b8-5b7d-8333-d6a1e14d5d06","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T19:38:32Z","modified":"2026-06-15T19:38:32Z","name":"Phishing domain: adv-trzrbridge-en.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Trezor. Report & evidence: https://phishdestroy.io/domain/adv-trzrbridge-en.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adv-trzrbridge-en.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T19:38:32Z","labels":["malicious-activity","phishing","brand:trezor"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adv-trzrbridge-en.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c1ee9c6-8216-54a0-b097-3360cfe66bc3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-23T12:32:50Z","modified":"2026-07-23T12:32:50Z","name":"Phishing domain: adv.alanyadentalplace.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adv.alanyadentalplace.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adv.alanyadentalplace.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-23T12:32:50Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adv.alanyadentalplace.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d820f841-dcbd-5599-b978-3e19bb86b196","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:15Z","modified":"2026-02-26T23:20:15Z","name":"Phishing domain: advance-extensn-coinbe.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/advance-extensn-coinbe.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advance-extensn-coinbe.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:15Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advance-extensn-coinbe.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--710dc550-6285-5b0d-b688-c74f9c0f0e47","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-28T18:17:46Z","modified":"2026-04-28T18:17:46Z","name":"Phishing domain: advance-hardware.wixstudio.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating trezor. Report & evidence: https://phishdestroy.io/domain/advance-hardware.wixstudio.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advance-hardware.wixstudio.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-28T18:17:46Z","labels":["malicious-activity","phishing","brand:trezor"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advance-hardware.wixstudio.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--75482ef7-e964-561b-a790-4d3fbe75e941","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-09T19:16:12Z","modified":"2025-12-09T19:16:12Z","name":"Phishing domain: advance-io-prologin.created.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/advance-io-prologin.created.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advance-io-prologin.created.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-09T19:16:12Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advance-io-prologin.created.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dc2843b-38e7-5525-8b25-18b4b8de79db","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T19:59:14Z","modified":"2026-08-10T19:59:14Z","name":"Phishing domain: advance-ledgr-live.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/advance-ledgr-live.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advance-ledgr-live.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T19:59:14Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advance-ledgr-live.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6738ac2b-72f1-5cfc-87d0-9f6686d7b910","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T19:59:12Z","modified":"2026-08-10T19:59:12Z","name":"Phishing domain: advance-li-ledgrr.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/advance-li-ledgrr.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advance-li-ledgrr.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T19:59:12Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advance-li-ledgrr.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0737a40-dd3f-510e-b3b9-640b9d9f8a37","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-27T19:20:51Z","modified":"2026-04-27T19:20:51Z","name":"Phishing domain: advance-liveapp.wixstudio.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating ledger. Report & evidence: https://phishdestroy.io/domain/advance-liveapp.wixstudio.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advance-liveapp.wixstudio.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-27T19:20:51Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advance-liveapp.wixstudio.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3062eb3-c40f-50af-828c-d2cef6663c82","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-05T20:21:45Z","modified":"2026-08-05T20:21:45Z","name":"Phishing domain: advance-suiteapp.wixstudio.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating trezor. Report & evidence: https://phishdestroy.io/domain/advance-suiteapp.wixstudio.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advance-suiteapp.wixstudio.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-05T20:21:45Z","labels":["malicious-activity","phishing","brand:trezor"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advance-suiteapp.wixstudio.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--916d0de1-9e9f-5807-9819-b66e4fa01837","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-13T00:28:27Z","modified":"2026-04-13T00:28:27Z","name":"Phishing domain: advance-treser-wallet.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Trezor. Report & evidence: https://phishdestroy.io/domain/advance-treser-wallet.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advance-treser-wallet.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-13T00:28:27Z","labels":["malicious-activity","phishing","brand:trezor"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advance-treser-wallet.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c65dc60c-9f79-5977-8db8-de255ce6b26c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-04T19:51:14Z","modified":"2026-04-04T19:51:14Z","name":"Phishing domain: advance-v-bridge-trazre.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Trezor. Report & evidence: https://phishdestroy.io/domain/advance-v-bridge-trazre.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advance-v-bridge-trazre.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-04T19:51:14Z","labels":["malicious-activity","phishing","brand:trezor"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advance-v-bridge-trazre.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--69649227-523c-5c10-b576-1fe2a7a93cc2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-04T15:38:24Z","modified":"2026-04-04T15:38:24Z","name":"Phishing domain: advance-v-view-start-trezr-io--x.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/advance-v-view-start-trezr-io--x.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advance-v-view-start-trezr-io--x.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-04T15:38:24Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advance-v-view-start-trezr-io--x.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3c71bc8-95ad-53f2-9bf7-7cdbe8067036","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-09T15:30:34Z","modified":"2026-05-09T15:30:34Z","name":"Phishing domain: advance24horas.com.br","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating facebook. Report & evidence: https://phishdestroy.io/domain/advance24horas.com.br","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advance24horas.com.br']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-09T15:30:34Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advance24horas.com.br"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce554c5d-c146-5e19-9551-ba9306a196de","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-21T04:42:22Z","modified":"2026-04-21T04:42:22Z","name":"Phishing domain: advanceamerica.sbs","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/advanceamerica.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advanceamerica.sbs']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-21T04:42:22Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advanceamerica.sbs"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--482f8bfb-eb57-5a0b-b5dc-ed9e7736d539","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-23T21:23:59Z","modified":"2026-03-23T21:23:59Z","name":"Phishing domain: advancecompfile.live","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/advancecompfile.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advancecompfile.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-23T21:23:59Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advancecompfile.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cea3dfea-79b2-50ff-af8b-5f8a0c2e34cf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-25T12:32:34Z","modified":"2025-11-25T12:32:34Z","name":"Phishing domain: advanced-documents.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating microsoft. Report & evidence: https://phishdestroy.io/domain/advanced-documents.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advanced-documents.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-25T12:32:34Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advanced-documents.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4ed4039-f0e6-50d3-a0ee-0c40e7ce8116","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-17T08:59:28Z","modified":"2025-09-17T08:59:28Z","name":"Phishing domain: advanced-evm-protocol.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/advanced-evm-protocol.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advanced-evm-protocol.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-17T08:59:28Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advanced-evm-protocol.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a1b6730-2ff0-5e77-a922-206d5699a989","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-12T14:01:14Z","modified":"2025-09-12T14:01:14Z","name":"Phishing domain: advanced-evm-protocolclaim.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ethereum. Report & evidence: https://phishdestroy.io/domain/advanced-evm-protocolclaim.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advanced-evm-protocolclaim.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-12T14:01:14Z","labels":["malicious-activity","phishing","brand:ethereum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advanced-evm-protocolclaim.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8d26fb2-1922-5a14-906d-cd6d39e2ecf7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-19T04:03:17Z","modified":"2026-04-19T04:03:17Z","name":"Phishing domain: advanced-ledgr-start-eng.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/advanced-ledgr-start-eng.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advanced-ledgr-start-eng.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-19T04:03:17Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advanced-ledgr-start-eng.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--19cd513f-2213-5a11-904d-1be821dffda2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-23T13:03:12Z","modified":"2025-09-23T13:03:12Z","name":"Phishing domain: advanced212pro.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/advanced212pro.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advanced212pro.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-23T13:03:12Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advanced212pro.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--349eeff9-a5d6-5109-9b49-9cf0efbd81ae","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-09T10:35:47Z","modified":"2025-08-09T10:35:47Z","name":"Phishing domain: advancedandersenlab-online.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/advancedandersenlab-online.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advancedandersenlab-online.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-09T10:35:47Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advancedandersenlab-online.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d2ea8ad-e45d-51e2-b174-b9e25f63832f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-01T03:56:44Z","modified":"2026-07-01T03:56:44Z","name":"Phishing domain: advanceddatasrecovery.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/advanceddatasrecovery.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advanceddatasrecovery.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-01T03:56:44Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advanceddatasrecovery.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f662344-579a-58c0-98ed-53a3a597362a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-26T15:53:16Z","modified":"2026-03-26T15:53:16Z","name":"Phishing domain: advancedideas.world","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/advancedideas.world","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advancedideas.world']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-26T15:53:16Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advancedideas.world"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5051e815-4cda-5ee4-8870-49995047d555","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-01T03:56:52Z","modified":"2026-07-01T03:56:52Z","name":"Phishing domain: advancedpcedutt-edu.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/advancedpcedutt-edu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advancedpcedutt-edu.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-01T03:56:52Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advancedpcedutt-edu.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a68b6c7b-d3c2-580b-958b-8595b67943df","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-01T04:02:31Z","modified":"2026-07-01T04:02:31Z","name":"Phishing domain: advancedpclhms-edu.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/advancedpclhms-edu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advancedpclhms-edu.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-01T04:02:31Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advancedpclhms-edu.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--29fb187a-16d2-5877-a404-9740ce2e1b6b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-02T14:20:51Z","modified":"2026-02-02T14:20:51Z","name":"Phishing domain: advancedsafesolutions.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating csgo. Report & evidence: https://phishdestroy.io/domain/advancedsafesolutions.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advancedsafesolutions.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-02T14:20:51Z","labels":["malicious-activity","phishing","brand:csgo"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advancedsafesolutions.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cfbb289-a78d-55c6-b86a-d087f6964077","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-11T04:47:51Z","modified":"2026-03-11T04:47:51Z","name":"Phishing domain: advanceonlineportal.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericbanking. Report & evidence: https://phishdestroy.io/domain/advanceonlineportal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advanceonlineportal.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-11T04:47:51Z","labels":["malicious-activity","phishing","brand:genericbanking"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advanceonlineportal.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6781dd3-55b7-5009-b0d7-393aa4aa8355","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T07:02:12Z","modified":"2026-07-27T07:02:12Z","name":"Phishing domain: advancetradingltd.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/advancetradingltd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advancetradingltd.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T07:02:12Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advancetradingltd.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--95c29832-8b58-540a-aea7-69c1706abaf6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-23T12:15:45Z","modified":"2025-10-23T12:15:45Z","name":"Phishing domain: advantagefinance.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Polygon. Report & evidence: https://phishdestroy.io/domain/advantagefinance.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advantagefinance.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-23T12:15:45Z","labels":["malicious-activity","phishing","brand:polygon"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advantagefinance.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a724979d-affe-5dca-96db-f960ac00d8b5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-08T04:06:34Z","modified":"2025-08-08T04:06:34Z","name":"Phishing domain: advantisbank.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/advantisbank.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advantisbank.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-08T04:06:34Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advantisbank.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b50f3eb0-11ed-5f5f-b3ee-688c2534be9f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-08T00:31:18Z","modified":"2025-12-08T00:31:18Z","name":"Phishing domain: advbandeira.com.br","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating argent. Report & evidence: https://phishdestroy.io/domain/advbandeira.com.br","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advbandeira.com.br']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-08T00:31:18Z","labels":["malicious-activity","phishing","brand:argent"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advbandeira.com.br"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--69362992-64b8-54f1-9874-5bf92218f5ad","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-21T10:48:55Z","modified":"2026-06-21T10:48:55Z","name":"Phishing domain: advc-sutes-trazr.framer.ai","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Trezor. Report & evidence: https://phishdestroy.io/domain/advc-sutes-trazr.framer.ai","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advc-sutes-trazr.framer.ai']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-21T10:48:55Z","labels":["malicious-activity","phishing","brand:trezor"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advc-sutes-trazr.framer.ai"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b5b9735-f6bc-5de0-b3d3-4514bbd7c922","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-30T16:29:42Z","modified":"2025-12-30T16:29:42Z","name":"Phishing domain: adventure-phone.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating WalletConnect. Report & evidence: https://phishdestroy.io/domain/adventure-phone.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adventure-phone.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-30T16:29:42Z","labels":["malicious-activity","phishing","brand:walletconnect"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adventure-phone.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b84cbd8a-f556-5958-b8c1-26cfad5962ca","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-13T20:12:13Z","modified":"2026-08-13T20:12:13Z","name":"Phishing domain: adventure-workscycles.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating microsoft. Report & evidence: https://phishdestroy.io/domain/adventure-workscycles.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adventure-workscycles.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-13T20:12:13Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adventure-workscycles.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--37bd534f-738e-5443-afe2-b4f4a3ef295c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-12T21:53:21Z","modified":"2026-06-12T21:53:21Z","name":"Phishing domain: adventureaether.shop","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adventureaether.shop","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adventureaether.shop']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-12T21:53:21Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adventureaether.shop"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--096fe539-5a12-5d98-9d22-b3ae8618c520","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-09T11:02:10Z","modified":"2025-08-09T11:02:10Z","name":"Phishing domain: adventuresinscamming.site","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Facebook. Report & evidence: https://phishdestroy.io/domain/adventuresinscamming.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adventuresinscamming.site']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-09T11:02:10Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adventuresinscamming.site"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a88134c9-f289-5d0d-8fdd-64c5b09555e5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T13:06:22Z","modified":"2026-06-15T13:06:22Z","name":"Phishing domain: adventurevale.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adventurevale.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adventurevale.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T13:06:22Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adventurevale.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d2247bb-a6fd-5717-9f2e-ba4d6d80da5e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T06:33:24Z","modified":"2026-06-15T06:33:24Z","name":"Phishing domain: adventurevale.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adventurevale.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adventurevale.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T06:33:24Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adventurevale.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--23459b18-dacc-5b28-880b-2d75adaef4d4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-09T15:17:44Z","modified":"2026-04-09T15:17:44Z","name":"Phishing domain: adventurous-context-656368.framer.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adventurous-context-656368.framer.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adventurous-context-656368.framer.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-09T15:17:44Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adventurous-context-656368.framer.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ddfb098-6d04-5996-965c-332767968c6a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-30T14:17:16Z","modified":"2026-07-30T14:17:16Z","name":"Phishing domain: adventurous-phone-453873.framer.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating xfinity. Report & evidence: https://phishdestroy.io/domain/adventurous-phone-453873.framer.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adventurous-phone-453873.framer.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-30T14:17:16Z","labels":["malicious-activity","phishing","brand:xfinity"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adventurous-phone-453873.framer.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--efee1ff1-da6a-50e7-a4a3-b532a6fb5c8a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-09T15:32:42Z","modified":"2025-10-09T15:32:42Z","name":"Phishing domain: adverinivasion.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adverinivasion.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adverinivasion.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-09T15:32:42Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adverinivasion.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--edf45ae2-12e2-5696-b231-34789ea88476","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-09T03:24:18Z","modified":"2026-03-09T03:24:18Z","name":"Phishing domain: adverse.trade","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adverse.trade","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adverse.trade']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-09T03:24:18Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adverse.trade"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--441cad48-ffd8-5c3a-bb0b-562dc0359cb4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-03T13:07:19Z","modified":"2026-06-03T13:07:19Z","name":"Phishing domain: advertenciaycancelacion.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating microsoft. Report & evidence: https://phishdestroy.io/domain/advertenciaycancelacion.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advertenciaycancelacion.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-03T13:07:19Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advertenciaycancelacion.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4bba4cb-53d7-501f-9e64-02c30e678839","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-22T16:56:26Z","modified":"2026-02-22T16:56:26Z","name":"Phishing domain: advertise-003.top","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/advertise-003.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advertise-003.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-22T16:56:26Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advertise-003.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--470ecc9d-3346-52aa-8e78-084dea399df2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:48Z","modified":"2026-02-26T23:20:48Z","name":"Phishing domain: advertiser-business-network-customer-counterfeit.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/advertiser-business-network-customer-counterfeit.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advertiser-business-network-customer-counterfeit.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:48Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advertiser-business-network-customer-counterfeit.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--22f3f0cf-d746-5e22-b520-f752c73731f9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:11Z","modified":"2026-02-26T23:23:11Z","name":"Phishing domain: advertiser-business-network-policy-support.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/advertiser-business-network-policy-support.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advertiser-business-network-policy-support.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:11Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advertiser-business-network-policy-support.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b00d1ade-ceed-59b5-94cd-78ddcdd904e8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:38Z","modified":"2026-02-26T23:24:38Z","name":"Phishing domain: advertisers-client-support-appeal-assessment.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/advertisers-client-support-appeal-assessment.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advertisers-client-support-appeal-assessment.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:38Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advertisers-client-support-appeal-assessment.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--791ca87e-56c5-54a9-868f-100b2276e3c8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:09Z","modified":"2026-02-26T23:22:09Z","name":"Phishing domain: advertisers-client-support-assessment-bullying.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/advertisers-client-support-assessment-bullying.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advertisers-client-support-assessment-bullying.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:09Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advertisers-client-support-assessment-bullying.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d8535c0-d9fe-5660-8374-d87ec5b90e8c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:29Z","modified":"2026-02-26T23:23:29Z","name":"Phishing domain: advertisers-client-support-assessment-security.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/advertisers-client-support-assessment-security.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advertisers-client-support-assessment-security.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:29Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advertisers-client-support-assessment-security.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba3438fb-a49e-5772-bada-300148eaab24","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:01Z","modified":"2026-02-26T23:21:01Z","name":"Phishing domain: advertisers-client-support-claim-violation.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/advertisers-client-support-claim-violation.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advertisers-client-support-claim-violation.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:01Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advertisers-client-support-claim-violation.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5eea1e4-0418-5feb-9cba-a76f727ae6c6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:58Z","modified":"2026-02-26T23:19:58Z","name":"Phishing domain: advertisers-client-support-guideline-messenger.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/advertisers-client-support-guideline-messenger.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advertisers-client-support-guideline-messenger.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:58Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advertisers-client-support-guideline-messenger.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--43a57470-7086-5727-ba23-fdf8fe577fa2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:27Z","modified":"2026-02-26T23:24:27Z","name":"Phishing domain: advertisers-client-support-impersonation-dispute.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/advertisers-client-support-impersonation-dispute.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advertisers-client-support-impersonation-dispute.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:27Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advertisers-client-support-impersonation-dispute.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd98793e-96cc-5ac1-b07b-c1943cbbdbe5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:08Z","modified":"2026-02-26T23:21:08Z","name":"Phishing domain: advertisers-client-support-messaging-service.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/advertisers-client-support-messaging-service.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advertisers-client-support-messaging-service.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:08Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advertisers-client-support-messaging-service.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1eb19e6-5465-5405-b381-7998be710840","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:02Z","modified":"2026-02-26T23:24:02Z","name":"Phishing domain: advertisers-client-support-quality-bullying.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/advertisers-client-support-quality-bullying.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advertisers-client-support-quality-bullying.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:02Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advertisers-client-support-quality-bullying.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d683ee4-3df1-58c0-be55-251f8cecbea2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:05Z","modified":"2026-02-26T23:23:05Z","name":"Phishing domain: advertisers-client-support-restriction-guideline.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/advertisers-client-support-restriction-guideline.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advertisers-client-support-restriction-guideline.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:05Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advertisers-client-support-restriction-guideline.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccac23cd-a622-5ee4-9ed9-630142ef2b1d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:18Z","modified":"2026-02-26T23:21:18Z","name":"Phishing domain: advertisers-client-support-strike-guideline.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/advertisers-client-support-strike-guideline.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advertisers-client-support-strike-guideline.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:18Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advertisers-client-support-strike-guideline.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3118b68b-6783-5dd7-9ee5-82f49ccf67a4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:45Z","modified":"2026-02-26T23:19:45Z","name":"Phishing domain: advertisers-client-support-trademark-dispute.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/advertisers-client-support-trademark-dispute.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advertisers-client-support-trademark-dispute.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:45Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advertisers-client-support-trademark-dispute.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b1583bb-8fbd-5900-8d82-e31cc1570ee9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:21Z","modified":"2026-02-26T23:24:21Z","name":"Phishing domain: advertisers-client-support-violation-transparency.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/advertisers-client-support-violation-transparency.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advertisers-client-support-violation-transparency.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:21Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advertisers-client-support-violation-transparency.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2aa43c4-e712-5b55-88c3-472824448ce3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-12T15:23:00Z","modified":"2026-02-12T15:23:00Z","name":"Phishing domain: advertisers-help-center-restriction-data.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating facebook. Report & evidence: https://phishdestroy.io/domain/advertisers-help-center-restriction-data.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advertisers-help-center-restriction-data.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-12T15:23:00Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advertisers-help-center-restriction-data.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9da6aa65-a649-5921-9549-fe1a70d8994e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-31T16:48:15Z","modified":"2026-03-31T16:48:15Z","name":"Phishing domain: advertising-account-activity-center.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/advertising-account-activity-center.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advertising-account-activity-center.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-31T16:48:15Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advertising-account-activity-center.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--afe4745d-3ac8-5e30-a71e-0e8ea3e87793","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-03T03:20:13Z","modified":"2026-03-03T03:20:13Z","name":"Phishing domain: advertising-account-activity-dashboard-b1y.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating facebook. Report & evidence: https://phishdestroy.io/domain/advertising-account-activity-dashboard-b1y.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advertising-account-activity-dashboard-b1y.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-03T03:20:13Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advertising-account-activity-dashboard-b1y.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aff53657-05f3-5508-b2eb-543721fe8d83","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-03T03:26:17Z","modified":"2026-03-03T03:26:17Z","name":"Phishing domain: advertising-account-integrity-center.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating facebook. Report & evidence: https://phishdestroy.io/domain/advertising-account-integrity-center.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advertising-account-integrity-center.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-03T03:26:17Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advertising-account-integrity-center.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--81c87487-6ec8-5c0d-9165-008b8200e6d7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-03T03:24:04Z","modified":"2026-03-03T03:24:04Z","name":"Phishing domain: advertising-account-oversight-hub.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating facebook. Report & evidence: https://phishdestroy.io/domain/advertising-account-oversight-hub.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advertising-account-oversight-hub.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-03T03:24:04Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advertising-account-oversight-hub.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f8571fe-66cb-5067-9e19-bdc5523f397d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-03T03:28:59Z","modified":"2026-03-03T03:28:59Z","name":"Phishing domain: advertising-account-scan-control-hub.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating facebook. Report & evidence: https://phishdestroy.io/domain/advertising-account-scan-control-hub.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advertising-account-scan-control-hub.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-03T03:28:59Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advertising-account-scan-control-hub.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa388a76-1d49-5cd0-be2b-ebe5e56f9e1e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-20T13:22:46Z","modified":"2025-10-20T13:22:46Z","name":"Phishing domain: advertising-refund-center.surge.sh","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Facebook. Report & evidence: https://phishdestroy.io/domain/advertising-refund-center.surge.sh","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advertising-refund-center.surge.sh']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-20T13:22:46Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advertising-refund-center.surge.sh"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2363645-6a19-5b36-9809-f33682a1b8ea","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-20T03:41:42Z","modified":"2026-07-20T03:41:42Z","name":"Phishing domain: advertisingeffectively.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/advertisingeffectively.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advertisingeffectively.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-20T03:41:42Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advertisingeffectively.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f22f7a0b-cc38-58bf-8d25-2a444f44add2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-12T06:30:02Z","modified":"2026-03-12T06:30:02Z","name":"Phishing domain: advexlabs.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/advexlabs.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advexlabs.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-12T06:30:02Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advexlabs.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c049b88-1212-5dde-9369-aebefb62412a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-19T15:43:13Z","modified":"2026-05-19T15:43:13Z","name":"Phishing domain: advicconsultant.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating fedex. Report & evidence: https://phishdestroy.io/domain/advicconsultant.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advicconsultant.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-19T15:43:13Z","labels":["malicious-activity","phishing","brand:fedex"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advicconsultant.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--48823cb9-9bef-55a0-a6d3-27229e0a384c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-14T20:04:01Z","modified":"2026-04-14T20:04:01Z","name":"Phishing domain: advise-startladgger-com.framer.wiki","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/advise-startladgger-com.framer.wiki","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advise-startladgger-com.framer.wiki']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-14T20:04:01Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advise-startladgger-com.framer.wiki"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc9650b4-f6ca-5fa0-bf93-92e31de00477","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-26T16:39:42Z","modified":"2026-04-26T16:39:42Z","name":"Phishing domain: advise-trezoior-en.framer.media","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Trezor. Report & evidence: https://phishdestroy.io/domain/advise-trezoior-en.framer.media","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advise-trezoior-en.framer.media']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-26T16:39:42Z","labels":["malicious-activity","phishing","brand:trezor"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advise-trezoior-en.framer.media"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a6919b4-1ff6-568e-a233-2eb6f5f89712","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T07:02:12Z","modified":"2026-07-27T07:02:12Z","name":"Phishing domain: advise-trzrsuitees.wasmer.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/advise-trzrsuitees.wasmer.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advise-trzrsuitees.wasmer.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T07:02:12Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advise-trzrsuitees.wasmer.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd154b99-57f0-5146-b5a9-f16fb56fbce2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-01T14:28:41Z","modified":"2026-07-01T14:28:41Z","name":"Phishing domain: advisory-green-khxqmajx.edgeone.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericemail. Report & evidence: https://phishdestroy.io/domain/advisory-green-khxqmajx.edgeone.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advisory-green-khxqmajx.edgeone.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-01T14:28:41Z","labels":["malicious-activity","phishing","brand:genericemail"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advisory-green-khxqmajx.edgeone.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--acfe5484-26c6-5dd6-b2b4-f047e4b165ae","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-23T19:03:32Z","modified":"2026-06-23T19:03:32Z","name":"Phishing domain: advjx.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/advjx.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advjx.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-23T19:03:32Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advjx.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0108077-1d1d-567f-abad-0e179612efa2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-23T19:12:44Z","modified":"2026-06-23T19:12:44Z","name":"Phishing domain: advjx.vip","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/advjx.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advjx.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-23T19:12:44Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advjx.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c226deb-b8b5-5117-bb08-2e051ba0deb3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-06T07:42:26Z","modified":"2025-08-06T07:42:26Z","name":"Phishing domain: advocat-help-suport.boats","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/advocat-help-suport.boats","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advocat-help-suport.boats']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-06T07:42:26Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advocat-help-suport.boats"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--99a7e6d0-3d26-56fd-a100-64d881cc57f9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-26T15:37:17Z","modified":"2026-07-26T15:37:17Z","name":"Phishing domain: advocatesthemis.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/advocatesthemis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advocatesthemis.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-26T15:37:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advocatesthemis.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--264a3bec-c0d6-556f-a958-d1ec5b3df819","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-02T17:50:55Z","modified":"2026-04-02T17:50:55Z","name":"Phishing domain: advokatdonskoy.click","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating [\"telegram\"]. Report & evidence: https://phishdestroy.io/domain/advokatdonskoy.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advokatdonskoy.click']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-02T17:50:55Z","labels":["malicious-activity","phishing","brand:[\"telegram\"]"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advokatdonskoy.click"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b978c49-69d2-59bc-ae07-de99c4baae92","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-02T17:50:53Z","modified":"2026-04-02T17:50:53Z","name":"Phishing domain: advokatlevin.click","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating [\"telegram\"]. Report & evidence: https://phishdestroy.io/domain/advokatlevin.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advokatlevin.click']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-02T17:50:53Z","labels":["malicious-activity","phishing","brand:[\"telegram\"]"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advokatlevin.click"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aba06173-1026-5850-a406-fe63b656090d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-08T15:37:19Z","modified":"2026-04-08T15:37:19Z","name":"Phishing domain: advokattop.kz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/advokattop.kz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advokattop.kz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-08T15:37:19Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advokattop.kz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f7ee480-fddf-591d-8022-1899b5848a1a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-09T03:26:13Z","modified":"2026-03-09T03:26:13Z","name":"Phishing domain: advpedroza.lovable.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/advpedroza.lovable.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'advpedroza.lovable.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-09T03:26:13Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/advpedroza.lovable.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7992236a-f0c0-56b8-9b9c-5d8cdb4e67ca","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-26T02:55:49Z","modified":"2026-01-26T02:55:49Z","name":"Phishing domain: adwerd-polo.cfd","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adwerd-polo.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adwerd-polo.cfd']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-26T02:55:49Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adwerd-polo.cfd"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--88c2ecfb-1c19-5ebc-b48f-d970d5b53453","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-18T19:42:54Z","modified":"2026-03-18T19:42:54Z","name":"Phishing domain: adxentisbnk.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adxentisbnk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adxentisbnk.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-18T19:42:54Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adxentisbnk.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1ba59e9-c4e0-5b19-bdc7-59b490de92a0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-08T18:09:22Z","modified":"2026-04-08T18:09:22Z","name":"Phishing domain: adxhub.com.ng","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/adxhub.com.ng","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'adxhub.com.ng']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-08T18:09:22Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/adxhub.com.ng"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--78f2b96b-102b-5673-bc6d-4ec327d510ea","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-24T00:10:01Z","modified":"2026-03-24T00:10:01Z","name":"Phishing domain: ae.ae-tech365.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ae.ae-tech365.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ae.ae-tech365.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-24T00:10:01Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ae.ae-tech365.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f96cc7b-32b4-5632-b58a-7aae738238e2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-24T00:10:01Z","modified":"2026-03-24T00:10:01Z","name":"Phishing domain: ae.ae365123.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/ae.ae365123.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ae.ae365123.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-24T00:10:01Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ae.ae365123.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--86f65059-dd32-5db3-ab1b-ec6e9bdb7e09","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-11T18:22:57Z","modified":"2026-08-11T18:22:57Z","name":"Phishing domain: ae1d2c.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/ae1d2c.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ae1d2c.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-11T18:22:57Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ae1d2c.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--09048d24-1fea-524e-b41a-f6b66a4e4805","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-05T21:33:40Z","modified":"2026-04-05T21:33:40Z","name":"Phishing domain: ae668fae-e1d2-4d11-bd14-1f77ea1ef976-swap-report.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ae668fae-e1d2-4d11-bd14-1f77ea1ef976-swap-report.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ae668fae-e1d2-4d11-bd14-1f77ea1ef976-swap-report.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-05T21:33:40Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ae668fae-e1d2-4d11-bd14-1f77ea1ef976-swap-report.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b4da251-75e2-51e0-bed4-2a8627faa31d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:09Z","modified":"2026-02-26T23:20:09Z","name":"Phishing domain: aearodrorne.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aerodrome. Report & evidence: https://phishdestroy.io/domain/aearodrorne.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aearodrorne.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:09Z","labels":["malicious-activity","phishing","brand:aerodrome"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aearodrorne.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d25532e1-03e5-510e-a990-f948fd073d6d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-27T15:45:31Z","modified":"2026-03-27T15:45:31Z","name":"Phishing domain: aeave.trade","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aave. Report & evidence: https://phishdestroy.io/domain/aeave.trade","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aeave.trade']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-27T15:45:31Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aeave.trade"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cef5174-441b-5905-adf5-7e4caf489f7d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-12T21:24:06Z","modified":"2026-06-12T21:24:06Z","name":"Phishing domain: aebooking-com-dubai-desert-safari.webflow.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/aebooking-com-dubai-desert-safari.webflow.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aebooking-com-dubai-desert-safari.webflow.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-12T21:24:06Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aebooking-com-dubai-desert-safari.webflow.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--67cf418a-cee2-50f3-b5b4-b2fd20c27dde","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-12T21:24:16Z","modified":"2026-06-12T21:24:16Z","name":"Phishing domain: aebooking-com-dubai-hotels.webflow.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aebooking-com-dubai-hotels.webflow.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aebooking-com-dubai-hotels.webflow.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-12T21:24:16Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aebooking-com-dubai-hotels.webflow.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--85b378ce-baf5-5d4c-97fb-59abe0248390","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-12T21:23:52Z","modified":"2026-06-12T21:23:52Z","name":"Phishing domain: aebooking-com-dubai-things-to-do.webflow.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aebooking-com-dubai-things-to-do.webflow.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aebooking-com-dubai-things-to-do.webflow.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-12T21:23:52Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aebooking-com-dubai-things-to-do.webflow.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f5ea6fd-9c4a-5f6b-beb5-797de0d14e05","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-30T13:27:28Z","modified":"2026-04-30T13:27:28Z","name":"Phishing domain: aebtceth.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating [\"revolut\"]. Report & evidence: https://phishdestroy.io/domain/aebtceth.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aebtceth.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-30T13:27:28Z","labels":["malicious-activity","phishing","brand:[\"revolut\"]"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aebtceth.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa93d745-f4a2-55c1-bfcf-8b009def5d9e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-11T04:47:10Z","modified":"2026-03-11T04:47:10Z","name":"Phishing domain: aecoms.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/aecoms.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aecoms.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-11T04:47:10Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aecoms.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d3cbf1a-1ce9-57b2-b1d7-503219991946","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-01T05:41:58Z","modified":"2026-07-01T05:41:58Z","name":"Phishing domain: aecvs005.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aecvs005.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aecvs005.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-01T05:41:58Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aecvs005.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5db20cc9-27b3-5a1d-80a7-247111b4763d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-01T05:45:28Z","modified":"2026-07-01T05:45:28Z","name":"Phishing domain: aecvs006.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aecvs006.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aecvs006.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-01T05:45:28Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aecvs006.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b65b800-bd31-5321-b566-e5248f816ea0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-01T05:53:37Z","modified":"2026-07-01T05:53:37Z","name":"Phishing domain: aecvs010.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aecvs010.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aecvs010.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-01T05:53:37Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aecvs010.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--24a268f4-e4b4-551b-b67d-8146b1b6ba3a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-11T18:28:23Z","modified":"2026-08-11T18:28:23Z","name":"Phishing domain: aedaa5.icefactory.cl","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating adobe. Report & evidence: https://phishdestroy.io/domain/aedaa5.icefactory.cl","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aedaa5.icefactory.cl']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-11T18:28:23Z","labels":["malicious-activity","phishing","brand:adobe"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aedaa5.icefactory.cl"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4844d09e-1dc9-50ff-806f-04aacf2a501f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-14T16:44:29Z","modified":"2026-04-14T16:44:29Z","name":"Phishing domain: aedcofragrances.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aedcofragrances.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aedcofragrances.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-14T16:44:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aedcofragrances.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d14a7676-b1ff-5a22-af2f-d101f09c29e7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-22T20:16:37Z","modified":"2026-03-22T20:16:37Z","name":"Phishing domain: aedigitaltether.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/aedigitaltether.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aedigitaltether.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-22T20:16:37Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aedigitaltether.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a979ce74-c046-5684-ab14-e01c62060454","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-15T15:26:35Z","modified":"2025-10-15T15:26:35Z","name":"Phishing domain: aee98h2wh89uw29j9wjejwjisjusuisharedocument.control-insitu.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Microsoft. Report & evidence: https://phishdestroy.io/domain/aee98h2wh89uw29j9wjejwjisjusuisharedocument.control-insitu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aee98h2wh89uw29j9wjejwjisjusuisharedocument.control-insitu.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-15T15:26:35Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aee98h2wh89uw29j9wjejwjisjusuisharedocument.control-insitu.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d240ad19-b3d0-5251-b96e-7f5330fc48cf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-17T17:11:38Z","modified":"2026-06-17T17:11:38Z","name":"Phishing domain: aefory.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating cryptoscam. Report & evidence: https://phishdestroy.io/domain/aefory.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aefory.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-17T17:11:38Z","labels":["malicious-activity","phishing","brand:cryptoscam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aefory.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eaf63d9c-2309-5b1a-8a30-457da016887a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T04:10:07Z","modified":"2026-02-13T04:10:07Z","name":"Phishing domain: aegi.ltd","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aegi.ltd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aegi.ltd']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T04:10:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aegi.ltd"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--57807821-be7f-5a4f-a4e2-eb5bc1e08216","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-19T08:07:02Z","modified":"2025-10-19T08:07:02Z","name":"Phishing domain: aegisdirect.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericbanking. Report & evidence: https://phishdestroy.io/domain/aegisdirect.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aegisdirect.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-19T08:07:02Z","labels":["malicious-activity","phishing","brand:genericbanking"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aegisdirect.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8060419e-3246-504f-8925-70258ef48372","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-18T13:57:20Z","modified":"2026-03-18T13:57:20Z","name":"Phishing domain: aegisglobecapital.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/aegisglobecapital.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aegisglobecapital.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-18T13:57:20Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aegisglobecapital.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--73ec8622-d9c1-50f4-bd93-6f1ae6517750","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-05T14:58:55Z","modified":"2025-12-05T14:58:55Z","name":"Phishing domain: aegisopenai.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aegisopenai.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aegisopenai.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-05T14:58:55Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aegisopenai.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee77246f-cf10-585a-852b-afc9894a88f7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T11:45:42Z","modified":"2026-02-13T11:45:42Z","name":"Phishing domain: aegisweb3protect.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aegisweb3protect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aegisweb3protect.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T11:45:42Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aegisweb3protect.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cee4ae4-22e4-5739-bd42-6154cac86383","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-05T13:15:10Z","modified":"2026-08-05T13:15:10Z","name":"Phishing domain: aegisxrp.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coingecko. Report & evidence: https://phishdestroy.io/domain/aegisxrp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aegisxrp.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-05T13:15:10Z","labels":["malicious-activity","phishing","brand:coingecko"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aegisxrp.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d58da08-7d20-515d-8f36-479a27a92574","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:06Z","modified":"2026-02-26T23:24:06Z","name":"Phishing domain: aeglsweb3.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aeglsweb3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aeglsweb3.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:06Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aeglsweb3.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cae9659-d15e-58ca-ab6e-19625ac048bb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-23T18:17:47Z","modified":"2026-02-23T18:17:47Z","name":"Phishing domain: aegonasset.co.uk","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aegonasset.co.uk","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aegonasset.co.uk']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-23T18:17:47Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aegonasset.co.uk"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fd52eec-5a90-5cb7-8b85-1eabaf1c0812","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:35Z","modified":"2026-02-26T23:21:35Z","name":"Phishing domain: aegoz-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/aegoz-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aegoz-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:35Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aegoz-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b3b4711-edf6-5e56-abec-23dade9bbe1e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-07T03:12:18Z","modified":"2026-03-07T03:12:18Z","name":"Phishing domain: aeitomicwallettt.webflow.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/aeitomicwallettt.webflow.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aeitomicwallettt.webflow.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-07T03:12:18Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aeitomicwallettt.webflow.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--78a71d9c-066a-5a50-b8b6-f8be1c972f8e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-20T06:33:44Z","modified":"2026-01-20T06:33:44Z","name":"Phishing domain: aemobet.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/aemobet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aemobet.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-20T06:33:44Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aemobet.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f97dfb32-b8ee-53d5-b5bb-510d3d2ea403","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-28T13:05:41Z","modified":"2026-06-28T13:05:41Z","name":"Phishing domain: aen.lat","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aen.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aen.lat']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-28T13:05:41Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aen.lat"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7881bae-e8f1-5159-833a-474486561506","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:52:50Z","modified":"2026-07-27T04:52:50Z","name":"Phishing domain: aeon-financialcapital.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aeon-financialcapital.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aeon-financialcapital.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:52:50Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aeon-financialcapital.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fad0bf2d-903f-550e-95b4-cb0cd397b887","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T03:47:14Z","modified":"2026-06-15T03:47:14Z","name":"Phishing domain: aeon-proposai.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aeon-proposai.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aeon-proposai.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T03:47:14Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aeon-proposai.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--138db0f0-c40e-5b7e-8fe0-8f3c338e5ced","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T01:49:31Z","modified":"2026-02-13T01:49:31Z","name":"Phishing domain: aeoncomrewards.icu","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aeoncomrewards.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aeoncomrewards.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T01:49:31Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aeoncomrewards.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4918174-3555-5bb6-b0b1-cfb39a98bd6e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-21T06:52:23Z","modified":"2026-03-21T06:52:23Z","name":"Phishing domain: aeonicsec.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aeonicsec.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aeonicsec.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-21T06:52:23Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aeonicsec.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f554c9f0-ec3c-55dc-8a31-f2a44e72620b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-06T14:19:15Z","modified":"2026-03-06T14:19:15Z","name":"Phishing domain: aeonroll.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating binance. Report & evidence: https://phishdestroy.io/domain/aeonroll.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aeonroll.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-06T14:19:15Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aeonroll.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--52ac204b-e645-5130-a74f-32e0a2eb70fb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T10:36:07Z","modified":"2026-02-13T10:36:07Z","name":"Phishing domain: aeoraster.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aeoraster.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aeoraster.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T10:36:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aeoraster.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3b1a98a-8668-57db-8139-9efb8674f971","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-07-20T08:27:38Z","modified":"2025-07-20T08:27:38Z","name":"Phishing domain: aeradroame.finance","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating near. Report & evidence: https://phishdestroy.io/domain/aeradroame.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aeradroame.finance']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-07-20T08:27:38Z","labels":["malicious-activity","phishing","brand:near"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aeradroame.finance"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--58cbf68c-90d9-5d46-9ab7-95162bfb5523","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-07-20T08:26:19Z","modified":"2025-07-20T08:26:19Z","name":"Phishing domain: aeradroma.finance","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aerodrome. Report & evidence: https://phishdestroy.io/domain/aeradroma.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aeradroma.finance']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-07-20T08:26:19Z","labels":["malicious-activity","phishing","brand:aerodrome"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aeradroma.finance"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b17adcc-24bd-5a00-ab86-6a88a1560d2a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: aeradrome.co","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aeradrome.co","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aeradrome.co']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aeradrome.co"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--59923073-f2ca-5966-af8e-25f8608e0fa8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-07T08:09:32Z","modified":"2026-02-07T08:09:32Z","name":"Phishing domain: aerco.ltd","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aerco.ltd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerco.ltd']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-07T08:09:32Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerco.ltd"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--880813da-33de-5aa1-b051-0dc3e41df8e8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-26T11:30:33Z","modified":"2025-09-26T11:30:33Z","name":"Phishing domain: aeredrome.financial","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating ether.fi. Report & evidence: https://phishdestroy.io/domain/aeredrome.financial","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aeredrome.financial']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-26T11:30:33Z","labels":["malicious-activity","phishing","brand:ether.fi"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aeredrome.financial"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--329ce72d-a95a-531e-aaf4-c39c94179669","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-26T11:31:49Z","modified":"2025-09-26T11:31:49Z","name":"Phishing domain: aerero.areodrome.exchange","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating LayerZero. Report & evidence: https://phishdestroy.io/domain/aerero.areodrome.exchange","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerero.areodrome.exchange']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-26T11:31:49Z","labels":["malicious-activity","phishing","brand:layerzero"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerero.areodrome.exchange"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4495c4da-3fb8-50ce-94db-4e4aeab5056a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-03T13:27:33Z","modified":"2026-06-03T13:27:33Z","name":"Phishing domain: aerix-tsg.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating fakeshop. Report & evidence: https://phishdestroy.io/domain/aerix-tsg.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerix-tsg.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-03T13:27:33Z","labels":["malicious-activity","phishing","brand:fakeshop"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerix-tsg.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8989aa51-0437-54b1-9b71-7fb2b0d42f1f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-22T03:05:48Z","modified":"2025-11-22T03:05:48Z","name":"Phishing domain: aeriygdcjdiugcjjtjywzxgtrsnbwtnlz.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Jupiter. Report & evidence: https://phishdestroy.io/domain/aeriygdcjdiugcjjtjywzxgtrsnbwtnlz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aeriygdcjdiugcjjtjywzxgtrsnbwtnlz.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-22T03:05:48Z","labels":["malicious-activity","phishing","brand:jupiter"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aeriygdcjdiugcjjtjywzxgtrsnbwtnlz.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9499bb10-b33d-5e12-87d7-86ed20d099b5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-07-03T02:15:10Z","modified":"2025-07-03T02:15:10Z","name":"Phishing domain: aerlifi.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aerodrome. Report & evidence: https://phishdestroy.io/domain/aerlifi.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerlifi.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-07-03T02:15:10Z","labels":["malicious-activity","phishing","brand:aerodrome"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerlifi.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9885d7b5-42ae-5b6a-8f03-2e39592821d4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-22T17:13:03Z","modified":"2026-02-22T17:13:03Z","name":"Phishing domain: aerlyxsa.digital","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aerlyxsa.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerlyxsa.digital']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-22T17:13:03Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerlyxsa.digital"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a056758-9da5-5d4f-97e3-baf16cb89f67","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:21Z","modified":"2026-02-26T23:19:21Z","name":"Phishing domain: aero-drom-finance.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/aero-drom-finance.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aero-drom-finance.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:21Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aero-drom-finance.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4f87b4a-532d-5936-b211-5702119ae721","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-25T15:09:56Z","modified":"2026-05-25T15:09:56Z","name":"Phishing domain: aero-finance.lat","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Yearn. Report & evidence: https://phishdestroy.io/domain/aero-finance.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aero-finance.lat']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-25T15:09:56Z","labels":["malicious-activity","phishing","brand:yearn"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aero-finance.lat"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--09809ca7-4f1d-516e-a60c-b275aa213321","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-25T15:10:10Z","modified":"2026-05-25T15:10:10Z","name":"Phishing domain: aero-finance.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Yearn. Report & evidence: https://phishdestroy.io/domain/aero-finance.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aero-finance.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-25T15:10:10Z","labels":["malicious-activity","phishing","brand:yearn"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aero-finance.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--25de4d72-1c25-5f68-956e-91e10a92adda","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-29T10:39:50Z","modified":"2026-06-29T10:39:50Z","name":"Phishing domain: aero-info.to","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Base. Report & evidence: https://phishdestroy.io/domain/aero-info.to","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aero-info.to']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-29T10:39:50Z","labels":["malicious-activity","phishing","brand:base"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aero-info.to"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--297d7898-5dd6-592a-9fdc-d9dfbbf0d3b3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-19T01:51:33Z","modified":"2025-09-19T01:51:33Z","name":"Phishing domain: aero-space.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aero-space.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aero-space.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-19T01:51:33Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aero-space.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ece08061-a4b1-5aee-9554-c683cd2c5eaf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:12Z","modified":"2026-02-26T23:23:12Z","name":"Phishing domain: aero-sushi.lat","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating SushiSwap. Report & evidence: https://phishdestroy.io/domain/aero-sushi.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aero-sushi.lat']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:12Z","labels":["malicious-activity","phishing","brand:sushiswap"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aero-sushi.lat"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d10693d-6fde-54ec-be82-be1d55455277","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-06T11:36:54Z","modified":"2025-08-06T11:36:54Z","name":"Phishing domain: aero-sushi.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating SushiSwap. Report & evidence: https://phishdestroy.io/domain/aero-sushi.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aero-sushi.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-06T11:36:54Z","labels":["malicious-activity","phishing","brand:sushiswap"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aero-sushi.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7101b50-44fb-580d-8acc-017af2ffcd9c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-03T15:23:38Z","modified":"2026-08-03T15:23:38Z","name":"Phishing domain: aero-treasury.info","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aero-treasury.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aero-treasury.info']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-03T15:23:38Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aero-treasury.info"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2559d4fb-802a-52d4-ae33-cebdc952952c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:32Z","modified":"2026-02-26T23:23:32Z","name":"Phishing domain: aero.dromc.fi-i1.shop","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aero.dromc.fi-i1.shop","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aero.dromc.fi-i1.shop']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:32Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aero.dromc.fi-i1.shop"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--38e2e10a-82c9-5722-9f6f-83e58cc55cda","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:51Z","modified":"2026-02-26T23:22:51Z","name":"Phishing domain: aero.drome.eth.limo","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aero.drome.eth.limo","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aero.drome.eth.limo']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:51Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aero.drome.eth.limo"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8332072-5cc2-58bf-954b-4e65fc2fa5d4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-24T11:15:46Z","modified":"2025-09-24T11:15:46Z","name":"Phishing domain: aero.sushistakes.biz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating SushiSwap. Report & evidence: https://phishdestroy.io/domain/aero.sushistakes.biz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aero.sushistakes.biz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-24T11:15:46Z","labels":["malicious-activity","phishing","brand:sushiswap"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aero.sushistakes.biz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3de89760-b0cf-56d8-8f93-66a608c37fc0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-24T11:13:43Z","modified":"2025-09-24T11:13:43Z","name":"Phishing domain: aero.sushistakes.info","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating SushiSwap. Report & evidence: https://phishdestroy.io/domain/aero.sushistakes.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aero.sushistakes.info']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-24T11:13:43Z","labels":["malicious-activity","phishing","brand:sushiswap"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aero.sushistakes.info"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8e5d5e5-9d98-5a0d-9997-0657b14a9df8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-24T11:12:04Z","modified":"2025-09-24T11:12:04Z","name":"Phishing domain: aero.sushistakes.us","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating SushiSwap. Report & evidence: https://phishdestroy.io/domain/aero.sushistakes.us","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aero.sushistakes.us']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-24T11:12:04Z","labels":["malicious-activity","phishing","brand:sushiswap"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aero.sushistakes.us"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--91b18fac-bde6-504c-a6d3-1b8710912fa7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-07T17:07:05Z","modified":"2025-08-07T17:07:05Z","name":"Phishing domain: aerocargo-express.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aerocargo-express.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerocargo-express.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-07T17:07:05Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerocargo-express.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b776a65f-3a86-5c61-90c4-dcc2e703b406","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-20T17:00:21Z","modified":"2025-09-20T17:00:21Z","name":"Phishing domain: aerocargodeliveryservices.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/aerocargodeliveryservices.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerocargodeliveryservices.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-20T17:00:21Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerocargodeliveryservices.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcec4a01-1036-5efb-bc23-0dda98f1d343","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-20T13:06:26Z","modified":"2026-07-20T13:06:26Z","name":"Phishing domain: aerocheck-cdev.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aerocheck-cdev.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerocheck-cdev.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-20T13:06:26Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerocheck-cdev.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f5e2202-19ad-5aaa-8fd4-ab7d0e8a4fc7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-10T02:12:41Z","modified":"2025-08-10T02:12:41Z","name":"Phishing domain: aerocoin.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aerodrome. Report & evidence: https://phishdestroy.io/domain/aerocoin.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerocoin.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-10T02:12:41Z","labels":["malicious-activity","phishing","brand:aerodrome"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerocoin.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e0ac87b-ba8b-576c-ac51-da80f465c12f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-29T09:25:56Z","modified":"2026-04-29T09:25:56Z","name":"Phishing domain: aerocouriertravsinc.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating [\"across\"]. Report & evidence: https://phishdestroy.io/domain/aerocouriertravsinc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerocouriertravsinc.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-29T09:25:56Z","labels":["malicious-activity","phishing","brand:[\"across\"]"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerocouriertravsinc.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c04da0b-b9db-51b8-b523-7fd026cd40fa","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-19T08:06:43Z","modified":"2025-10-19T08:06:43Z","name":"Phishing domain: aerodash.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/aerodash.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodash.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-19T08:06:43Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodash.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--14fa24b6-75f4-54be-a365-f838753ba369","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-19T02:21:13Z","modified":"2026-06-19T02:21:13Z","name":"Phishing domain: aerodeliveryexpress.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aerodeliveryexpress.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodeliveryexpress.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-19T02:21:13Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodeliveryexpress.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--245142fe-d4f8-553e-ba9f-6740e6f7ec73","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-26T16:06:08Z","modified":"2026-04-26T16:06:08Z","name":"Phishing domain: aerodex.finance","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aerodex.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodex.finance']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-26T16:06:08Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodex.finance"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--67ed1dfb-4931-52ee-b689-d4b48d6bc442","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-24T17:52:18Z","modified":"2026-01-24T17:52:18Z","name":"Phishing domain: aerodlrome.finance","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/aerodlrome.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodlrome.finance']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-24T17:52:18Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodlrome.finance"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2204523e-46a6-54a4-b6ec-4e8a3fc9fae8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-17T08:38:07Z","modified":"2025-09-17T08:38:07Z","name":"Phishing domain: aerodrcme.financial","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aerodrcme.financial","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrcme.financial']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-17T08:38:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodrcme.financial"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a13d236-8948-5e97-bc4b-984158df7bb7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-02T13:14:16Z","modified":"2025-08-02T13:14:16Z","name":"Phishing domain: aerodriftlogistics.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/aerodriftlogistics.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodriftlogistics.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-02T13:14:16Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodriftlogistics.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5319a2e-cc60-5e4f-a5f2-d4125adc2fef","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-04T15:53:12Z","modified":"2026-02-04T15:53:12Z","name":"Phishing domain: aerodrom.pro","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aerodrome. Report & evidence: https://phishdestroy.io/domain/aerodrom.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrom.pro']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-04T15:53:12Z","labels":["malicious-activity","phishing","brand:aerodrome"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodrom.pro"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9de8ccbf-4c8b-5d61-86b2-9c32f086e7e0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:29Z","modified":"2026-02-26T23:20:29Z","name":"Phishing domain: aerodrom.sas1.pro","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aerodrom.sas1.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrom.sas1.pro']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodrom.sas1.pro"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--94d64995-4eb1-5cf4-9fcb-7753f2c44921","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-01T05:03:12Z","modified":"2026-05-01T05:03:12Z","name":"Phishing domain: aerodroma.finance","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/aerodroma.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodroma.finance']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-01T05:03:12Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodroma.finance"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1783ea9d-7ffd-50d2-9e24-e1856823cd26","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:23Z","modified":"2026-02-26T23:22:23Z","name":"Phishing domain: aerodrome--slipstream.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/aerodrome--slipstream.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrome--slipstream.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:23Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodrome--slipstream.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--687281d8-298a-5b31-a6ab-0884d6c9c9af","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: aerodrome-allocations.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aerodrome-allocations.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrome-allocations.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodrome-allocations.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1557f49c-cb9a-5081-b86d-3e161cc3d21d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-12T04:31:38Z","modified":"2025-09-12T04:31:38Z","name":"Phishing domain: aerodrome-app.finance","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aerodrome. Report & evidence: https://phishdestroy.io/domain/aerodrome-app.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrome-app.finance']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-12T04:31:38Z","labels":["malicious-activity","phishing","brand:aerodrome"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodrome-app.finance"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce146319-fe9e-5664-81ae-03994da3379f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-06T01:56:21Z","modified":"2026-08-06T01:56:21Z","name":"Phishing domain: aerodrome-app.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating MetaMask. Report & evidence: https://phishdestroy.io/domain/aerodrome-app.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrome-app.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-06T01:56:21Z","labels":["malicious-activity","phishing","brand:metamask"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodrome-app.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dff92d07-0d86-5962-a199-503d79c512a7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-12T04:34:08Z","modified":"2025-09-12T04:34:08Z","name":"Phishing domain: aerodrome-by.cfd","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aerodrome. Report & evidence: https://phishdestroy.io/domain/aerodrome-by.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrome-by.cfd']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-12T04:34:08Z","labels":["malicious-activity","phishing","brand:aerodrome"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodrome-by.cfd"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bb7f7c0-0f75-5c34-871d-e31d91308e77","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: aerodrome-check.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aerodrome-check.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrome-check.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodrome-check.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--96bfeaea-8585-53a1-97c0-051437a36367","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-11T19:11:14Z","modified":"2026-02-11T19:11:14Z","name":"Phishing domain: aerodrome-claim.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aerodrome. Report & evidence: https://phishdestroy.io/domain/aerodrome-claim.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrome-claim.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-11T19:11:14Z","labels":["malicious-activity","phishing","brand:aerodrome"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodrome-claim.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--90ca63fe-db45-5144-8653-c991000b0fff","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-09T19:17:08Z","modified":"2026-07-09T19:17:08Z","name":"Phishing domain: aerodrome-dapp-router-v48.netlify.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aerodrome-dapp-router-v48.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrome-dapp-router-v48.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-09T19:17:08Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodrome-dapp-router-v48.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--817492bf-a732-5034-97cc-572b965aaa73","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-30T13:16:41Z","modified":"2025-12-30T13:16:41Z","name":"Phishing domain: aerodrome-distribution.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aerodrome. Report & evidence: https://phishdestroy.io/domain/aerodrome-distribution.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrome-distribution.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-30T13:16:41Z","labels":["malicious-activity","phishing","brand:aerodrome"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodrome-distribution.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--34011e9e-de18-5276-9490-5846fdceccb6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-30T18:03:11Z","modified":"2025-12-30T18:03:11Z","name":"Phishing domain: aerodrome-distribution.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aerodrome. Report & evidence: https://phishdestroy.io/domain/aerodrome-distribution.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrome-distribution.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-30T18:03:11Z","labels":["malicious-activity","phishing","brand:aerodrome"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodrome-distribution.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa92a8a4-8afc-5ec9-a288-0f791325cdcd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-30T14:55:15Z","modified":"2025-12-30T14:55:15Z","name":"Phishing domain: aerodrome-distributions.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aerodrome. Report & evidence: https://phishdestroy.io/domain/aerodrome-distributions.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrome-distributions.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-30T14:55:15Z","labels":["malicious-activity","phishing","brand:aerodrome"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodrome-distributions.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf495e6e-fc79-5d84-a988-beab95272030","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T15:01:34Z","modified":"2026-02-13T15:01:34Z","name":"Phishing domain: aerodrome-drop.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aerodrome. Report & evidence: https://phishdestroy.io/domain/aerodrome-drop.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrome-drop.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T15:01:34Z","labels":["malicious-activity","phishing","brand:aerodrome"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodrome-drop.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--73317a9b-1a48-5fdc-b9b0-2d03d012ff1b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-15T08:35:09Z","modified":"2026-04-15T08:35:09Z","name":"Phishing domain: aerodrome-finac.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating ethereum. Report & evidence: https://phishdestroy.io/domain/aerodrome-finac.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrome-finac.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-15T08:35:09Z","labels":["malicious-activity","phishing","brand:ethereum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodrome-finac.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e70bf3aa-cb81-5e5b-81fa-37eccf3be5cd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-18T16:55:14Z","modified":"2026-03-18T16:55:14Z","name":"Phishing domain: aerodrome-finace.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aerodrome. Report & evidence: https://phishdestroy.io/domain/aerodrome-finace.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrome-finace.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-18T16:55:14Z","labels":["malicious-activity","phishing","brand:aerodrome"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodrome-finace.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--66856216-2c24-5b3a-8f63-5adcc099d42a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-24T14:22:37Z","modified":"2026-03-24T14:22:37Z","name":"Phishing domain: aerodrome-finance-coai-buy.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating MetaMask. Report & evidence: https://phishdestroy.io/domain/aerodrome-finance-coai-buy.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrome-finance-coai-buy.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-24T14:22:37Z","labels":["malicious-activity","phishing","brand:metamask"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodrome-finance-coai-buy.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8b09396-1363-5889-bc27-bb2a82c5a87b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-24T00:06:41Z","modified":"2026-03-24T00:06:41Z","name":"Phishing domain: aerodrome-finance-coai-swap.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aerodrome-finance-coai-swap.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrome-finance-coai-swap.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-24T00:06:41Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodrome-finance-coai-swap.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--acf6ad5f-942c-5662-8b01-06df1d68cedf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:00Z","modified":"2026-02-26T23:23:00Z","name":"Phishing domain: aerodrome-finance-com.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/aerodrome-finance-com.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrome-finance-com.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:00Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodrome-finance-com.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--98c0b15e-6ece-5e76-b4b8-25dd15080391","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:12Z","modified":"2026-02-26T23:23:12Z","name":"Phishing domain: aerodrome-finance-guide.typedream.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aerodrome-finance-guide.typedream.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrome-finance-guide.typedream.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:12Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodrome-finance-guide.typedream.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a21c1388-84e4-5a66-a3a7-f02693e43105","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-20T16:32:01Z","modified":"2026-02-20T16:32:01Z","name":"Phishing domain: aerodrome-finance.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/aerodrome-finance.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrome-finance.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-20T16:32:01Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodrome-finance.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5404cff-9da4-5e90-b495-e9aba6c103e5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:29Z","modified":"2026-02-26T23:24:29Z","name":"Phishing domain: aerodrome-finance.i3y.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aerodrome. Report & evidence: https://phishdestroy.io/domain/aerodrome-finance.i3y.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrome-finance.i3y.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:29Z","labels":["malicious-activity","phishing","brand:aerodrome"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodrome-finance.i3y.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5080323f-092c-5465-8a7d-2a10fc81b015","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:53Z","modified":"2026-02-26T23:22:53Z","name":"Phishing domain: aerodrome-finance.vip","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aerodrome. Report & evidence: https://phishdestroy.io/domain/aerodrome-finance.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrome-finance.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:53Z","labels":["malicious-activity","phishing","brand:aerodrome"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodrome-finance.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a6fc70a-3747-53c8-ade5-0ca716483b14","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:21Z","modified":"2026-02-26T23:23:21Z","name":"Phishing domain: aerodrome-financee.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aerodrome. Report & evidence: https://phishdestroy.io/domain/aerodrome-financee.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrome-financee.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:21Z","labels":["malicious-activity","phishing","brand:aerodrome"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodrome-financee.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f8095bf-1d31-5606-b42a-3c0909f87b53","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:25Z","modified":"2026-02-26T23:24:25Z","name":"Phishing domain: aerodrome-finannce.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/aerodrome-finannce.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrome-finannce.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:25Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodrome-finannce.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e1bcf07-68e9-57dc-b13a-1b0dc0484b9b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:51Z","modified":"2026-02-26T23:23:51Z","name":"Phishing domain: aerodrome-flnance.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aerodrome. Report & evidence: https://phishdestroy.io/domain/aerodrome-flnance.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrome-flnance.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:51Z","labels":["malicious-activity","phishing","brand:aerodrome"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodrome-flnance.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf15a90a-61f5-5f6f-a520-6c81dfddf4cb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:51Z","modified":"2026-02-26T23:23:51Z","name":"Phishing domain: aerodrome-launchpad.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aerodrome. Report & evidence: https://phishdestroy.io/domain/aerodrome-launchpad.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrome-launchpad.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:51Z","labels":["malicious-activity","phishing","brand:aerodrome"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodrome-launchpad.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eba64d3f-a895-5bb2-a6b7-8f5dcfcbc799","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-28T16:28:09Z","modified":"2026-04-28T16:28:09Z","name":"Phishing domain: aerodrome-pharos.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aerodrome-pharos.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrome-pharos.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-28T16:28:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodrome-pharos.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6392cb78-623f-510d-9a93-a2e28c67655b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-22T04:44:58Z","modified":"2025-11-22T04:44:58Z","name":"Phishing domain: aerodrome-revoke.cash","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating discord. Report & evidence: https://phishdestroy.io/domain/aerodrome-revoke.cash","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrome-revoke.cash']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-22T04:44:58Z","labels":["malicious-activity","phishing","brand:discord"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodrome-revoke.cash"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e9874f8-d94e-5991-b3f0-f30f229cedbd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:15Z","modified":"2026-02-26T23:23:15Z","name":"Phishing domain: aerodrome-reward.site","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/aerodrome-reward.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrome-reward.site']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:15Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodrome-reward.site"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--08b2517b-efb3-50a3-99ea-85fc0f2ea7fb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:54Z","modified":"2026-02-26T23:23:54Z","name":"Phishing domain: aerodrome-slip--stream.typedream.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aerodrome. Report & evidence: https://phishdestroy.io/domain/aerodrome-slip--stream.typedream.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrome-slip--stream.typedream.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:54Z","labels":["malicious-activity","phishing","brand:aerodrome"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodrome-slip--stream.typedream.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f0c22c5-92cc-5c06-be35-7a790be83ec9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:11Z","modified":"2026-02-26T23:23:11Z","name":"Phishing domain: aerodrome-slipstream-auth-cdn.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aerodrome-slipstream-auth-cdn.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrome-slipstream-auth-cdn.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:11Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodrome-slipstream-auth-cdn.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--64cff451-f722-5964-ac42-81d2b38397c1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:34Z","modified":"2026-02-26T23:24:34Z","name":"Phishing domain: aerodrome-slipstream-us-en.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/aerodrome-slipstream-us-en.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrome-slipstream-us-en.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:34Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodrome-slipstream-us-en.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--75590f5d-4564-504a-8572-a65a8caa1b50","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:27Z","modified":"2026-02-26T23:19:27Z","name":"Phishing domain: aerodrome-slipstream.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/aerodrome-slipstream.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrome-slipstream.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:27Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodrome-slipstream.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d56a2f2-39e2-56da-9c11-c93f2d28ede3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-30T07:14:38Z","modified":"2026-03-30T07:14:38Z","name":"Phishing domain: aerodrome-snapshot.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/aerodrome-snapshot.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrome-snapshot.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-30T07:14:38Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodrome-snapshot.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c7a3b93-8ce5-5839-b121-ef9cc594e81b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-18T16:59:26Z","modified":"2026-03-18T16:59:26Z","name":"Phishing domain: aerodrome-swap.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/aerodrome-swap.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrome-swap.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-18T16:59:26Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodrome-swap.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c45a48b-6a73-5ee1-81ed-e40b9751afc4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-25T09:39:21Z","modified":"2025-12-25T09:39:21Z","name":"Phishing domain: aerodrome.best","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/aerodrome.best","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrome.best']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-25T09:39:21Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodrome.best"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e38e37c-4782-5025-a8bd-b349bb94c387","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-10T02:41:23Z","modified":"2025-11-10T02:41:23Z","name":"Phishing domain: aerodrome.box","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aerodrome. Report & evidence: https://phishdestroy.io/domain/aerodrome.box","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrome.box']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-10T02:41:23Z","labels":["malicious-activity","phishing","brand:aerodrome"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodrome.box"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e30f37f-c746-5d12-b6fd-59914c2539f1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-20T06:41:39Z","modified":"2025-12-20T06:41:39Z","name":"Phishing domain: aerodrome.cafe","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/aerodrome.cafe","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrome.cafe']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-20T06:41:39Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodrome.cafe"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--44f97ab0-37ed-5efe-a913-8c9054cc1a76","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-29T23:39:31Z","modified":"2025-12-29T23:39:31Z","name":"Phishing domain: aerodrome.cards","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/aerodrome.cards","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrome.cards']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-29T23:39:31Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodrome.cards"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c24eabf8-ac3f-557f-a870-f7a936ac64b6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: aerodrome.casa","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aerodrome.casa","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrome.casa']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodrome.casa"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--653e156f-de80-54d2-8daa-344528c2a957","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-10T02:40:58Z","modified":"2025-11-10T02:40:58Z","name":"Phishing domain: aerodrome.city","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating binance. Report & evidence: https://phishdestroy.io/domain/aerodrome.city","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrome.city']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-10T02:40:58Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodrome.city"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6fb7b27-b32b-5140-8a4c-6e8202ca3e7c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: aerodrome.co.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aerodrome.co.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrome.co.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodrome.co.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a925369-8e0a-5c80-9d5c-0b57a1185af2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:00Z","modified":"2026-02-26T23:21:00Z","name":"Phishing domain: aerodrome.com.br","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aerodrome.com.br","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrome.com.br']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:00Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodrome.com.br"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d11a306a-c918-5d33-a92e-bd7cc2405396","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-19T02:24:21Z","modified":"2025-08-19T02:24:21Z","name":"Phishing domain: aerodrome.company","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aerodrome. Report & evidence: https://phishdestroy.io/domain/aerodrome.company","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrome.company']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-19T02:24:21Z","labels":["malicious-activity","phishing","brand:aerodrome"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodrome.company"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b9e9e01-0f07-5e9d-bfb8-c7255125ce8f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-14T01:42:50Z","modified":"2025-12-14T01:42:50Z","name":"Phishing domain: aerodrome.dog","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/aerodrome.dog","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrome.dog']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-14T01:42:50Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodrome.dog"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--15b4d2bf-04a9-5307-a0a4-488b6dbce5da","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-19T09:22:09Z","modified":"2025-11-19T09:22:09Z","name":"Phishing domain: aerodrome.finance-portal.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aerodrome. Report & evidence: https://phishdestroy.io/domain/aerodrome.finance-portal.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrome.finance-portal.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-19T09:22:09Z","labels":["malicious-activity","phishing","brand:aerodrome"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodrome.finance-portal.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--13c27239-3531-57fd-87ab-5be9e46f2ad3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-25T04:05:50Z","modified":"2025-08-25T04:05:50Z","name":"Phishing domain: aerodrome.finance-snapshot.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aerodrome. Report & evidence: https://phishdestroy.io/domain/aerodrome.finance-snapshot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrome.finance-snapshot.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-25T04:05:50Z","labels":["malicious-activity","phishing","brand:aerodrome"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodrome.finance-snapshot.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a7b7ef3-f597-5e71-a3bb-d0e08aba058c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: aerodrome.fun","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aerodrome.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrome.fun']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodrome.fun"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b40bcc3-8cae-543e-8b1c-207ea01ea5d2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-18T16:55:20Z","modified":"2026-03-18T16:55:20Z","name":"Phishing domain: aerodrome.limo","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/aerodrome.limo","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrome.limo']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-18T16:55:20Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodrome.limo"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--abc58add-5a0f-5c5e-9b1e-b1c678a3bdea","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:20Z","modified":"2026-02-26T23:22:20Z","name":"Phishing domain: aerodrome.network","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aerodrome. Report & evidence: https://phishdestroy.io/domain/aerodrome.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrome.network']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:20Z","labels":["malicious-activity","phishing","brand:aerodrome"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodrome.network"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f053082-70a4-5106-a229-948e2cbdcbae","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:21Z","modified":"2026-02-26T23:20:21Z","name":"Phishing domain: aerodrome.onl.apexfix.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aerodrome. Report & evidence: https://phishdestroy.io/domain/aerodrome.onl.apexfix.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrome.onl.apexfix.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:21Z","labels":["malicious-activity","phishing","brand:aerodrome"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodrome.onl.apexfix.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd43222d-2f70-52f1-bb4d-4dc055b751e1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:43Z","modified":"2026-02-26T23:19:43Z","name":"Phishing domain: aerodrome.onrender.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aerodrome. Report & evidence: https://phishdestroy.io/domain/aerodrome.onrender.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrome.onrender.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:43Z","labels":["malicious-activity","phishing","brand:aerodrome"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodrome.onrender.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5bed603-307f-5b79-b519-7e2613b66ada","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-05T20:30:08Z","modified":"2026-05-05T20:30:08Z","name":"Phishing domain: aerodrome.study","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aerodrome.study","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrome.study']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-05T20:30:08Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodrome.study"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7abba129-8697-5fef-8440-394e5ca809cf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-22T19:06:01Z","modified":"2025-08-22T19:06:01Z","name":"Phishing domain: aerodromeauthorization.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aerodrome. Report & evidence: https://phishdestroy.io/domain/aerodromeauthorization.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodromeauthorization.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-22T19:06:01Z","labels":["malicious-activity","phishing","brand:aerodrome"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodromeauthorization.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f47dd5e4-f38b-569a-9b55-96b17e1042f4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:55Z","modified":"2026-02-26T23:22:55Z","name":"Phishing domain: aerodromeaz.sbs","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aerodromeaz.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodromeaz.sbs']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:55Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodromeaz.sbs"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2212b80d-a537-56d4-95db-860cf162a6e3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T08:35:55Z","modified":"2026-02-13T08:35:55Z","name":"Phishing domain: aerodromedep.finance","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aerodromedep.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodromedep.finance']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T08:35:55Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodromedep.finance"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--588a5734-fe58-5368-b5f5-e0876ca2c66d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-12T04:34:27Z","modified":"2025-09-12T04:34:27Z","name":"Phishing domain: aerodromefenence.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aerodrome. Report & evidence: https://phishdestroy.io/domain/aerodromefenence.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodromefenence.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-12T04:34:27Z","labels":["malicious-activity","phishing","brand:aerodrome"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodromefenence.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f727b50-10a2-5d34-b0b1-131fa61f7da3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-12T04:34:30Z","modified":"2025-09-12T04:34:30Z","name":"Phishing domain: aerodromefenonces.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aerodrome. Report & evidence: https://phishdestroy.io/domain/aerodromefenonces.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodromefenonces.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-12T04:34:30Z","labels":["malicious-activity","phishing","brand:aerodrome"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodromefenonces.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9d085ab-92f4-51bc-af88-be2af876f946","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-24T20:50:04Z","modified":"2026-06-24T20:50:04Z","name":"Phishing domain: aerodromefi-vote.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aerodromefi-vote.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodromefi-vote.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-24T20:50:04Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodromefi-vote.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ada83e95-6115-5116-97fb-8065f8b7690f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-24T20:46:20Z","modified":"2026-06-24T20:46:20Z","name":"Phishing domain: aerodromefi-votes.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aerodromefi-votes.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodromefi-votes.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-24T20:46:20Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodromefi-votes.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--42658700-7278-5754-adb6-7584ef6122c8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-02T13:07:50Z","modified":"2026-08-02T13:07:50Z","name":"Phishing domain: aerodromefi.news","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating MetaMask. Report & evidence: https://phishdestroy.io/domain/aerodromefi.news","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodromefi.news']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-02T13:07:50Z","labels":["malicious-activity","phishing","brand:metamask"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodromefi.news"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1953b093-2884-577f-9be3-331f68ce5ab7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-05T18:45:30Z","modified":"2026-05-05T18:45:30Z","name":"Phishing domain: aerodromefi.one","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aerodromefi.one","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodromefi.one']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-05T18:45:30Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodromefi.one"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--28561239-afb1-5c45-b278-b59b4e8f4317","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-04T05:13:52Z","modified":"2026-08-04T05:13:52Z","name":"Phishing domain: aerodromefi.team","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating MetaMask. Report & evidence: https://phishdestroy.io/domain/aerodromefi.team","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodromefi.team']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-04T05:13:52Z","labels":["malicious-activity","phishing","brand:metamask"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodromefi.team"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--96b069a2-1a9c-5a50-8e09-b51876eb0cf6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-10T02:40:59Z","modified":"2025-11-10T02:40:59Z","name":"Phishing domain: aerodromefinace.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aerodromefinace.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodromefinace.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-10T02:40:59Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodromefinace.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb3e1e7c-5255-50b9-b673-ac0d97005979","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-04T15:24:28Z","modified":"2026-04-04T15:24:28Z","name":"Phishing domain: aerodromefinance.to","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Base. Report & evidence: https://phishdestroy.io/domain/aerodromefinance.to","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodromefinance.to']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-04T15:24:28Z","labels":["malicious-activity","phishing","brand:base"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodromefinance.to"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--00eee492-29f7-529f-b447-9b425a9680ff","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-12T04:31:38Z","modified":"2025-09-12T04:31:38Z","name":"Phishing domain: aerodromefinanceapp.live","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aerodrome. Report & evidence: https://phishdestroy.io/domain/aerodromefinanceapp.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodromefinanceapp.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-12T04:31:38Z","labels":["malicious-activity","phishing","brand:aerodrome"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodromefinanceapp.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--96476227-bc36-5802-9aba-47300017efa6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-10T02:45:50Z","modified":"2025-11-10T02:45:50Z","name":"Phishing domain: aerodromefinancial.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aerodrome. Report & evidence: https://phishdestroy.io/domain/aerodromefinancial.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodromefinancial.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-10T02:45:50Z","labels":["malicious-activity","phishing","brand:aerodrome"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodromefinancial.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1eb8b4ab-8a1f-57b8-a3e9-8e847bcfbec8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-12T04:31:59Z","modified":"2025-09-12T04:31:59Z","name":"Phishing domain: aerodromefirmware.finance","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aerodrome. Report & evidence: https://phishdestroy.io/domain/aerodromefirmware.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodromefirmware.finance']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-12T04:31:59Z","labels":["malicious-activity","phishing","brand:aerodrome"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodromefirmware.finance"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--27e525c7-560c-5c95-b047-3a26ebf9aeea","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-12T04:34:11Z","modified":"2025-09-12T04:34:11Z","name":"Phishing domain: aerodromegroup.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aerodrome. Report & evidence: https://phishdestroy.io/domain/aerodromegroup.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodromegroup.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-12T04:34:11Z","labels":["malicious-activity","phishing","brand:aerodrome"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodromegroup.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ebc51c8-fdf1-5ba5-ba6d-142305117f28","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-12T01:45:37Z","modified":"2025-09-12T01:45:37Z","name":"Phishing domain: aerodromesflnance.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/aerodromesflnance.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodromesflnance.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-12T01:45:37Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodromesflnance.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--da244804-0b90-5842-9e92-095ce21cabeb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:58Z","modified":"2026-02-26T23:22:58Z","name":"Phishing domain: aerodromeslipstream.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aave. Report & evidence: https://phishdestroy.io/domain/aerodromeslipstream.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodromeslipstream.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:58Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodromeslipstream.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--03e60955-bd26-5844-af9c-dfecbb670170","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-13T23:59:57Z","modified":"2025-09-13T23:59:57Z","name":"Phishing domain: aerodromeslipstream.live","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating [\"aerodrome\"]. Report & evidence: https://phishdestroy.io/domain/aerodromeslipstream.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodromeslipstream.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-13T23:59:57Z","labels":["malicious-activity","phishing","brand:[\"aerodrome\"]"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodromeslipstream.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f675e80-a41f-5294-b3ad-5d5cebc8de79","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-10T04:45:15Z","modified":"2025-09-10T04:45:15Z","name":"Phishing domain: aerodromeslipstream.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aerodromeslipstream.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodromeslipstream.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-10T04:45:15Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodromeslipstream.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb1a62e7-cbad-58f9-9d41-95a30c080120","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:31Z","modified":"2026-02-26T23:23:31Z","name":"Phishing domain: aerodromeslipstream.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/aerodromeslipstream.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodromeslipstream.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:31Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodromeslipstream.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--73cc7ebe-c2a9-5303-88c2-c2d9ef083c01","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-10T04:45:10Z","modified":"2025-09-10T04:45:10Z","name":"Phishing domain: aerodromeslipstream.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aave. Report & evidence: https://phishdestroy.io/domain/aerodromeslipstream.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodromeslipstream.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-10T04:45:10Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodromeslipstream.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e15d8831-e0cf-592f-9ed8-bb02bb8c422c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T08:36:28Z","modified":"2026-02-13T08:36:28Z","name":"Phishing domain: aerodromeswap.finance","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aerodromeswap.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodromeswap.finance']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T08:36:28Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodromeswap.finance"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9a23e1b-d5d6-58ec-948a-9750224f7545","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-26T16:06:06Z","modified":"2026-04-26T16:06:06Z","name":"Phishing domain: aerodromev2.finance","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aerodromev2.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodromev2.finance']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-26T16:06:06Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodromev2.finance"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3d80639-7e81-5d4a-af4f-e74b5f1b95e8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: aerodrrome.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/aerodrrome.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerodrrome.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerodrrome.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6770096a-5ea4-5f04-9bd8-49a4eba78b60","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-08T13:30:30Z","modified":"2026-07-08T13:30:30Z","name":"Phishing domain: aeroexpressperu.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aeroexpressperu.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aeroexpressperu.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-08T13:30:30Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aeroexpressperu.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3912d87-3b93-5ef1-b60f-4b160a20a85e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:35Z","modified":"2026-02-26T23:19:35Z","name":"Phishing domain: aerofexgain.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aerofexgain.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerofexgain.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:35Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerofexgain.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--313eb215-4a45-563e-85d2-9a1863e938d0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-07-13T09:53:15Z","modified":"2025-07-13T09:53:15Z","name":"Phishing domain: aerofinance.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aerodrome. Report & evidence: https://phishdestroy.io/domain/aerofinance.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerofinance.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-07-13T09:53:15Z","labels":["malicious-activity","phishing","brand:aerodrome"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerofinance.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--70f51411-cc53-5486-b530-2feeb9cc0534","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T03:46:13Z","modified":"2026-06-15T03:46:13Z","name":"Phishing domain: aerofromefi-vote.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aerofromefi-vote.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerofromefi-vote.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T03:46:13Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerofromefi-vote.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd488422-ca0e-5722-a269-eabe1be170bb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-20T17:00:44Z","modified":"2025-09-20T17:00:44Z","name":"Phishing domain: aeroglobalswiftdelivery.com.trinityexpressdelivery.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/aeroglobalswiftdelivery.com.trinityexpressdelivery.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aeroglobalswiftdelivery.com.trinityexpressdelivery.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-20T17:00:44Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aeroglobalswiftdelivery.com.trinityexpressdelivery.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6411ac33-18ab-5e3b-a155-b330b762df25","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-03T17:28:09Z","modified":"2026-08-03T17:28:09Z","name":"Phishing domain: aerolinkafrica.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating MetaMask. Report & evidence: https://phishdestroy.io/domain/aerolinkafrica.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerolinkafrica.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-03T17:28:09Z","labels":["malicious-activity","phishing","brand:metamask"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerolinkafrica.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f06fe622-dcff-5838-8629-c77d22441908","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:14Z","modified":"2026-02-26T23:23:14Z","name":"Phishing domain: aeronacelogistics.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aeronacelogistics.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aeronacelogistics.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:14Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aeronacelogistics.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--20a03f4c-6c2e-5d21-9397-a18e192ae6d7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-06T01:18:40Z","modified":"2025-12-06T01:18:40Z","name":"Phishing domain: aeropaydigitalasset.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating foundation. Report & evidence: https://phishdestroy.io/domain/aeropaydigitalasset.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aeropaydigitalasset.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-06T01:18:40Z","labels":["malicious-activity","phishing","brand:foundation"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aeropaydigitalasset.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--41e3bea3-4495-5f50-bde6-ad2f871338d9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-22T02:30:03Z","modified":"2026-01-22T02:30:03Z","name":"Phishing domain: aerordome.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/aerordome.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerordome.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-22T02:30:03Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerordome.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac74ede5-cfab-5aac-b713-84ada8b33222","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: aerospace-titanium.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aerospace-titanium.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerospace-titanium.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerospace-titanium.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e82df313-f305-5322-9654-e97b0835fca1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-22T16:28:34Z","modified":"2026-03-22T16:28:34Z","name":"Phishing domain: aerospace.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aerospace.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerospace.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-22T16:28:34Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerospace.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fbc0396-67e5-580b-bc71-090692298eab","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T06:49:05Z","modified":"2026-06-15T06:49:05Z","name":"Phishing domain: aerotechservicesltd.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aerotechservicesltd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerotechservicesltd.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T06:49:05Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerotechservicesltd.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f742bf00-c8c7-5802-9602-ecb739e7161a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-22T12:15:57Z","modified":"2026-06-22T12:15:57Z","name":"Phishing domain: aerotoken.live","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aerotoken.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerotoken.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-22T12:15:57Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerotoken.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f3dc393-84e8-502e-b2dd-aa3783cb5007","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:38Z","modified":"2026-02-26T23:21:38Z","name":"Phishing domain: aerotradefrx.com.capitaltrade.online","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/aerotradefrx.com.capitaltrade.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerotradefrx.com.capitaltrade.online']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:38Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerotradefrx.com.capitaltrade.online"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f46cc35a-2f77-526a-aba6-e83d6809441b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T05:04:22Z","modified":"2026-07-27T05:04:22Z","name":"Phishing domain: aerovest.live","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating investmentscam. Report & evidence: https://phishdestroy.io/domain/aerovest.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aerovest.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T05:04:22Z","labels":["malicious-activity","phishing","brand:investmentscam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aerovest.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8095aed0-02d1-5322-9116-79b4735b1ccd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-17T17:21:22Z","modified":"2026-06-17T17:21:22Z","name":"Phishing domain: aeroxwin.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aeroxwin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aeroxwin.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-17T17:21:22Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aeroxwin.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d0dfbad-4eab-59e3-85dd-56b225be2868","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-10T02:40:06Z","modified":"2025-11-10T02:40:06Z","name":"Phishing domain: aeruodromefnonce.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aerodrome. Report & evidence: https://phishdestroy.io/domain/aeruodromefnonce.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aeruodromefnonce.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-10T02:40:06Z","labels":["malicious-activity","phishing","brand:aerodrome"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aeruodromefnonce.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa9a67ca-5ef8-5a0d-9d01-60d20dbbc9a6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-07T15:26:21Z","modified":"2026-08-07T15:26:21Z","name":"Phishing domain: aesthetes.info","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating compound. Report & evidence: https://phishdestroy.io/domain/aesthetes.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aesthetes.info']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-07T15:26:21Z","labels":["malicious-activity","phishing","brand:compound"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aesthetes.info"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d2604a2-1caa-50c4-8dfc-6dcaeda247fa","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-17T16:33:16Z","modified":"2026-06-17T16:33:16Z","name":"Phishing domain: aesthetesrewards.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aesthetesrewards.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aesthetesrewards.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-17T16:33:16Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aesthetesrewards.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1dbab24-9655-5424-8ddf-56db24ee34da","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-01T01:50:58Z","modified":"2026-06-01T01:50:58Z","name":"Phishing domain: aesthetesrlusd.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aesthetesrlusd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aesthetesrlusd.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-01T01:50:58Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aesthetesrlusd.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e13acc81-b3e7-5b90-9ea5-14bce2422f8c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-08T16:40:18Z","modified":"2026-03-08T16:40:18Z","name":"Phishing domain: aestheticsolana.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/aestheticsolana.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aestheticsolana.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-08T16:40:18Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aestheticsolana.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--00dc9761-fa89-5ea8-8154-24ed567be9b4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T06:59:54Z","modified":"2026-02-13T06:59:54Z","name":"Phishing domain: aesybit.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/aesybit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aesybit.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T06:59:54Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aesybit.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2cb621c-f599-5856-a7a4-3ab1c36cd210","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-29T00:10:57Z","modified":"2026-06-29T00:10:57Z","name":"Phishing domain: aeternago.live","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aeternago.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aeternago.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-29T00:10:57Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aeternago.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f412dbce-4055-5ffc-be18-8dcd965da868","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-03T21:39:05Z","modified":"2026-05-03T21:39:05Z","name":"Phishing domain: aeternago.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/aeternago.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aeternago.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-03T21:39:05Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aeternago.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a95204a-2fef-5593-99ad-c41779f00f8b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-20T19:05:09Z","modified":"2025-12-20T19:05:09Z","name":"Phishing domain: aethelbit.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/aethelbit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethelbit.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-20T19:05:09Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aethelbit.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3025ce47-ea9e-5be4-8421-03183edfec13","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T06:26:57Z","modified":"2026-06-15T06:26:57Z","name":"Phishing domain: aether-aerial.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aether-aerial.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aether-aerial.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T06:26:57Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aether-aerial.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1efd099a-6b8d-5d1d-b3ad-60d092d58c8b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:19Z","modified":"2026-02-26T23:19:19Z","name":"Phishing domain: aether-hub.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/aether-hub.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aether-hub.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:19Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aether-hub.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ba22fd3-6d50-57a5-80c8-97b14526ddc6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-15T03:15:50Z","modified":"2026-04-15T03:15:50Z","name":"Phishing domain: aether-mark.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aether-mark.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aether-mark.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-15T03:15:50Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aether-mark.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--648080cf-7f70-5305-b894-9a2bfa3cd777","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T06:23:25Z","modified":"2026-07-27T06:23:25Z","name":"Phishing domain: aether-origin-ventures.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aether-origin-ventures.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aether-origin-ventures.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T06:23:25Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aether-origin-ventures.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--13b67d7b-b305-5bae-91a2-a9379c856c9b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T09:46:41Z","modified":"2026-07-27T09:46:41Z","name":"Phishing domain: aether-quatemala.sbs","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aether-quatemala.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aether-quatemala.sbs']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T09:46:41Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aether-quatemala.sbs"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2af84014-081c-512e-8389-d8c4df8f235a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T09:46:41Z","modified":"2026-07-27T09:46:41Z","name":"Phishing domain: aether-spain.sbs","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Base. Report & evidence: https://phishdestroy.io/domain/aether-spain.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aether-spain.sbs']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T09:46:41Z","labels":["malicious-activity","phishing","brand:base"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aether-spain.sbs"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--11e55c47-348b-507a-9e0e-3fc924607d1e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-29T17:11:20Z","modified":"2026-04-29T17:11:20Z","name":"Phishing domain: aether-stakes.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aether-stakes.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aether-stakes.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-29T17:11:20Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aether-stakes.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--308e4f0f-67de-51d2-a7cd-e5cfbc7bce76","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-18T00:43:03Z","modified":"2025-11-18T00:43:03Z","name":"Phishing domain: aether-wall.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating facebook. Report & evidence: https://phishdestroy.io/domain/aether-wall.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aether-wall.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-18T00:43:03Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aether-wall.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1c8a58e-4aee-513f-a012-695737902495","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-21T19:12:17Z","modified":"2025-10-21T19:12:17Z","name":"Phishing domain: aether.com.im","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating american express. Report & evidence: https://phishdestroy.io/domain/aether.com.im","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aether.com.im']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-21T19:12:17Z","labels":["malicious-activity","phishing","brand:american express"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aether.com.im"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8816e4d-1a85-5552-b2e4-f9fa120d9b67","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-27T18:31:11Z","modified":"2025-12-27T18:31:11Z","name":"Phishing domain: aetherclaim.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aetherclaim.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aetherclaim.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-27T18:31:11Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aetherclaim.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--218bafa8-eea8-59df-b5c4-91a0a378ed94","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-29T11:25:31Z","modified":"2025-12-29T11:25:31Z","name":"Phishing domain: aethergames.top","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aethergames.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethergames.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-29T11:25:31Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aethergames.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e30a6ba-8aee-594c-9eb8-a8db1313b165","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-19T08:09:59Z","modified":"2025-10-19T08:09:59Z","name":"Phishing domain: aetherionexchange.biz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/aetherionexchange.biz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aetherionexchange.biz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-19T08:09:59Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aetherionexchange.biz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2fd64d2-fa38-5291-a3e1-48ae982fd2f4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-11T03:08:12Z","modified":"2026-04-11T03:08:12Z","name":"Phishing domain: aetherius-infinite-chain.gate-cryptolist.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aetherius-infinite-chain.gate-cryptolist.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aetherius-infinite-chain.gate-cryptolist.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-11T03:08:12Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aetherius-infinite-chain.gate-cryptolist.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6379b3b2-4822-557f-8366-c477739907fb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-31T13:53:21Z","modified":"2026-03-31T13:53:21Z","name":"Phishing domain: aetherixcore.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/aetherixcore.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aetherixcore.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-31T13:53:21Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aetherixcore.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--03ba2d5d-fae4-5ad1-b25b-6364bca36669","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-27T22:37:55Z","modified":"2026-04-27T22:37:55Z","name":"Phishing domain: aetherixnetwork.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aetherixnetwork.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aetherixnetwork.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-27T22:37:55Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aetherixnetwork.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3c0a49a-cc27-5d31-a299-86da280b96e0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-12T13:17:04Z","modified":"2026-07-12T13:17:04Z","name":"Phishing domain: aetherliquidity.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating generic. Report & evidence: https://phishdestroy.io/domain/aetherliquidity.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aetherliquidity.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-12T13:17:04Z","labels":["malicious-activity","phishing","brand:generic"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aetherliquidity.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b74950bf-8d65-5f28-a638-31be0bfda4c2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-16T14:25:14Z","modified":"2026-07-16T14:25:14Z","name":"Phishing domain: aetheropinion.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aetheropinion.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aetheropinion.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-16T14:25:14Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aetheropinion.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d76b6742-c8ce-548b-adc4-96cba767cf3b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-30T23:04:06Z","modified":"2026-07-30T23:04:06Z","name":"Phishing domain: aethersignalworks.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/aethersignalworks.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethersignalworks.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-30T23:04:06Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aethersignalworks.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c8fe177-7d9f-568f-8399-d91465c511df","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-16T23:45:24Z","modified":"2025-09-16T23:45:24Z","name":"Phishing domain: aetherswift.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/aetherswift.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aetherswift.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-16T23:45:24Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aetherswift.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4274d84f-e983-5987-87c4-186b16bdaf59","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-14T20:36:57Z","modified":"2026-02-14T20:36:57Z","name":"Phishing domain: aetherwealth.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aetherwealth.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aetherwealth.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-14T20:36:57Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aetherwealth.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a1c8453-5c5d-52ad-8bea-d34db922d96a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-03T11:13:47Z","modified":"2025-09-03T11:13:47Z","name":"Phishing domain: aethir-2-20mr.4everland.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aethir-2-20mr.4everland.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethir-2-20mr.4everland.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-03T11:13:47Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aethir-2-20mr.4everland.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--20ea45a6-13c6-5868-84a0-841388a8b8ef","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-12T07:00:49Z","modified":"2025-09-12T07:00:49Z","name":"Phishing domain: aethir-snapshot.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating metamask. Report & evidence: https://phishdestroy.io/domain/aethir-snapshot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethir-snapshot.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-12T07:00:49Z","labels":["malicious-activity","phishing","brand:metamask"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aethir-snapshot.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--547b231c-5958-5c35-ba49-c9c58023c920","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-29T10:12:25Z","modified":"2026-07-29T10:12:25Z","name":"Phishing domain: aethir-swap.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/aethir-swap.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethir-swap.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-29T10:12:25Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aethir-swap.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e145b365-6da1-52e6-8671-95bbf8a61db7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-24T18:07:08Z","modified":"2025-12-24T18:07:08Z","name":"Phishing domain: aethir.airdropalert.us","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/aethir.airdropalert.us","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethir.airdropalert.us']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-24T18:07:08Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aethir.airdropalert.us"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd01c74a-a5e4-5dfa-a446-61aa41f9329b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-17T18:23:27Z","modified":"2025-10-17T18:23:27Z","name":"Phishing domain: aethir.airdropalerts.icu","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/aethir.airdropalerts.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethir.airdropalerts.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-17T18:23:27Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aethir.airdropalerts.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7921c8b1-405b-5873-a947-5f52d630e009","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:42Z","modified":"2026-02-26T23:20:42Z","name":"Phishing domain: aethir.airdropalerts.life","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/aethir.airdropalerts.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethir.airdropalerts.life']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:42Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aethir.airdropalerts.life"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e23d7a62-ac11-5a08-87f6-b8d61301bdc0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-04T08:04:41Z","modified":"2025-12-04T08:04:41Z","name":"Phishing domain: aethir.airdropsalert.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/aethir.airdropsalert.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethir.airdropsalert.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-04T08:04:41Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aethir.airdropsalert.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--367b360a-d1ef-5fff-96b7-c28a25133819","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-22T14:56:07Z","modified":"2025-10-22T14:56:07Z","name":"Phishing domain: aethir.airdropsalert.biz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/aethir.airdropsalert.biz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethir.airdropsalert.biz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-22T14:56:07Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aethir.airdropsalert.biz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--efeb5dd1-e9cf-5d36-badb-df664894e6ba","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-18T16:18:43Z","modified":"2025-10-18T16:18:43Z","name":"Phishing domain: aethir.airdropsalert.icu","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/aethir.airdropsalert.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethir.airdropsalert.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-18T16:18:43Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aethir.airdropsalert.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d659fe6e-7348-5953-9fdc-2a72c279e0f4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-24T10:37:49Z","modified":"2025-12-24T10:37:49Z","name":"Phishing domain: aethir.airdropsalert.us","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/aethir.airdropsalert.us","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethir.airdropsalert.us']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-24T10:37:49Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aethir.airdropsalert.us"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6c06cf0-6ffd-5dfc-bda0-9936be391469","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-11T22:00:33Z","modified":"2025-11-11T22:00:33Z","name":"Phishing domain: aethir.airdropsalert.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/aethir.airdropsalert.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethir.airdropsalert.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-11T22:00:33Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aethir.airdropsalert.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dc62c1c-63d5-5c09-9450-2aaa07703f3b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:29Z","modified":"2026-02-26T23:22:29Z","name":"Phishing domain: aethir.airdrpalerts.lol","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/aethir.airdrpalerts.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethir.airdrpalerts.lol']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:29Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aethir.airdrpalerts.lol"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac865637-0533-5156-b97e-b069808d6f81","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-25T15:30:36Z","modified":"2025-10-25T15:30:36Z","name":"Phishing domain: aethir.airdrpalerts.sbs","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/aethir.airdrpalerts.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethir.airdrpalerts.sbs']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-25T15:30:36Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aethir.airdrpalerts.sbs"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--24574bae-b822-5578-96e6-52b9fac723cf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-28T10:52:34Z","modified":"2025-10-28T10:52:34Z","name":"Phishing domain: aethir.airdrpsalert.bond","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/aethir.airdrpsalert.bond","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethir.airdrpsalert.bond']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-28T10:52:34Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aethir.airdrpsalert.bond"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8f6cbfb-ee32-5f14-b320-62cc4181f8f1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-31T15:48:11Z","modified":"2025-10-31T15:48:11Z","name":"Phishing domain: aethir.airdrpsalerts.cfd","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/aethir.airdrpsalerts.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethir.airdrpsalerts.cfd']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-31T15:48:11Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aethir.airdrpsalerts.cfd"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee8b04b5-a036-5d90-8f76-d2f972addb1f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-14T15:47:26Z","modified":"2025-11-14T15:47:26Z","name":"Phishing domain: aethir.airdrpsalerts.lat","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/aethir.airdrpsalerts.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethir.airdrpsalerts.lat']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-14T15:47:26Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aethir.airdrpsalerts.lat"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4df2cb7d-c2ea-5e1a-9822-11a2137957eb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-17T14:15:40Z","modified":"2025-11-17T14:15:40Z","name":"Phishing domain: aethir.airdrpsalerts.sbs","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/aethir.airdrpsalerts.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethir.airdrpsalerts.sbs']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-17T14:15:40Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aethir.airdrpsalerts.sbs"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e427f5f-3130-5ab4-9c04-6dba99dce31a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-11T17:39:25Z","modified":"2025-11-11T17:39:25Z","name":"Phishing domain: aethir.airdrpsalerts.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/aethir.airdrpsalerts.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethir.airdrpsalerts.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-11T17:39:25Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aethir.airdrpsalerts.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4db3a93-7037-5564-b126-930321730764","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-13T16:36:02Z","modified":"2025-11-13T16:36:02Z","name":"Phishing domain: aethir.airsdropsalert.cfd","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating gmail. Report & evidence: https://phishdestroy.io/domain/aethir.airsdropsalert.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethir.airsdropsalert.cfd']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-13T16:36:02Z","labels":["malicious-activity","phishing","brand:gmail"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aethir.airsdropsalert.cfd"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--498aaa37-c12d-5a6a-ae0d-fb015d026c5a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-07T16:31:17Z","modified":"2025-11-07T16:31:17Z","name":"Phishing domain: aethir.airsdropsalert.lol","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/aethir.airsdropsalert.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethir.airsdropsalert.lol']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-07T16:31:17Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aethir.airsdropsalert.lol"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c71c9849-5b92-586c-b747-8fdb1901f007","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-11T17:38:56Z","modified":"2025-11-11T17:38:56Z","name":"Phishing domain: aethir.airsdropsalerts.lol","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/aethir.airsdropsalerts.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethir.airsdropsalerts.lol']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-11T17:38:56Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aethir.airsdropsalerts.lol"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--41415c40-5021-5582-8308-50b2fad8c360","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-12T19:15:17Z","modified":"2026-03-12T19:15:17Z","name":"Phishing domain: aethir.allocationchecker.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating [\"metamask\"]. Report & evidence: https://phishdestroy.io/domain/aethir.allocationchecker.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethir.allocationchecker.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-12T19:15:17Z","labels":["malicious-activity","phishing","brand:[\"metamask\"]"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aethir.allocationchecker.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad0e5e44-d4ba-53d8-ac79-2f97a1266a99","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-16T14:35:06Z","modified":"2025-11-16T14:35:06Z","name":"Phishing domain: aethir.app-airdropalert.lat","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/aethir.app-airdropalert.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethir.app-airdropalert.lat']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-16T14:35:06Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aethir.app-airdropalert.lat"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e0eb01d-7a9d-590a-8d69-8bf5a088ca60","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: aethir.app-beefy.sbs","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aethir.app-beefy.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethir.app-beefy.sbs']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aethir.app-beefy.sbs"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecfe9f04-817e-5969-88e2-6ecf2f8c70ff","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-27T17:16:04Z","modified":"2025-11-27T17:16:04Z","name":"Phishing domain: aethir.beefy-hub.lol","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/aethir.beefy-hub.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethir.beefy-hub.lol']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-27T17:16:04Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aethir.beefy-hub.lol"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--45b1e570-2460-5a4f-9d79-6edc28a7955e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-27T17:02:02Z","modified":"2025-11-27T17:02:02Z","name":"Phishing domain: aethir.beefy-hub.sbs","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/aethir.beefy-hub.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethir.beefy-hub.sbs']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-27T17:02:02Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aethir.beefy-hub.sbs"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--281663a9-e7fb-5389-ab00-fef72c453173","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-18T17:52:41Z","modified":"2025-10-18T17:52:41Z","name":"Phishing domain: aethir.beefy.bar","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/aethir.beefy.bar","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethir.beefy.bar']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-18T17:52:41Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aethir.beefy.bar"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a712885-a46d-5f47-a002-06d126d4f854","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-15T06:11:51Z","modified":"2025-10-15T06:11:51Z","name":"Phishing domain: aethir.beefyapp.lol","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating gemini. Report & evidence: https://phishdestroy.io/domain/aethir.beefyapp.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethir.beefyapp.lol']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-15T06:11:51Z","labels":["malicious-activity","phishing","brand:gemini"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aethir.beefyapp.lol"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--350b5777-a5da-57f4-b416-85aea7307b4f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-11T21:57:33Z","modified":"2025-11-11T21:57:33Z","name":"Phishing domain: aethir.beefyapps.lol","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Facebook. Report & evidence: https://phishdestroy.io/domain/aethir.beefyapps.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethir.beefyapps.lol']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-11T21:57:33Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aethir.beefyapps.lol"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8178726-80ab-524f-be3d-141c6e438784","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-01T14:55:19Z","modified":"2025-11-01T14:55:19Z","name":"Phishing domain: aethir.beefyhubs.cfd","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/aethir.beefyhubs.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethir.beefyhubs.cfd']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-01T14:55:19Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aethir.beefyhubs.cfd"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9565928c-8a77-5789-b4c9-3167809104fc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-31T15:48:16Z","modified":"2025-10-31T15:48:16Z","name":"Phishing domain: aethir.beefyhubs.lol","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/aethir.beefyhubs.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethir.beefyhubs.lol']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-31T15:48:16Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aethir.beefyhubs.lol"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2701affe-c40e-513f-aed3-3bda1805db87","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-14T15:43:44Z","modified":"2025-11-14T15:43:44Z","name":"Phishing domain: aethir.beefyhubs.monster","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/aethir.beefyhubs.monster","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethir.beefyhubs.monster']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-14T15:43:44Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aethir.beefyhubs.monster"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9132a7c9-cce5-55c0-9140-df8a50a8e24c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-01T14:55:25Z","modified":"2025-11-01T14:55:25Z","name":"Phishing domain: aethir.beefyhubs.sbs","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Facebook. Report & evidence: https://phishdestroy.io/domain/aethir.beefyhubs.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethir.beefyhubs.sbs']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-01T14:55:25Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aethir.beefyhubs.sbs"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e177adf6-9795-5dfb-867c-70abf204c0bc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-16T07:52:20Z","modified":"2025-09-16T07:52:20Z","name":"Phishing domain: aethir.click","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aethir.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethir.click']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-16T07:52:20Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aethir.click"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c11107e-51b5-521d-b51f-8ead48e3d145","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-12T17:41:21Z","modified":"2025-11-12T17:41:21Z","name":"Phishing domain: aethir.hub-airdropalert.click","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/aethir.hub-airdropalert.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethir.hub-airdropalert.click']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-12T17:41:21Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aethir.hub-airdropalert.click"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--341657fd-a373-5c90-a168-c753a52b1c98","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-26T23:31:12Z","modified":"2025-10-26T23:31:12Z","name":"Phishing domain: aethir.portal-hubs.cfd","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/aethir.portal-hubs.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethir.portal-hubs.cfd']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-26T23:31:12Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aethir.portal-hubs.cfd"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c0f4b5e-f593-5fe8-8923-8ff72281ef71","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-11T22:00:10Z","modified":"2025-11-11T22:00:10Z","name":"Phishing domain: aethir.portal-hubs.lat","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/aethir.portal-hubs.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethir.portal-hubs.lat']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-11T22:00:10Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aethir.portal-hubs.lat"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a09a0ae-52ff-5662-95f2-5f5839871aa6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-16T07:23:06Z","modified":"2025-12-16T07:23:06Z","name":"Phishing domain: aethirblogs.blogspot.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Facebook. Report & evidence: https://phishdestroy.io/domain/aethirblogs.blogspot.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethirblogs.blogspot.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-16T07:23:06Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aethirblogs.blogspot.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c2a7b24-6d41-5d2b-a787-5dab786af2a6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-09T18:56:33Z","modified":"2025-12-09T18:56:33Z","name":"Phishing domain: aethircheck.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating solana. Report & evidence: https://phishdestroy.io/domain/aethircheck.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethircheck.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-09T18:56:33Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aethircheck.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b616f34a-4334-5425-ab40-7a3bca1f3196","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-20T06:38:29Z","modified":"2025-12-20T06:38:29Z","name":"Phishing domain: aethircheck.live","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aethircheck.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethircheck.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-20T06:38:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aethircheck.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--36e791dd-5256-5e5a-9cbc-0cca562c52bc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-16T13:36:59Z","modified":"2025-12-16T13:36:59Z","name":"Phishing domain: aethircheck.lol","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aethircheck.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethircheck.lol']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-16T13:36:59Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aethircheck.lol"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b1331ea-a186-526e-8fe5-a0eae1775f20","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-07-10T07:36:54Z","modified":"2025-07-10T07:36:54Z","name":"Phishing domain: aethirclaim.online","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/aethirclaim.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethirclaim.online']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-07-10T07:36:54Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aethirclaim.online"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b83a20b-0146-591f-ada8-7aefb5a6880c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-10T18:27:44Z","modified":"2025-10-10T18:27:44Z","name":"Phishing domain: aethircloud-proposal.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating discord. Report & evidence: https://phishdestroy.io/domain/aethircloud-proposal.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethircloud-proposal.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-10T18:27:44Z","labels":["malicious-activity","phishing","brand:discord"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aethircloud-proposal.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b801c5f1-4f86-51ca-8ce3-7095c0b165e1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-09T15:40:24Z","modified":"2025-10-09T15:40:24Z","name":"Phishing domain: aethircloud-votes.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Axie. Report & evidence: https://phishdestroy.io/domain/aethircloud-votes.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethircloud-votes.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-09T15:40:24Z","labels":["malicious-activity","phishing","brand:axie"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aethircloud-votes.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba2a6699-ca85-5931-a430-7d1cea2c39bf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-09T15:29:48Z","modified":"2025-10-09T15:29:48Z","name":"Phishing domain: aethircloud-votings.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Axie. Report & evidence: https://phishdestroy.io/domain/aethircloud-votings.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethircloud-votings.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-09T15:29:48Z","labels":["malicious-activity","phishing","brand:axie"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aethircloud-votings.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--39a4aa97-ef1d-5812-9440-cc45edc93eb8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-12T07:00:08Z","modified":"2025-09-12T07:00:08Z","name":"Phishing domain: aethircloudrectify.pro","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aethircloudrectify.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethircloudrectify.pro']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-12T07:00:08Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aethircloudrectify.pro"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a142093-07e6-5891-b592-c4f40ae66585","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-28T10:29:07Z","modified":"2025-10-28T10:29:07Z","name":"Phishing domain: aethirclouds-proposal.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/aethirclouds-proposal.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethirclouds-proposal.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-28T10:29:07Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aethirclouds-proposal.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d780d980-ac89-5532-ac23-8366c457b908","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-10T01:38:37Z","modified":"2025-08-10T01:38:37Z","name":"Phishing domain: aethiredge.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating celer. Report & evidence: https://phishdestroy.io/domain/aethiredge.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethiredge.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-10T01:38:37Z","labels":["malicious-activity","phishing","brand:celer"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aethiredge.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--10363c2c-2616-5c8c-bf21-24e36580223e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:38Z","modified":"2026-02-26T23:23:38Z","name":"Phishing domain: aethirreward.live","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aethirreward.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethirreward.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:38Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aethirreward.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--682cc48e-5813-56f3-870e-1922cba875b1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-12T07:00:38Z","modified":"2025-09-12T07:00:38Z","name":"Phishing domain: aethirrewards.live","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating discord. Report & evidence: https://phishdestroy.io/domain/aethirrewards.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethirrewards.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-12T07:00:38Z","labels":["malicious-activity","phishing","brand:discord"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aethirrewards.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--17f40ed9-dc30-5d8d-9c57-e84fb8c5eeaa","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-29T09:53:03Z","modified":"2025-11-29T09:53:03Z","name":"Phishing domain: aethirs-bonus.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating discord. Report & evidence: https://phishdestroy.io/domain/aethirs-bonus.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethirs-bonus.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-29T09:53:03Z","labels":["malicious-activity","phishing","brand:discord"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aethirs-bonus.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf8df365-1841-57be-8ecf-3007e6d989b3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-18T22:26:10Z","modified":"2026-05-18T22:26:10Z","name":"Phishing domain: aethnode.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aethnode.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethnode.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-18T22:26:10Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aethnode.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--75001677-26eb-5395-964c-9c75324fb094","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-17T21:06:45Z","modified":"2025-12-17T21:06:45Z","name":"Phishing domain: aethonswap.exchange","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating monad. Report & evidence: https://phishdestroy.io/domain/aethonswap.exchange","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethonswap.exchange']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-17T21:06:45Z","labels":["malicious-activity","phishing","brand:monad"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aethonswap.exchange"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--df35107a-edf8-5890-b58f-b72ef2dd8968","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-11T03:08:12Z","modified":"2026-04-11T03:08:12Z","name":"Phishing domain: aethra-ai.entry-cryptolist.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aethra-ai.entry-cryptolist.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethra-ai.entry-cryptolist.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-11T03:08:12Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aethra-ai.entry-cryptolist.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--23ed3753-cbc7-525f-9c07-8f073cd5fd3f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:55Z","modified":"2026-02-26T23:23:55Z","name":"Phishing domain: aethrian.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/aethrian.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aethrian.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:55Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aethrian.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--256ccefe-35b8-5b12-84de-cd1038894842","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:13Z","modified":"2026-02-26T23:24:13Z","name":"Phishing domain: aeva.co.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aeva.co.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aeva.co.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:13Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aeva.co.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f212b46-4b26-5f35-99c9-0ec331510cfd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:08Z","modified":"2026-02-26T23:21:08Z","name":"Phishing domain: aevc.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aave. Report & evidence: https://phishdestroy.io/domain/aevc.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aevc.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:08Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aevc.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--66d14298-fe73-53a6-b072-c80fbf569cda","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:29Z","modified":"2026-02-26T23:23:29Z","name":"Phishing domain: aeve.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aave. Report & evidence: https://phishdestroy.io/domain/aeve.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aeve.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:29Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aeve.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca63b5cc-f747-5a41-988d-5590339398d9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-25T14:10:17Z","modified":"2025-11-25T14:10:17Z","name":"Phishing domain: aeve.one","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aeve.one","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aeve.one']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-25T14:10:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aeve.one"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5de3ddc-617a-5688-9023-b9f025170bd2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-25T16:30:05Z","modified":"2026-03-25T16:30:05Z","name":"Phishing domain: aevilop.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/aevilop.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aevilop.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-25T16:30:05Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aevilop.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e72f691c-4bae-5e80-ad71-33b89e531214","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-19T06:12:51Z","modified":"2025-09-19T06:12:51Z","name":"Phishing domain: aevitasbk.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aevitasbk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aevitasbk.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-19T06:12:51Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aevitasbk.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--20d42edc-2b37-5c16-866b-4edc75c29a5c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-07-10T15:18:22Z","modified":"2025-07-10T15:18:22Z","name":"Phishing domain: aevo-sushi.cfd","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating SushiSwap. Report & evidence: https://phishdestroy.io/domain/aevo-sushi.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aevo-sushi.cfd']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-07-10T15:18:22Z","labels":["malicious-activity","phishing","brand:sushiswap"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aevo-sushi.cfd"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc7a441a-7718-5c64-8801-f59fc083ee98","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-22T16:05:51Z","modified":"2026-04-22T16:05:51Z","name":"Phishing domain: aevo.one","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aevo.one","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aevo.one']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-22T16:05:51Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aevo.one"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--71de31d5-4214-5a69-8b88-2605567d11aa","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-24T11:15:11Z","modified":"2025-09-24T11:15:11Z","name":"Phishing domain: aevo.sushistakes.biz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating SushiSwap. Report & evidence: https://phishdestroy.io/domain/aevo.sushistakes.biz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aevo.sushistakes.biz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-24T11:15:11Z","labels":["malicious-activity","phishing","brand:sushiswap"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aevo.sushistakes.biz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e0a31d9-52f8-5494-b3f5-f103378587f8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-24T11:13:58Z","modified":"2025-09-24T11:13:58Z","name":"Phishing domain: aevo.sushistakes.info","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating SushiSwap. Report & evidence: https://phishdestroy.io/domain/aevo.sushistakes.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aevo.sushistakes.info']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-24T11:13:58Z","labels":["malicious-activity","phishing","brand:sushiswap"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aevo.sushistakes.info"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1b402f0-1edf-583b-8b62-d03b996e025c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-24T11:11:53Z","modified":"2025-09-24T11:11:53Z","name":"Phishing domain: aevo.sushistakes.us","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating SushiSwap. Report & evidence: https://phishdestroy.io/domain/aevo.sushistakes.us","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aevo.sushistakes.us']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-24T11:11:53Z","labels":["malicious-activity","phishing","brand:sushiswap"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aevo.sushistakes.us"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa2eb46e-76ce-5765-b1d6-7813881b01cc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-17T03:00:59Z","modified":"2025-09-17T03:00:59Z","name":"Phishing domain: aevo.sushiswap.it.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating SushiSwap. Report & evidence: https://phishdestroy.io/domain/aevo.sushiswap.it.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aevo.sushiswap.it.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-17T03:00:59Z","labels":["malicious-activity","phishing","brand:sushiswap"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aevo.sushiswap.it.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6edbe3ec-81db-59c7-a6bf-c344ba055b2d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-16T22:01:38Z","modified":"2026-07-16T22:01:38Z","name":"Phishing domain: aevo.team","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aevo.team","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aevo.team']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-16T22:01:38Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aevo.team"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--595770aa-a100-594d-a748-a02b4dd13f6e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2024-03-20T05:09:50Z","modified":"2024-03-20T05:09:50Z","name":"Phishing domain: aevodrop.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating binance. Report & evidence: https://phishdestroy.io/domain/aevodrop.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aevodrop.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2024-03-20T05:09:50Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aevodrop.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff16223e-2c72-504d-80f9-1437c7a3fd30","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-25T18:51:10Z","modified":"2026-06-25T18:51:10Z","name":"Phishing domain: aevoexchang.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aevoexchang.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aevoexchang.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-25T18:51:10Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aevoexchang.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a94ba79-bacf-5b30-873f-69168964e714","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-28T20:19:40Z","modified":"2026-07-28T20:19:40Z","name":"Phishing domain: aevofx.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating MetaMask. Report & evidence: https://phishdestroy.io/domain/aevofx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aevofx.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-28T20:19:40Z","labels":["malicious-activity","phishing","brand:metamask"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aevofx.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d88748d4-f290-55fb-b891-dd35090901d0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T06:41:08Z","modified":"2026-06-15T06:41:08Z","name":"Phishing domain: aevonft.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aevonft.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aevonft.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T06:41:08Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aevonft.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--618e17db-b1ed-5d69-9d3f-bfbcfed18807","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-12T19:52:39Z","modified":"2026-03-12T19:52:39Z","name":"Phishing domain: aevos.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/aevos.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aevos.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-12T19:52:39Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aevos.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--49be5de4-c323-5eb3-9ea2-5545bd666dfc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T06:49:05Z","modified":"2026-06-15T06:49:05Z","name":"Phishing domain: aevosushi.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating SushiSwap. Report & evidence: https://phishdestroy.io/domain/aevosushi.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aevosushi.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T06:49:05Z","labels":["malicious-activity","phishing","brand:sushiswap"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aevosushi.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d539136-5cd4-5bd8-b139-bc05a43d30f7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-21T01:18:19Z","modified":"2026-04-21T01:18:19Z","name":"Phishing domain: aevotech.ng","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aevotech.ng","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aevotech.ng']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-21T01:18:19Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aevotech.ng"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a9d1c91-2a7b-5f9c-b4e5-f6923543ccc6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-01T06:18:03Z","modified":"2026-07-01T06:18:03Z","name":"Phishing domain: aevotoken.live","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating OKX. Report & evidence: https://phishdestroy.io/domain/aevotoken.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aevotoken.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-01T06:18:03Z","labels":["malicious-activity","phishing","brand:okx"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aevotoken.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--df94b2b5-f698-5528-859c-491000b6b9c0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2024-06-09T06:10:15Z","modified":"2024-06-09T06:10:15Z","name":"Phishing domain: aevoxyz.live","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aevoxyz.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aevoxyz.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2024-06-09T06:10:15Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aevoxyz.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5955445-77a5-5c9d-9bb3-b896181608e6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-06T21:24:11Z","modified":"2026-05-06T21:24:11Z","name":"Phishing domain: aevoxyz.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/aevoxyz.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aevoxyz.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-06T21:24:11Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aevoxyz.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--289746c0-84c9-5693-a204-c7e097eca69d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-06T03:36:52Z","modified":"2025-09-06T03:36:52Z","name":"Phishing domain: aevve.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating celer. Report & evidence: https://phishdestroy.io/domain/aevve.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aevve.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-06T03:36:52Z","labels":["malicious-activity","phishing","brand:celer"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aevve.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bda8c03-8083-5757-9435-2707705177c9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T17:44:40Z","modified":"2026-02-26T17:44:40Z","name":"Phishing domain: aewestestresolve.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/aewestestresolve.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aewestestresolve.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T17:44:40Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aewestestresolve.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8b6dc9f-c90a-506e-90e1-97a0141a3aa9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:41Z","modified":"2026-02-26T23:24:41Z","name":"Phishing domain: aey36734hed7yeh378we8y72heudh373eh37hge673vsharedocument.clisus.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Microsoft. Report & evidence: https://phishdestroy.io/domain/aey36734hed7yeh378we8y72heudh373eh37hge673vsharedocument.clisus.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aey36734hed7yeh378we8y72heudh373eh37hge673vsharedocument.clisus.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:41Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aey36734hed7yeh378we8y72heudh373eh37hge673vsharedocument.clisus.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c11dfb5-1267-577f-a39a-a0957c738ccd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-04T02:38:55Z","modified":"2025-11-04T02:38:55Z","name":"Phishing domain: aeyakovenko.fun","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating revolut. Report & evidence: https://phishdestroy.io/domain/aeyakovenko.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aeyakovenko.fun']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-04T02:38:55Z","labels":["malicious-activity","phishing","brand:revolut"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aeyakovenko.fun"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--07c6781f-480a-521a-af55-50f1a73b54a2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-24T01:07:09Z","modified":"2026-03-24T01:07:09Z","name":"Phishing domain: aez.exalot.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aez.exalot.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aez.exalot.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-24T01:07:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aez.exalot.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f5f0481-3862-599e-8435-0515cfd3bc4e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-21T12:51:56Z","modified":"2026-04-21T12:51:56Z","name":"Phishing domain: aezabet.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/aezabet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aezabet.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-21T12:51:56Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aezabet.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6e8dbce-97a5-5876-b03e-0d446e70c322","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-31T19:23:34Z","modified":"2026-01-31T19:23:34Z","name":"Phishing domain: af-drop.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/af-drop.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'af-drop.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-31T19:23:34Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/af-drop.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9e5509a-6e5e-5ba6-90f0-12b1b8548487","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T05:57:04Z","modified":"2026-02-13T05:57:04Z","name":"Phishing domain: afa.cash","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ethereum. Report & evidence: https://phishdestroy.io/domain/afa.cash","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afa.cash']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T05:57:04Z","labels":["malicious-activity","phishing","brand:ethereum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/afa.cash"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5d62211-008f-5fe3-bfe5-0bb964f661a0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-11T18:29:46Z","modified":"2026-06-11T18:29:46Z","name":"Phishing domain: afafshopeepay.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating ShopeePay. Report & evidence: https://phishdestroy.io/domain/afafshopeepay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afafshopeepay.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-11T18:29:46Z","labels":["malicious-activity","phishing","brand:shopeepay"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/afafshopeepay.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7000dca-0c7c-5da7-ada8-91320cdcd2c8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T06:44:29Z","modified":"2026-06-15T06:44:29Z","name":"Phishing domain: afaktv.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/afaktv.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afaktv.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T06:44:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/afaktv.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcb36476-4124-53e9-a866-3c5ba6366e9a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-29T00:24:26Z","modified":"2026-06-29T00:24:26Z","name":"Phishing domain: afancas.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating cryptoscam. Report & evidence: https://phishdestroy.io/domain/afancas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afancas.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-29T00:24:26Z","labels":["malicious-activity","phishing","brand:cryptoscam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/afancas.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b775d710-f0bd-5750-ba19-1aa3ed0eab6e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-24T23:33:16Z","modified":"2026-02-24T23:33:16Z","name":"Phishing domain: afbc25.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating google. Report & evidence: https://phishdestroy.io/domain/afbc25.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afbc25.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-24T23:33:16Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/afbc25.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ecff3f8-b532-5365-8785-a95b864fda40","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:01Z","modified":"2026-02-26T23:20:01Z","name":"Phishing domain: afdeliver.com.afrigoldexchange.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating amazon. Report & evidence: https://phishdestroy.io/domain/afdeliver.com.afrigoldexchange.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afdeliver.com.afrigoldexchange.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:01Z","labels":["malicious-activity","phishing","brand:amazon"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/afdeliver.com.afrigoldexchange.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--378dbc8e-01e7-574e-b0ee-09f22c776703","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:50:41Z","modified":"2026-07-27T04:50:41Z","name":"Phishing domain: afdsmartcontractexchange.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Investment Scam. Report & evidence: https://phishdestroy.io/domain/afdsmartcontractexchange.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afdsmartcontractexchange.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:50:41Z","labels":["malicious-activity","phishing","brand:investment scam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/afdsmartcontractexchange.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--86176d67-62ff-53d8-a587-b2c43d56e97b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-12T14:28:47Z","modified":"2026-07-12T14:28:47Z","name":"Phishing domain: afeefa-azra.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating amazon. Report & evidence: https://phishdestroy.io/domain/afeefa-azra.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afeefa-azra.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-12T14:28:47Z","labels":["malicious-activity","phishing","brand:amazon"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/afeefa-azra.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--28455479-625f-51bf-884e-b2ecb37735ed","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-15T03:21:50Z","modified":"2026-04-15T03:21:50Z","name":"Phishing domain: afefea.plays-to-apps-games.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/afefea.plays-to-apps-games.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afefea.plays-to-apps-games.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-15T03:21:50Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/afefea.plays-to-apps-games.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ddce221-f6ce-5005-999f-78b6afc43ed2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:16Z","modified":"2026-02-26T23:23:16Z","name":"Phishing domain: afequityvalt.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/afequityvalt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afequityvalt.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:16Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/afequityvalt.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e328afe-0196-53b8-b835-2837c97e0e94","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-24T19:00:11Z","modified":"2026-02-24T19:00:11Z","name":"Phishing domain: afeus.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/afeus.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afeus.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-24T19:00:11Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/afeus.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2946bade-f4e2-58b0-9914-c17a0813eb8e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-25T23:28:19Z","modified":"2025-12-25T23:28:19Z","name":"Phishing domain: afeverify.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating discord. Report & evidence: https://phishdestroy.io/domain/afeverify.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afeverify.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-25T23:28:19Z","labels":["malicious-activity","phishing","brand:discord"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/afeverify.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eabf76d5-87bb-5c0b-9642-630b6f638d71","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-07-24T13:24:35Z","modified":"2025-07-24T13:24:35Z","name":"Phishing domain: afexi.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/afexi.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afexi.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-07-24T13:24:35Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/afexi.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--18b8d925-9e07-5b65-92fa-e8df311a5ef9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-26T10:44:04Z","modified":"2026-01-26T10:44:04Z","name":"Phishing domain: aff.call-hunter.ru","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aff.call-hunter.ru","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aff.call-hunter.ru']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-26T10:44:04Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aff.call-hunter.ru"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--04ca8dff-03eb-56f3-8a15-25a8e018bb9f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-02T15:57:23Z","modified":"2026-02-02T15:57:23Z","name":"Phishing domain: affable-arrow-439402.framer.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating orange. Report & evidence: https://phishdestroy.io/domain/affable-arrow-439402.framer.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affable-arrow-439402.framer.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-02T15:57:23Z","labels":["malicious-activity","phishing","brand:orange"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/affable-arrow-439402.framer.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1599c9d0-bd41-5558-b7be-9524c8e76927","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-29T09:49:28Z","modified":"2025-11-29T09:49:28Z","name":"Phishing domain: affectionate-symptoms-648833.framer.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/affectionate-symptoms-648833.framer.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affectionate-symptoms-648833.framer.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-29T09:49:28Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/affectionate-symptoms-648833.framer.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f08e6362-7151-51e5-a4aa-a978a2f1fb97","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T03:33:23Z","modified":"2026-08-10T03:33:23Z","name":"Phishing domain: affiduciary.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/affiduciary.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affiduciary.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T03:33:23Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/affiduciary.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cb92d34-1b86-598a-8b9c-0706539474c6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-08T15:12:26Z","modified":"2026-08-08T15:12:26Z","name":"Phishing domain: affifamarwat-ship-it.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating facebook. Report & evidence: https://phishdestroy.io/domain/affifamarwat-ship-it.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affifamarwat-ship-it.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-08T15:12:26Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/affifamarwat-ship-it.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--49a9b8af-aaaf-5aa0-b9f1-1be54e06f92f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-08T16:09:16Z","modified":"2025-08-08T16:09:16Z","name":"Phishing domain: affiliate-elitepro.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/affiliate-elitepro.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affiliate-elitepro.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-08T16:09:16Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/affiliate-elitepro.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f14d16c-fc11-5bad-9471-e39cdddd912a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-11T18:33:29Z","modified":"2026-08-11T18:33:29Z","name":"Phishing domain: affiliate-polymarket.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/affiliate-polymarket.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affiliate-polymarket.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-11T18:33:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/affiliate-polymarket.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--db53528e-0307-537c-a0d4-e4b224abda4f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:31Z","modified":"2026-02-26T23:21:31Z","name":"Phishing domain: affiliatedigitalletterwritingprogram.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating binance. Report & evidence: https://phishdestroy.io/domain/affiliatedigitalletterwritingprogram.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affiliatedigitalletterwritingprogram.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:31Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/affiliatedigitalletterwritingprogram.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--08b254c2-3d03-5b0a-87bb-f5f43385b008","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-19T22:39:19Z","modified":"2026-03-19T22:39:19Z","name":"Phishing domain: affiliatedigitalletterwritingprograms-topearningsidehustle.live","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating binance. Report & evidence: https://phishdestroy.io/domain/affiliatedigitalletterwritingprograms-topearningsidehustle.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affiliatedigitalletterwritingprograms-topearningsidehustle.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-19T22:39:19Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/affiliatedigitalletterwritingprograms-topearningsidehustle.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c4b242d-0546-5038-9f7b-1ddfc3db5786","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-24T13:28:10Z","modified":"2026-03-24T13:28:10Z","name":"Phishing domain: affiliatedigitalletterwritingprograms-topearningsidehustles.live","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericscam. Report & evidence: https://phishdestroy.io/domain/affiliatedigitalletterwritingprograms-topearningsidehustles.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affiliatedigitalletterwritingprograms-topearningsidehustles.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-24T13:28:10Z","labels":["malicious-activity","phishing","brand:genericscam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/affiliatedigitalletterwritingprograms-topearningsidehustles.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--95d180f4-742b-5878-b469-b8d70d5db7ea","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:58:57Z","modified":"2026-07-27T04:58:57Z","name":"Phishing domain: affiliatedsmartscashltd.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating generic. Report & evidence: https://phishdestroy.io/domain/affiliatedsmartscashltd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affiliatedsmartscashltd.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:58:57Z","labels":["malicious-activity","phishing","brand:generic"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/affiliatedsmartscashltd.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8d0b647-f281-53e8-a7ef-de4641413afb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-07T17:33:04Z","modified":"2025-08-07T17:33:04Z","name":"Phishing domain: affiliateelite.pro","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Binance. Report & evidence: https://phishdestroy.io/domain/affiliateelite.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affiliateelite.pro']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-07T17:33:04Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/affiliateelite.pro"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa8d67d4-19cf-5924-ab2a-e6e9a7537048","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-10T14:25:57Z","modified":"2026-04-10T14:25:57Z","name":"Phishing domain: affiliateelitepro.top","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/affiliateelitepro.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affiliateelitepro.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-10T14:25:57Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/affiliateelitepro.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d7af97d-e00c-55d0-9efe-efb2185f175e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-08T04:21:11Z","modified":"2025-08-08T04:21:11Z","name":"Phishing domain: affiliatemarketinglitepro.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating base. Report & evidence: https://phishdestroy.io/domain/affiliatemarketinglitepro.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affiliatemarketinglitepro.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-08T04:21:11Z","labels":["malicious-activity","phishing","brand:base"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/affiliatemarketinglitepro.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c76cc664-ba9b-5b52-99d3-7749a18b2898","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-24T22:40:25Z","modified":"2026-01-24T22:40:25Z","name":"Phishing domain: affiliatepokernetwork.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/affiliatepokernetwork.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affiliatepokernetwork.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-24T22:40:25Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/affiliatepokernetwork.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8c864a8-e539-5a90-a750-62dbe2c8aca6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-12T21:22:21Z","modified":"2026-06-12T21:22:21Z","name":"Phishing domain: affiliates.bokingcodubai.webflow.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/affiliates.bokingcodubai.webflow.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affiliates.bokingcodubai.webflow.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-12T21:22:21Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/affiliates.bokingcodubai.webflow.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--20fe39ea-5271-5493-b7fb-144969318df7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-12T21:22:25Z","modified":"2026-06-12T21:22:25Z","name":"Phishing domain: affiliates.bookingsccomdubaidesertsafari.webflow.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/affiliates.bookingsccomdubaidesertsafari.webflow.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affiliates.bookingsccomdubaidesertsafari.webflow.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-12T21:22:25Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/affiliates.bookingsccomdubaidesertsafari.webflow.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca45e57c-8b57-59e8-bbd2-f8672477dcc3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-05T12:29:35Z","modified":"2026-01-05T12:29:35Z","name":"Phishing domain: affiliates.flirt4free.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/affiliates.flirt4free.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affiliates.flirt4free.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-05T12:29:35Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/affiliates.flirt4free.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--12878c3e-9c64-5a6d-b9a9-ec4999428cd0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-27T19:35:26Z","modified":"2026-03-27T19:35:26Z","name":"Phishing domain: affilio-osa.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating [\"telegram\"]. Report & evidence: https://phishdestroy.io/domain/affilio-osa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affilio-osa.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-27T19:35:26Z","labels":["malicious-activity","phishing","brand:[\"telegram\"]"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/affilio-osa.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ecdde6d-46e2-5be6-9372-0026b39e08bb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-30T12:43:10Z","modified":"2026-03-30T12:43:10Z","name":"Phishing domain: affilixnetwork.site","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/affilixnetwork.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affilixnetwork.site']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-30T12:43:10Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/affilixnetwork.site"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--94885c77-b5da-5baf-b895-8063208e2e41","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:52:18Z","modified":"2026-07-27T04:52:18Z","name":"Phishing domain: affinity-capitals.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/affinity-capitals.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affinity-capitals.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:52:18Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/affinity-capitals.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--540eb830-40fa-574b-a00f-98723ed69cad","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-03T11:28:58Z","modified":"2025-09-03T11:28:58Z","name":"Phishing domain: affinityprimetrade.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/affinityprimetrade.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affinityprimetrade.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-03T11:28:58Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/affinityprimetrade.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0589cd9f-7736-5315-a2c5-95fc34572764","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-01T03:56:49Z","modified":"2026-07-01T03:56:49Z","name":"Phishing domain: affinityteam.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/affinityteam.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affinityteam.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-01T03:56:49Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/affinityteam.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb218c7e-24c7-59aa-a72c-c66566bb04ab","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:56:24Z","modified":"2026-07-27T04:56:24Z","name":"Phishing domain: affinitytrades.online","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/affinitytrades.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affinitytrades.online']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:56:24Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/affinitytrades.online"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--be83aad5-8be3-5233-863a-c91f61745a19","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: affiwo.cyou","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/affiwo.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affiwo.cyou']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/affiwo.cyou"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--19d5ac48-c5dd-54db-a3d4-c23d3c454427","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-07T17:08:12Z","modified":"2025-08-07T17:08:12Z","name":"Phishing domain: affixati.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/affixati.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affixati.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-07T17:08:12Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/affixati.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5fcc354-e0c3-5507-a8fc-03040e7315ed","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-07T19:02:11Z","modified":"2025-09-07T19:02:11Z","name":"Phishing domain: affixcargotransit.live","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/affixcargotransit.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affixcargotransit.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-07T19:02:11Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/affixcargotransit.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d5a1ffe-a4f3-595c-a0ea-1aaeac9a1c30","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:03Z","modified":"2026-02-26T23:24:03Z","name":"Phishing domain: affixpro.live","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/affixpro.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affixpro.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:03Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/affixpro.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b006cc0-d28c-5c5f-b63b-46093b034862","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-07-17T06:56:48Z","modified":"2025-07-17T06:56:48Z","name":"Phishing domain: affixrevsexplore.run","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/affixrevsexplore.run","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affixrevsexplore.run']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-07-17T06:56:48Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/affixrevsexplore.run"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--009b4935-acc4-5833-82dd-14e481b9a97b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-07T05:37:54Z","modified":"2026-02-07T05:37:54Z","name":"Phishing domain: affluenceaura.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating [\"revolut\"]. Report & evidence: https://phishdestroy.io/domain/affluenceaura.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affluenceaura.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-07T05:37:54Z","labels":["malicious-activity","phishing","brand:[\"revolut\"]"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/affluenceaura.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--344870fe-8520-5d58-8699-19da96ef521b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:52:16Z","modified":"2026-07-27T04:52:16Z","name":"Phishing domain: affluenceinvest.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating generic. Report & evidence: https://phishdestroy.io/domain/affluenceinvest.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affluenceinvest.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:52:16Z","labels":["malicious-activity","phishing","brand:generic"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/affluenceinvest.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--50b48748-85df-5836-bef4-2918e14ce6e4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T05:00:07Z","modified":"2026-07-27T05:00:07Z","name":"Phishing domain: affluenceprohub247.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/affluenceprohub247.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affluenceprohub247.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T05:00:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/affluenceprohub247.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8fb6702-814b-5d1c-86af-d7de6de60998","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-23T14:08:59Z","modified":"2026-03-23T14:08:59Z","name":"Phishing domain: affluentprimemasterlimited.sbs","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating investmentscam. Report & evidence: https://phishdestroy.io/domain/affluentprimemasterlimited.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affluentprimemasterlimited.sbs']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-23T14:08:59Z","labels":["malicious-activity","phishing","brand:investmentscam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/affluentprimemasterlimited.sbs"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1eee3e26-b5ad-58c6-8d01-b29c36ee917a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-29T01:01:12Z","modified":"2025-10-29T01:01:12Z","name":"Phishing domain: affluentprimemastersuper.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/affluentprimemastersuper.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affluentprimemastersuper.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-29T01:01:12Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/affluentprimemastersuper.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--36dda389-38f4-5ff5-9ea8-a49385a3874c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-23T13:02:58Z","modified":"2025-09-23T13:02:58Z","name":"Phishing domain: affmegawealthworld.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating telegram. Report & evidence: https://phishdestroy.io/domain/affmegawealthworld.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affmegawealthworld.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-23T13:02:58Z","labels":["malicious-activity","phishing","brand:telegram"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/affmegawealthworld.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--95bc484a-eeaa-50c0-a317-1cad24d75747","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T18:40:07Z","modified":"2026-08-09T18:40:07Z","name":"Phishing domain: affncap.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/affncap.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affncap.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T18:40:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/affncap.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cfe3fd6-16cd-5c98-9270-4e556a813f2e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-26T10:43:28Z","modified":"2026-01-26T10:43:28Z","name":"Phishing domain: affpipe.click","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/affpipe.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affpipe.click']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-26T10:43:28Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/affpipe.click"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb3dd6fa-b623-5b2e-a61b-69f0bf48db55","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: affsite-xyz.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/affsite-xyz.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affsite-xyz.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/affsite-xyz.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--81db00e7-82aa-51fc-97e2-d06a4cb38438","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-03T15:25:08Z","modified":"2026-08-03T15:25:08Z","name":"Phishing domain: affwatch.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/affwatch.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'affwatch.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-03T15:25:08Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/affwatch.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a92d1a2d-174a-57fd-9682-b9550aae3705","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T18:40:07Z","modified":"2026-08-09T18:40:07Z","name":"Phishing domain: afgpaisa.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/afgpaisa.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afgpaisa.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T18:40:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/afgpaisa.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9eef379f-95ca-57b4-a476-cc27dccd7ec8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-10T14:24:24Z","modified":"2026-07-10T14:24:24Z","name":"Phishing domain: afi-protocol.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Sei. Report & evidence: https://phishdestroy.io/domain/afi-protocol.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afi-protocol.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-10T14:24:24Z","labels":["malicious-activity","phishing","brand:sei"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/afi-protocol.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--51711188-1459-5dbc-a8c4-1b552b54a08c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-18T14:35:14Z","modified":"2026-06-18T14:35:14Z","name":"Phishing domain: afilarias.click","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating fedex. Report & evidence: https://phishdestroy.io/domain/afilarias.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afilarias.click']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-18T14:35:14Z","labels":["malicious-activity","phishing","brand:fedex"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/afilarias.click"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bf9b693-11d4-506e-a81f-d76bb1f755fc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-03T07:25:39Z","modified":"2026-08-03T07:25:39Z","name":"Phishing domain: afiliadodomercadolivre.com.br","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating wordpress. Report & evidence: https://phishdestroy.io/domain/afiliadodomercadolivre.com.br","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afiliadodomercadolivre.com.br']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-03T07:25:39Z","labels":["malicious-activity","phishing","brand:wordpress"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/afiliadodomercadolivre.com.br"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ab9df98-70b6-59fe-ac4e-20b5c4a8380e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-07T02:12:16Z","modified":"2026-06-07T02:12:16Z","name":"Phishing domain: afilianbismillah-coder.github.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/afilianbismillah-coder.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afilianbismillah-coder.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-07T02:12:16Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/afilianbismillah-coder.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--af44e4f6-60a8-54bc-8f84-69acf3c61842","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-24T23:24:03Z","modified":"2025-10-24T23:24:03Z","name":"Phishing domain: afilliner.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/afilliner.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afilliner.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-24T23:24:03Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/afilliner.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ffad188-cd6e-5d1c-9c3c-e7a987adf6c5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-28T17:41:40Z","modified":"2026-04-28T17:41:40Z","name":"Phishing domain: afinil.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/afinil.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afinil.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-28T17:41:40Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/afinil.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ceec8283-0083-575e-939e-207f634d1b11","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-21T06:41:21Z","modified":"2026-04-21T06:41:21Z","name":"Phishing domain: afinilexpress.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/afinilexpress.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afinilexpress.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-21T06:41:21Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/afinilexpress.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5248626c-836c-56a0-847f-82589bf4f704","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-28T18:25:37Z","modified":"2026-04-28T18:25:37Z","name":"Phishing domain: afinilrapid.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/afinilrapid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afinilrapid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-28T18:25:37Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/afinilrapid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--260fd139-86ca-52a4-930e-eb2b0bc68145","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-26T23:50:27Z","modified":"2026-06-26T23:50:27Z","name":"Phishing domain: afipard.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/afipard.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afipard.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-26T23:50:27Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/afipard.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--caf0714a-9d02-5f95-8366-5a52b179d053","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-11T18:30:02Z","modified":"2026-03-11T18:30:02Z","name":"Phishing domain: afis.blackwidow.org.za","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/afis.blackwidow.org.za","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afis.blackwidow.org.za']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-11T18:30:02Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/afis.blackwidow.org.za"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a37cf570-dc62-5bf9-8ef0-88e5189bd2fc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-30T13:56:42Z","modified":"2026-07-30T13:56:42Z","name":"Phishing domain: afj5-qi87-u2kv.saras-burnabynh-ca-s-account.workers.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/afj5-qi87-u2kv.saras-burnabynh-ca-s-account.workers.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afj5-qi87-u2kv.saras-burnabynh-ca-s-account.workers.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-30T13:56:42Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/afj5-qi87-u2kv.saras-burnabynh-ca-s-account.workers.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--63134a29-6b8a-5b05-a03b-6c1f0a2667f0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-24T00:08:43Z","modified":"2026-03-24T00:08:43Z","name":"Phishing domain: afkspinau.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/afkspinau.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afkspinau.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-24T00:08:43Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/afkspinau.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc693309-cb08-57b2-9e4a-1f75edcd93c6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T05:57:25Z","modified":"2026-02-13T05:57:25Z","name":"Phishing domain: afla.cash","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ethereum. Report & evidence: https://phishdestroy.io/domain/afla.cash","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afla.cash']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T05:57:25Z","labels":["malicious-activity","phishing","brand:ethereum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/afla.cash"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--09d21db9-9d00-573d-9f58-307992b8a36a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:33Z","modified":"2026-02-26T23:23:33Z","name":"Phishing domain: aflexfinance-tech.co","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating curve. Report & evidence: https://phishdestroy.io/domain/aflexfinance-tech.co","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aflexfinance-tech.co']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:33Z","labels":["malicious-activity","phishing","brand:curve"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aflexfinance-tech.co"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--10dda705-30a3-5630-91ae-88d06ada9c15","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: aflinks.co.uk","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aflinks.co.uk","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aflinks.co.uk']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aflinks.co.uk"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7de92bc1-112f-5434-88e5-dfab55e95c88","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-28T18:32:23Z","modified":"2026-02-28T18:32:23Z","name":"Phishing domain: aflmm.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aflmm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aflmm.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-28T18:32:23Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aflmm.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b1ce748-aad7-557d-85ac-b265978a4172","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-12T02:10:23Z","modified":"2025-12-12T02:10:23Z","name":"Phishing domain: aflonexitrpro.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating argent. Report & evidence: https://phishdestroy.io/domain/aflonexitrpro.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aflonexitrpro.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-12T02:10:23Z","labels":["malicious-activity","phishing","brand:argent"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aflonexitrpro.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f332aae-2797-53ab-a0ae-8fdfb998d0ad","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-28T20:38:00Z","modified":"2026-07-28T20:38:00Z","name":"Phishing domain: afluencer.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/afluencer.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afluencer.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-28T20:38:00Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/afluencer.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--63c0eed1-6e54-54ee-b365-a8e3ae1e41ba","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-05T08:23:31Z","modified":"2025-10-05T08:23:31Z","name":"Phishing domain: afmbo-ltd.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/afmbo-ltd.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afmbo-ltd.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-05T08:23:31Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/afmbo-ltd.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--458b6fce-d0cc-5699-a274-c365610fc6d6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-26T13:22:21Z","modified":"2026-01-26T13:22:21Z","name":"Phishing domain: afnextrustfirm.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericbanking. Report & evidence: https://phishdestroy.io/domain/afnextrustfirm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afnextrustfirm.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-26T13:22:21Z","labels":["malicious-activity","phishing","brand:genericbanking"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/afnextrustfirm.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4758889-9c95-5572-a3a3-d7f2e98c6ee7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-04T16:21:32Z","modified":"2026-05-04T16:21:32Z","name":"Phishing domain: afnextrustfirm.online","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericbanking. Report & evidence: https://phishdestroy.io/domain/afnextrustfirm.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afnextrustfirm.online']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-04T16:21:32Z","labels":["malicious-activity","phishing","brand:genericbanking"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/afnextrustfirm.online"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--751189f1-c7e2-58f9-913c-a5d0827171cd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-05T11:56:18Z","modified":"2025-11-05T11:56:18Z","name":"Phishing domain: afoshaclass.com.br","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Facebook. Report & evidence: https://phishdestroy.io/domain/afoshaclass.com.br","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afoshaclass.com.br']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-05T11:56:18Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/afoshaclass.com.br"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1521f11a-a234-54f5-b20f-4a96b9814647","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-30T23:11:15Z","modified":"2026-01-30T23:11:15Z","name":"Phishing domain: afr.magmademo.it","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Facebook. Report & evidence: https://phishdestroy.io/domain/afr.magmademo.it","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afr.magmademo.it']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-30T23:11:15Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/afr.magmademo.it"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c2f0f37-367e-58b3-8836-ca7bf611f7ca","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-29T02:27:52Z","modified":"2026-06-29T02:27:52Z","name":"Phishing domain: afreen0601.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating amazon. Report & evidence: https://phishdestroy.io/domain/afreen0601.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afreen0601.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-29T02:27:52Z","labels":["malicious-activity","phishing","brand:amazon"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/afreen0601.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c63fdd1-1133-5379-aaa8-c14aa8ddf2d3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-07T15:54:31Z","modified":"2025-09-07T15:54:31Z","name":"Phishing domain: afresh.media","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating backpack. Report & evidence: https://phishdestroy.io/domain/afresh.media","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afresh.media']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-07T15:54:31Z","labels":["malicious-activity","phishing","brand:backpack"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/afresh.media"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ef187d4-fec1-5e89-9d7a-fb89e9f77a85","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-05T15:08:50Z","modified":"2026-02-05T15:08:50Z","name":"Phishing domain: africa-drop.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/africa-drop.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'africa-drop.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-05T15:08:50Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/africa-drop.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--37d0204f-2177-59a8-b5c9-234b97173a3b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-14T01:43:24Z","modified":"2025-12-14T01:43:24Z","name":"Phishing domain: africangulf.ly","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating google. Report & evidence: https://phishdestroy.io/domain/africangulf.ly","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'africangulf.ly']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-14T01:43:24Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/africangulf.ly"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cac762e-b68e-5779-9918-6f0c0039c451","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-09T18:20:18Z","modified":"2025-08-09T18:20:18Z","name":"Phishing domain: africanoblemission.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/africanoblemission.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'africanoblemission.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-09T18:20:18Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/africanoblemission.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b183ae9-e9de-5f88-850d-96b7d00e3d58","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:40Z","modified":"2026-02-26T23:20:40Z","name":"Phishing domain: africantrektravel.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/africantrektravel.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'africantrektravel.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:40Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/africantrektravel.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cc6945f-4dee-57fc-8a24-b19f27276657","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:06Z","modified":"2026-02-26T23:22:06Z","name":"Phishing domain: africayouthinvestmentbroker.online","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/africayouthinvestmentbroker.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'africayouthinvestmentbroker.online']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:06Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/africayouthinvestmentbroker.online"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c78f792e-8cf8-505a-aefd-a4e7e15de1ac","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:27Z","modified":"2026-02-26T23:22:27Z","name":"Phishing domain: africayouthinvestmentbroker.online.slidexsolutions.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/africayouthinvestmentbroker.online.slidexsolutions.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'africayouthinvestmentbroker.online.slidexsolutions.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:27Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/africayouthinvestmentbroker.online.slidexsolutions.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--81daa5a2-1a32-50c5-a0bd-457a9656efb7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:54:08Z","modified":"2026-07-27T04:54:08Z","name":"Phishing domain: afrique-income.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/afrique-income.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afrique-income.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:54:08Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/afrique-income.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ff69b4f-3fd0-52bf-8d02-def85138430b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-12T21:21:03Z","modified":"2026-03-12T21:21:03Z","name":"Phishing domain: afrique-investment.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aave. Report & evidence: https://phishdestroy.io/domain/afrique-investment.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afrique-investment.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-12T21:21:03Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/afrique-investment.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--59a9194a-d568-5feb-a563-512420bd1144","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-25T02:50:19Z","modified":"2026-06-25T02:50:19Z","name":"Phishing domain: afriusdtsmartteam.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/afriusdtsmartteam.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afriusdtsmartteam.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-25T02:50:19Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/afriusdtsmartteam.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b18771f1-bceb-5997-8192-3aca9901db9c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-19T08:09:20Z","modified":"2025-10-19T08:09:20Z","name":"Phishing domain: afroqueenseeds.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/afroqueenseeds.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afroqueenseeds.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-19T08:09:20Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/afroqueenseeds.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d53fa92-0c37-51d4-9de4-17fd1ade2327","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-18T02:34:35Z","modified":"2025-12-18T02:34:35Z","name":"Phishing domain: afrotechcommunity.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/afrotechcommunity.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afrotechcommunity.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-18T02:34:35Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/afrotechcommunity.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--714d9b3a-e4af-50e7-9b32-a3a72f25c1ad","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-14T16:21:14Z","modified":"2026-04-14T16:21:14Z","name":"Phishing domain: afrozbadra.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating amazon. Report & evidence: https://phishdestroy.io/domain/afrozbadra.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afrozbadra.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-14T16:21:14Z","labels":["malicious-activity","phishing","brand:amazon"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/afrozbadra.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--75198edd-e4de-530f-a9e5-60527f2bf584","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-05T11:37:25Z","modified":"2026-08-05T11:37:25Z","name":"Phishing domain: afrs-4c203-r02g-ft32-jz6.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/afrs-4c203-r02g-ft32-jz6.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afrs-4c203-r02g-ft32-jz6.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-05T11:37:25Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/afrs-4c203-r02g-ft32-jz6.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff3e2435-fc9c-517f-91e4-869587632741","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-09T00:22:03Z","modified":"2026-04-09T00:22:03Z","name":"Phishing domain: afs-crypto.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Crypto.com. Report & evidence: https://phishdestroy.io/domain/afs-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afs-crypto.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-09T00:22:03Z","labels":["malicious-activity","phishing","brand:crypto.com"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/afs-crypto.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f43fb7c7-9c7a-58f5-a245-6fbf082fbfb9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-23T21:46:16Z","modified":"2026-02-23T21:46:16Z","name":"Phishing domain: afsivhubcloud.digital","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Sei. Report & evidence: https://phishdestroy.io/domain/afsivhubcloud.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afsivhubcloud.digital']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-23T21:46:16Z","labels":["malicious-activity","phishing","brand:sei"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/afsivhubcloud.digital"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--03d82be5-a114-544c-84df-dbaf319e2ab2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-19T02:14:14Z","modified":"2026-06-19T02:14:14Z","name":"Phishing domain: afsmanagers.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/afsmanagers.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afsmanagers.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-19T02:14:14Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/afsmanagers.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3ede804-f907-5997-b8f2-e63c832db4bd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-09T16:51:20Z","modified":"2026-03-09T16:51:20Z","name":"Phishing domain: after-panel.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/after-panel.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'after-panel.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-09T16:51:20Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/after-panel.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ac2a356-e644-5b3c-8ea6-4a1980443d52","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-17T08:37:24Z","modified":"2025-09-17T08:37:24Z","name":"Phishing domain: afterdark.site","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/afterdark.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afterdark.site']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-17T08:37:24Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/afterdark.site"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a248c16-8c4e-558a-b936-470927ab8f23","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-18T19:11:53Z","modified":"2026-06-18T19:11:53Z","name":"Phishing domain: aftermeth.finance","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aftermeth.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aftermeth.finance']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-18T19:11:53Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aftermeth.finance"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--35bbac03-6b47-58e3-8f13-a3d25685c755","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T19:20:25Z","modified":"2026-02-13T19:20:25Z","name":"Phishing domain: aftersales-invoices-generation-llc.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/aftersales-invoices-generation-llc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aftersales-invoices-generation-llc.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T19:20:25Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aftersales-invoices-generation-llc.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--309c9d43-d345-53e4-9c56-906618393df3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-18T13:50:36Z","modified":"2026-05-18T13:50:36Z","name":"Phishing domain: afterthetipoff.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/afterthetipoff.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afterthetipoff.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-18T13:50:36Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/afterthetipoff.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7138268-8693-5894-8709-ec9648041086","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-24T23:26:12Z","modified":"2026-02-24T23:26:12Z","name":"Phishing domain: aftoll.icu","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aftoll.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aftoll.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-24T23:26:12Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aftoll.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5821ef7e-cbca-5b7a-8ed7-bfb60b0e02b7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-31T08:10:10Z","modified":"2026-07-31T08:10:10Z","name":"Phishing domain: afx-snapshot.web.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/afx-snapshot.web.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afx-snapshot.web.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-31T08:10:10Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/afx-snapshot.web.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c918fb09-d0ae-5024-8887-fc5220b4a578","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-08T15:34:18Z","modified":"2026-04-08T15:34:18Z","name":"Phishing domain: afxtrade.cloud","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/afxtrade.cloud","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'afxtrade.cloud']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-08T15:34:18Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/afxtrade.cloud"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bf9e2d3-3fb4-5c8d-af42-8d7254c63ecd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-18T17:57:45Z","modified":"2025-10-18T17:57:45Z","name":"Phishing domain: ag-allocation.live","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Jupiter. Report & evidence: https://phishdestroy.io/domain/ag-allocation.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ag-allocation.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-18T17:57:45Z","labels":["malicious-activity","phishing","brand:jupiter"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ag-allocation.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b90c46e-687e-5e18-86b1-5cccae05520c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-19T01:21:19Z","modified":"2025-10-19T01:21:19Z","name":"Phishing domain: ag-allocation.site","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ag-allocation.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ag-allocation.site']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-19T01:21:19Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ag-allocation.site"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b300981f-38a3-5d1d-8a7d-6b72a50ed24d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-19T01:23:03Z","modified":"2025-10-19T01:23:03Z","name":"Phishing domain: ag-allocation.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ag-allocation.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ag-allocation.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-19T01:23:03Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ag-allocation.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce9c8565-ed4b-5d61-9e5e-55263c3e5dc1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-28T18:41:50Z","modified":"2026-02-28T18:41:50Z","name":"Phishing domain: ag-check.live","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ag-check.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ag-check.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-28T18:41:50Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ag-check.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c560f57a-5144-5a08-a31c-da81c6686758","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-04T19:34:49Z","modified":"2026-03-04T19:34:49Z","name":"Phishing domain: ag-check.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ag-check.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ag-check.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-04T19:34:49Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ag-check.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dbe2192-b4c4-56ae-bbba-18ac23ed6652","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-17T01:44:52Z","modified":"2025-10-17T01:44:52Z","name":"Phishing domain: ag-claim.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating jupiter. Report & evidence: https://phishdestroy.io/domain/ag-claim.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ag-claim.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-17T01:44:52Z","labels":["malicious-activity","phishing","brand:jupiter"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ag-claim.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3378317e-cdfa-519e-b3ad-121c0df45e82","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-15T01:10:37Z","modified":"2025-10-15T01:10:37Z","name":"Phishing domain: ag-claim.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ag-claim.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ag-claim.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-15T01:10:37Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ag-claim.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--912bd6e5-9c4d-55b7-a027-29201be04a0e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-20T22:20:11Z","modified":"2025-10-20T22:20:11Z","name":"Phishing domain: ag-claim.site","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ag-claim.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ag-claim.site']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-20T22:20:11Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ag-claim.site"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4baebf8b-2a79-5bba-9766-d144e5c7380b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-20T21:50:31Z","modified":"2026-06-20T21:50:31Z","name":"Phishing domain: ag-collab.land","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ag-collab.land","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ag-collab.land']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-20T21:50:31Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ag-collab.land"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e8b7844-cbe8-5a86-87f3-7976d1ad819d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-14T19:41:28Z","modified":"2026-02-14T19:41:28Z","name":"Phishing domain: ag-dkb.site44.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating dkb. Report & evidence: https://phishdestroy.io/domain/ag-dkb.site44.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ag-dkb.site44.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-14T19:41:28Z","labels":["malicious-activity","phishing","brand:dkb"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ag-dkb.site44.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--62af2d32-0dbe-5d92-b4e3-159a4e853ebf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-11T03:00:14Z","modified":"2026-06-11T03:00:14Z","name":"Phishing domain: ag-event.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ag-event.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ag-event.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-11T03:00:14Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ag-event.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--342216ca-4175-5721-9910-f04e74b91de4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-12T02:45:06Z","modified":"2025-11-12T02:45:06Z","name":"Phishing domain: ag-in.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Jupiter. Report & evidence: https://phishdestroy.io/domain/ag-in.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ag-in.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-12T02:45:06Z","labels":["malicious-activity","phishing","brand:jupiter"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ag-in.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--22f10ec1-2adb-5856-82dd-e80d9b278720","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-12T10:40:42Z","modified":"2025-11-12T10:40:42Z","name":"Phishing domain: ag-op.top","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ag-op.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ag-op.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-12T10:40:42Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ag-op.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--da8125e6-fa7d-527f-ad24-6b4fd78b9c81","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-20T19:54:37Z","modified":"2026-07-20T19:54:37Z","name":"Phishing domain: ag-pool.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ag-pool.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ag-pool.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-20T19:54:37Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ag-pool.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9081199-c286-5279-bc98-5a98cc3ad0e8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-02T16:17:19Z","modified":"2026-03-02T16:17:19Z","name":"Phishing domain: ag-portfoilo.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating base. Report & evidence: https://phishdestroy.io/domain/ag-portfoilo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ag-portfoilo.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-02T16:17:19Z","labels":["malicious-activity","phishing","brand:base"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ag-portfoilo.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b599bfbc-ac28-5732-ba34-5684cc3869ce","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-13T06:36:54Z","modified":"2026-06-13T06:36:54Z","name":"Phishing domain: ag-rewards.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating MetaMask. Report & evidence: https://phishdestroy.io/domain/ag-rewards.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ag-rewards.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-13T06:36:54Z","labels":["malicious-activity","phishing","brand:metamask"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ag-rewards.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6dbb22c-4548-5ab3-8ade-ad424c516cd8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-17T16:03:32Z","modified":"2026-05-17T16:03:32Z","name":"Phishing domain: ag-soft.info","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ag-soft.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ag-soft.info']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-17T16:03:32Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ag-soft.info"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8149c80-6a2a-588c-baad-db01de49e17e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-20T19:54:41Z","modified":"2026-07-20T19:54:41Z","name":"Phishing domain: ag-token.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ag-token.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ag-token.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-20T19:54:41Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ag-token.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f2895c5-c603-5221-a281-febc718c14c7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-07T16:03:17Z","modified":"2025-11-07T16:03:17Z","name":"Phishing domain: ag-usa.info","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Jupiter. Report & evidence: https://phishdestroy.io/domain/ag-usa.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ag-usa.info']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-07T16:03:17Z","labels":["malicious-activity","phishing","brand:jupiter"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ag-usa.info"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ab36406-f510-5c16-b0a6-46f41376ba0d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-12T11:52:41Z","modified":"2025-11-12T11:52:41Z","name":"Phishing domain: ag-x.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Jupiter. Report & evidence: https://phishdestroy.io/domain/ag-x.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ag-x.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-12T11:52:41Z","labels":["malicious-activity","phishing","brand:jupiter"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ag-x.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--87aae029-da68-57ab-b132-b42067e79c1a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:42Z","modified":"2026-02-26T23:24:42Z","name":"Phishing domain: ag.meteora.gifts","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating base. Report & evidence: https://phishdestroy.io/domain/ag.meteora.gifts","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ag.meteora.gifts']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:42Z","labels":["malicious-activity","phishing","brand:base"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ag.meteora.gifts"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7eb1fd1f-1aa5-582a-9aeb-afcf2c600070","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-02T02:22:08Z","modified":"2026-08-02T02:22:08Z","name":"Phishing domain: ag88oa.123111.cyou","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/ag88oa.123111.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ag88oa.123111.cyou']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-02T02:22:08Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ag88oa.123111.cyou"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--716e0ea2-bd01-5f49-99da-5b845fa8765e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-24T11:19:28Z","modified":"2026-03-24T11:19:28Z","name":"Phishing domain: aga123.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Blur. Report & evidence: https://phishdestroy.io/domain/aga123.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aga123.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-24T11:19:28Z","labels":["malicious-activity","phishing","brand:blur"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aga123.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca69138a-69fc-569d-9b6b-8503808ad84f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-13T14:28:20Z","modified":"2026-06-13T14:28:20Z","name":"Phishing domain: agadvantagegroup.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agadvantagegroup.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agadvantagegroup.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-13T14:28:20Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agadvantagegroup.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a749fc22-a732-5b55-a7c8-c1c99b41116c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-26T17:39:21Z","modified":"2026-03-26T17:39:21Z","name":"Phishing domain: again-legorlive.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/again-legorlive.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'again-legorlive.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-26T17:39:21Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/again-legorlive.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--456d6c88-8a51-5b08-9a99-9bdc89f66205","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-18T17:05:04Z","modified":"2026-04-18T17:05:04Z","name":"Phishing domain: again-trzur-suite.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Sui. Report & evidence: https://phishdestroy.io/domain/again-trzur-suite.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'again-trzur-suite.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-18T17:05:04Z","labels":["malicious-activity","phishing","brand:sui"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/again-trzur-suite.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b7d5ddf-810c-52d0-baa4-9a596f38faa7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-24T17:33:37Z","modified":"2026-06-24T17:33:37Z","name":"Phishing domain: againphp.blackammania.workers.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating MetaMask. Report & evidence: https://phishdestroy.io/domain/againphp.blackammania.workers.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'againphp.blackammania.workers.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-24T17:33:37Z","labels":["malicious-activity","phishing","brand:metamask"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/againphp.blackammania.workers.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbfb4e62-6c28-57fd-9a5f-a3444630f69b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-22T10:15:31Z","modified":"2025-12-22T10:15:31Z","name":"Phishing domain: against-sexual-harassment.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/against-sexual-harassment.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'against-sexual-harassment.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-22T10:15:31Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/against-sexual-harassment.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--698b1635-8efc-5e74-91f9-e78fa2581824","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: agam-rouge.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Instagram. Report & evidence: https://phishdestroy.io/domain/agam-rouge.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agam-rouge.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing","brand:instagram"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agam-rouge.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b5cad90-4d67-5a8a-9b4d-5968d654b880","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-18T23:45:11Z","modified":"2026-01-18T23:45:11Z","name":"Phishing domain: agam168.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating telegram. Report & evidence: https://phishdestroy.io/domain/agam168.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agam168.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-18T23:45:11Z","labels":["malicious-activity","phishing","brand:telegram"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agam168.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e5bc2cc-47f3-5fdf-88dc-5df34a2dc294","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-28T10:30:32Z","modified":"2026-01-28T10:30:32Z","name":"Phishing domain: agamb.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/agamb.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agamb.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-28T10:30:32Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agamb.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c31daa7-9c71-5501-b941-6b28b09129a0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T09:49:13Z","modified":"2026-07-27T09:49:13Z","name":"Phishing domain: agamemnonsol.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/agamemnonsol.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agamemnonsol.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T09:49:13Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agamemnonsol.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f49f7f86-5dd1-5a5f-a4f8-582389684493","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-05T11:43:26Z","modified":"2026-04-05T11:43:26Z","name":"Phishing domain: aganwa2.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aganwa2.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aganwa2.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-05T11:43:26Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aganwa2.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3710a7d-186a-5f68-9b37-e073d6155971","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:21Z","modified":"2026-02-26T23:19:21Z","name":"Phishing domain: agape4me.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agape4me.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agape4me.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:21Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agape4me.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d8106db-e030-54eb-92e7-d6955a148de1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-08T14:56:28Z","modified":"2026-06-08T14:56:28Z","name":"Phishing domain: agardepo.com.tr","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agardepo.com.tr","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agardepo.com.tr']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-08T14:56:28Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agardepo.com.tr"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--08383935-c371-550f-8cbd-7d23d9b71eac","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-18T13:44:48Z","modified":"2026-03-18T13:44:48Z","name":"Phishing domain: agaricproku.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agaricproku.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agaricproku.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-18T13:44:48Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agaricproku.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f32fc2d-76bf-5adb-9273-d0c47daf7b55","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-13T17:27:36Z","modified":"2026-08-13T17:27:36Z","name":"Phishing domain: agath.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agath.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agath.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-13T17:27:36Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agath.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4da781c-4352-5e08-b28c-9b8f6f8eaf11","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-03T22:04:59Z","modified":"2026-05-03T22:04:59Z","name":"Phishing domain: agavechido.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/agavechido.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agavechido.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-03T22:04:59Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agavechido.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--67d9b36a-ae27-55e3-a03b-ffb4d32fe914","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:03Z","modified":"2026-02-26T23:24:03Z","name":"Phishing domain: agc-airdrop-platform.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agc-airdrop-platform.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agc-airdrop-platform.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:03Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agc-airdrop-platform.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--82d08445-ea88-5e8b-a8cf-71a1b433e573","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-17T08:59:26Z","modified":"2025-09-17T08:59:26Z","name":"Phishing domain: agc-labs.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agc-labs.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agc-labs.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-17T08:59:26Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agc-labs.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5294bf36-370a-5808-b706-1736cb0819d6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-27T06:09:58Z","modified":"2025-10-27T06:09:58Z","name":"Phishing domain: agclaim.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agclaim.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agclaim.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-27T06:09:58Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agclaim.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a94c06e-f964-59b3-9729-6d51cffc0683","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-12T22:16:33Z","modified":"2025-12-12T22:16:33Z","name":"Phishing domain: ageminer.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ethereum. Report & evidence: https://phishdestroy.io/domain/ageminer.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ageminer.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-12T22:16:33Z","labels":["malicious-activity","phishing","brand:ethereum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ageminer.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e642e90-369d-5ee2-9d68-c722972acd18","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-05T04:32:32Z","modified":"2026-03-05T04:32:32Z","name":"Phishing domain: agenc.pumpvote.us","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating [\"curve\"]. Report & evidence: https://phishdestroy.io/domain/agenc.pumpvote.us","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agenc.pumpvote.us']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-05T04:32:32Z","labels":["malicious-activity","phishing","brand:[\"curve\"]"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agenc.pumpvote.us"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--28aeea26-3dda-593c-8682-d52417c3c0ed","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-28T16:32:46Z","modified":"2026-04-28T16:32:46Z","name":"Phishing domain: agence-agency.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating creditagricole. Report & evidence: https://phishdestroy.io/domain/agence-agency.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agence-agency.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-28T16:32:46Z","labels":["malicious-activity","phishing","brand:creditagricole"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agence-agency.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d979e1af-e6c5-5d32-927c-ef5c511bc7ec","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-30T03:13:40Z","modified":"2026-01-30T03:13:40Z","name":"Phishing domain: agence-nationale.particulier-traitement.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agence-nationale.particulier-traitement.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agence-nationale.particulier-traitement.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-30T03:13:40Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agence-nationale.particulier-traitement.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c73b9239-69e1-5b61-9f65-671a802f0422","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-01T05:56:32Z","modified":"2026-07-01T05:56:32Z","name":"Phishing domain: agencjaartur.info","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/agencjaartur.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agencjaartur.info']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-01T05:56:32Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agencjaartur.info"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b112b69-4dbc-5af6-bfc3-bd5c8d542028","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-01T20:25:23Z","modified":"2026-03-01T20:25:23Z","name":"Phishing domain: agencone.digital","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agencone.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agencone.digital']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-01T20:25:23Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agencone.digital"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b07d7c82-0db9-5641-af9f-a4e8d4c08ae9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-30T17:26:27Z","modified":"2026-04-30T17:26:27Z","name":"Phishing domain: agency-account.invoice-ads-program.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating facebook. Report & evidence: https://phishdestroy.io/domain/agency-account.invoice-ads-program.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agency-account.invoice-ads-program.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-30T17:26:27Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agency-account.invoice-ads-program.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--beadaacc-87c9-597a-9b32-8fcf30e5fb99","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-30T17:26:29Z","modified":"2026-04-30T17:26:29Z","name":"Phishing domain: agency-manager.invoice-ads-agency.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating facebook. Report & evidence: https://phishdestroy.io/domain/agency-manager.invoice-ads-agency.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agency-manager.invoice-ads-agency.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-30T17:26:29Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agency-manager.invoice-ads-agency.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b7db40a-0643-59ff-b08f-3cde459a9740","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-29T15:46:57Z","modified":"2026-04-29T15:46:57Z","name":"Phishing domain: agency-marketing.invoice-ads-program.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating facebook. Report & evidence: https://phishdestroy.io/domain/agency-marketing.invoice-ads-program.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agency-marketing.invoice-ads-program.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-29T15:46:57Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agency-marketing.invoice-ads-program.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5ecfb01-430a-566b-889e-a661afbca244","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T18:14:13Z","modified":"2026-02-13T18:14:13Z","name":"Phishing domain: agency-model.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agency-model.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agency-model.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T18:14:13Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agency-model.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--85a9b976-d066-5d04-b789-739b9ebe4800","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-29T15:48:30Z","modified":"2026-04-29T15:48:30Z","name":"Phishing domain: agency-partner.invoice-ads-program.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating facebook. Report & evidence: https://phishdestroy.io/domain/agency-partner.invoice-ads-program.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agency-partner.invoice-ads-program.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-29T15:48:30Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agency-partner.invoice-ads-program.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d5f7a8a-e58b-5684-a19f-c71b084be923","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-20T22:42:58Z","modified":"2026-03-20T22:42:58Z","name":"Phishing domain: agency.enkpay.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agency.enkpay.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agency.enkpay.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-20T22:42:58Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agency.enkpay.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--66ae794d-e76b-56d4-890f-9f51155da9da","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-25T15:26:16Z","modified":"2026-04-25T15:26:16Z","name":"Phishing domain: agency.invoice-ads-program.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating facebook. Report & evidence: https://phishdestroy.io/domain/agency.invoice-ads-program.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agency.invoice-ads-program.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-25T15:26:16Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agency.invoice-ads-program.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4c6a2eb-ec3d-5b30-8d00-842dce7583c9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-10T02:40:46Z","modified":"2025-11-10T02:40:46Z","name":"Phishing domain: agencyanalyticsframe.us.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agencyanalyticsframe.us.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agencyanalyticsframe.us.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-10T02:40:46Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agencyanalyticsframe.us.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--280bd7c0-802f-5099-b9b4-bf19569a3fc5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:56Z","modified":"2026-02-26T23:23:56Z","name":"Phishing domain: agencycentre-meta.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating facebook. Report & evidence: https://phishdestroy.io/domain/agencycentre-meta.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agencycentre-meta.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:56Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agencycentre-meta.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d813e373-5c9c-570d-80d4-17448fa6ad3d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-02T14:53:41Z","modified":"2026-08-02T14:53:41Z","name":"Phishing domain: agencyy-partner-program.netlify.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agencyy-partner-program.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agencyy-partner-program.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-02T14:53:41Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agencyy-partner-program.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2abdfd8-7512-59ba-afe1-aaf4355fb5b5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-11T03:08:40Z","modified":"2026-04-11T03:08:40Z","name":"Phishing domain: agenda-47.next-cryptolist.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agenda-47.next-cryptolist.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agenda-47.next-cryptolist.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-11T03:08:40Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agenda-47.next-cryptolist.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fea0ff65-1133-5873-b40c-2921a4fb0a4f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-05T13:31:57Z","modified":"2026-04-05T13:31:57Z","name":"Phishing domain: agent-2mx.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Microsoft. Report & evidence: https://phishdestroy.io/domain/agent-2mx.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agent-2mx.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-05T13:31:57Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agent-2mx.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0760fdc-9109-5ecb-a267-0b3bc0b17ee4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-14T13:59:29Z","modified":"2026-07-14T13:59:29Z","name":"Phishing domain: agent-client.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agent-client.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agent-client.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-14T13:59:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agent-client.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--79e9d973-2947-5762-b103-4358260994ef","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-19T00:16:36Z","modified":"2026-01-19T00:16:36Z","name":"Phishing domain: agent-help-coinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/agent-help-coinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agent-help-coinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-19T00:16:36Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agent-help-coinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5e00333-6fdd-54d0-8f72-7d80492e33e6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-11T03:08:47Z","modified":"2026-04-11T03:08:47Z","name":"Phishing domain: agent-hustle.ai-cryptolist.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agent-hustle.ai-cryptolist.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agent-hustle.ai-cryptolist.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-11T03:08:47Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agent-hustle.ai-cryptolist.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b966629-9a99-5181-92f2-b3fc9e2912ac","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-11T03:10:39Z","modified":"2026-04-11T03:10:39Z","name":"Phishing domain: agent-krasnov.ai-cryptolist.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agent-krasnov.ai-cryptolist.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agent-krasnov.ai-cryptolist.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-11T03:10:39Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agent-krasnov.ai-cryptolist.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--43daa15a-85fc-56af-9008-24fb7489f7cc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-31T20:26:42Z","modified":"2026-07-31T20:26:42Z","name":"Phishing domain: agent-layer.live","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating EigenLayer. Report & evidence: https://phishdestroy.io/domain/agent-layer.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agent-layer.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-31T20:26:42Z","labels":["malicious-activity","phishing","brand:eigenlayer"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agent-layer.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf47d621-14b6-58ee-a68b-07e7ddc0b0f4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-11T03:10:07Z","modified":"2026-04-11T03:10:07Z","name":"Phishing domain: agent-s.entrance-cryptolist.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agent-s.entrance-cryptolist.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agent-s.entrance-cryptolist.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-11T03:10:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agent-s.entrance-cryptolist.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c520a189-e0d3-55e9-9916-f12c4e63def8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-19T05:47:49Z","modified":"2026-07-19T05:47:49Z","name":"Phishing domain: agent-smith.digital","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agent-smith.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agent-smith.digital']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-19T05:47:49Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agent-smith.digital"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c7e5e65-8a62-5485-94d3-c24e596a52d4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-09T06:42:28Z","modified":"2025-10-09T06:42:28Z","name":"Phishing domain: agent.coinbasepay.tech","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/agent.coinbasepay.tech","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agent.coinbasepay.tech']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-09T06:42:28Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agent.coinbasepay.tech"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f03116ba-7863-5805-b315-fa4d1dfa241c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-23T21:09:28Z","modified":"2025-12-23T21:09:28Z","name":"Phishing domain: agent.deribitltd.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agent.deribitltd.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agent.deribitltd.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-23T21:09:28Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agent.deribitltd.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4fc75cc-1049-555b-b1c8-be612da9bcdb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-19T16:10:55Z","modified":"2026-02-19T16:10:55Z","name":"Phishing domain: agent.pinksale-scream.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating cexio. Report & evidence: https://phishdestroy.io/domain/agent.pinksale-scream.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agent.pinksale-scream.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-19T16:10:55Z","labels":["malicious-activity","phishing","brand:cexio"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agent.pinksale-scream.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c89cd8f7-4b6d-5fd9-9e30-081cedc24a9d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:05Z","modified":"2026-02-26T23:22:05Z","name":"Phishing domain: agent.xjko.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating generic. Report & evidence: https://phishdestroy.io/domain/agent.xjko.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agent.xjko.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:05Z","labels":["malicious-activity","phishing","brand:generic"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agent.xjko.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--98a3ae9a-d745-5f21-8da4-0bba0c28f601","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-29T18:36:04Z","modified":"2026-03-29T18:36:04Z","name":"Phishing domain: agentarena.run","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agentarena.run","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agentarena.run']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-29T18:36:04Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agentarena.run"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c6d6e5a-da6d-58d6-92d2-c0617ece38ef","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-15T17:46:15Z","modified":"2026-03-15T17:46:15Z","name":"Phishing domain: agentcity.fun","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agentcity.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agentcity.fun']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-15T17:46:15Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agentcity.fun"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e6883dd-9e92-532b-8624-86b7a4c94b80","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-26T08:41:56Z","modified":"2025-12-26T08:41:56Z","name":"Phishing domain: agentcitysol.lat","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agentcitysol.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agentcitysol.lat']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-26T08:41:56Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agentcitysol.lat"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ed2d7ba-7b90-589d-839b-c3e30e4f763e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-25T13:52:56Z","modified":"2025-12-25T13:52:56Z","name":"Phishing domain: agentcitysol.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agentcitysol.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agentcitysol.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-25T13:52:56Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agentcitysol.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0b95e9a-6dd9-5f0b-9155-dd354062b471","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-03T07:25:28Z","modified":"2026-08-03T07:25:28Z","name":"Phishing domain: agentedetransformacao.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agentedetransformacao.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agentedetransformacao.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-03T07:25:28Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agentedetransformacao.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4b8795c-e4b3-54b2-b0ee-84d385eb2acf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:54:27Z","modified":"2026-07-27T04:54:27Z","name":"Phishing domain: agenteonline.webcindario.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating daviplata. Report & evidence: https://phishdestroy.io/domain/agenteonline.webcindario.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agenteonline.webcindario.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:54:27Z","labels":["malicious-activity","phishing","brand:daviplata"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agenteonline.webcindario.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac8c75f7-7450-543d-a88c-7ee931cb097d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-05T04:34:49Z","modified":"2026-03-05T04:34:49Z","name":"Phishing domain: agentforcoinbase.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/agentforcoinbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agentforcoinbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-05T04:34:49Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agentforcoinbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--24dab5a9-4ce2-5854-a586-083c7c05e38e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-04T05:26:29Z","modified":"2026-08-04T05:26:29Z","name":"Phishing domain: agenthail.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agenthail.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agenthail.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-04T05:26:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agenthail.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3ea6694-8b99-5e32-a7d6-e9754c1ac1ef","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T12:21:17Z","modified":"2026-02-13T12:21:17Z","name":"Phishing domain: agentiagames.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/agentiagames.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agentiagames.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T12:21:17Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agentiagames.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--78c578ff-b68c-52bb-89fe-dd90c96e67fa","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-14T14:29:01Z","modified":"2026-06-14T14:29:01Z","name":"Phishing domain: agenticairdrop.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agenticairdrop.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agenticairdrop.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-14T14:29:01Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agenticairdrop.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6120442-a944-511c-a784-5afe98c795bb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-07T03:49:33Z","modified":"2026-03-07T03:49:33Z","name":"Phishing domain: agenticlaunchbnb.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agenticlaunchbnb.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agenticlaunchbnb.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-07T03:49:33Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agenticlaunchbnb.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--87ae21e4-6411-5b6e-9834-ca6776951b3d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-02T16:34:23Z","modified":"2026-03-02T16:34:23Z","name":"Phishing domain: agenticmarkting.work","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agenticmarkting.work","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agenticmarkting.work']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-02T16:34:23Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agenticmarkting.work"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--32b34dd9-ef66-571c-917c-ffae073cd745","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-11T12:52:00Z","modified":"2025-09-11T12:52:00Z","name":"Phishing domain: agentipy-fun.web.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating backpack. Report & evidence: https://phishdestroy.io/domain/agentipy-fun.web.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agentipy-fun.web.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-11T12:52:00Z","labels":["malicious-activity","phishing","brand:backpack"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agentipy-fun.web.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b43963f7-5ebd-583a-87be-a2290fc6219c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-11T03:10:11Z","modified":"2026-04-11T03:10:11Z","name":"Phishing domain: agentlayer.entry-cryptolist.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating EigenLayer. Report & evidence: https://phishdestroy.io/domain/agentlayer.entry-cryptolist.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agentlayer.entry-cryptolist.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-11T03:10:11Z","labels":["malicious-activity","phishing","brand:eigenlayer"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agentlayer.entry-cryptolist.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--70143384-62d3-54d3-acf9-44a841b6e627","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-17T04:55:39Z","modified":"2025-09-17T04:55:39Z","name":"Phishing domain: agentlayer.world","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating EigenLayer. Report & evidence: https://phishdestroy.io/domain/agentlayer.world","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agentlayer.world']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-17T04:55:39Z","labels":["malicious-activity","phishing","brand:eigenlayer"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agentlayer.world"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--703532ab-6cf2-5bb4-a594-26674678e737","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-17T15:33:56Z","modified":"2026-04-17T15:33:56Z","name":"Phishing domain: agentlisa-ai.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agentlisa-ai.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agentlisa-ai.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-17T15:33:56Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agentlisa-ai.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--95c2f0ef-4c0b-5b57-8658-42d624cab04f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-21T18:35:41Z","modified":"2026-05-21T18:35:41Z","name":"Phishing domain: agentmemory.live","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agentmemory.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agentmemory.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-21T18:35:41Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agentmemory.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--19ba93cb-243e-5fb1-b527-a17256664622","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:46Z","modified":"2026-02-26T23:20:46Z","name":"Phishing domain: agentnylas.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agentnylas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agentnylas.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:46Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agentnylas.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb735735-8a4b-561b-b806-b2590c5ece74","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T08:21:06Z","modified":"2026-02-13T08:21:06Z","name":"Phishing domain: agents-olas.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agents-olas.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agents-olas.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T08:21:06Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agents-olas.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8458c671-61c7-5687-9318-bd9a1bcf2a9f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-26T09:02:11Z","modified":"2026-03-26T09:02:11Z","name":"Phishing domain: agentsboard-ai.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agentsboard-ai.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agentsboard-ai.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-26T09:02:11Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agentsboard-ai.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2c482dd-5776-5d64-ae75-f2af8b66b897","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-27T05:38:20Z","modified":"2026-04-27T05:38:20Z","name":"Phishing domain: agentsdistributions.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agentsdistributions.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agentsdistributions.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-27T05:38:20Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agentsdistributions.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5cc032d-31e8-5584-ba8d-b7c632776780","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-31T16:08:44Z","modified":"2025-12-31T16:08:44Z","name":"Phishing domain: agentshaw.icu","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agentshaw.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agentshaw.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-31T16:08:44Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agentshaw.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--20f7c164-0fac-55ef-83a1-3797e9f68237","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-18T20:42:26Z","modified":"2026-03-18T20:42:26Z","name":"Phishing domain: agentsmith.digital","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agentsmith.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agentsmith.digital']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-18T20:42:26Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agentsmith.digital"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--348fb30a-f4fd-5b5a-a658-31211e250b07","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T12:02:03Z","modified":"2026-07-27T12:02:03Z","name":"Phishing domain: agentspace.kro.kr","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agentspace.kro.kr","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agentspace.kro.kr']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T12:02:03Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agentspace.kro.kr"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--56a494b0-5f83-58d4-98e4-5550e687c3d6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-08T17:16:38Z","modified":"2026-02-08T17:16:38Z","name":"Phishing domain: agentteams.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agentteams.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agentteams.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-08T17:16:38Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agentteams.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1d51edb-c904-547c-bdd1-3458083ad649","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-21T22:25:50Z","modified":"2026-07-21T22:25:50Z","name":"Phishing domain: agenziaentrate-gov.lestrani.de","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agenziaentrate-gov.lestrani.de","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agenziaentrate-gov.lestrani.de']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-21T22:25:50Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agenziaentrate-gov.lestrani.de"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--74402cd0-ec33-5212-99f0-4fc2cf5d0839","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-12T02:22:40Z","modified":"2025-12-12T02:22:40Z","name":"Phishing domain: agenziaformativavitruviana.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Facebook. Report & evidence: https://phishdestroy.io/domain/agenziaformativavitruviana.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agenziaformativavitruviana.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-12T02:22:40Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agenziaformativavitruviana.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa720296-0de7-5618-8ca2-2cd0eaafd6c8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-14T14:30:49Z","modified":"2025-10-14T14:30:49Z","name":"Phishing domain: agesafeamerica.services","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agesafeamerica.services","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agesafeamerica.services']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-14T14:30:49Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agesafeamerica.services"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--afb573e1-b3eb-5b22-9d7b-3f9050ed458d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-17T07:32:49Z","modified":"2026-05-17T07:32:49Z","name":"Phishing domain: aggiornamento-ledger.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/aggiornamento-ledger.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aggiornamento-ledger.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-17T07:32:49Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aggiornamento-ledger.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dad219aa-4f5b-53b9-a658-f3f4bdb74ffa","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T12:02:03Z","modified":"2026-07-27T12:02:03Z","name":"Phishing domain: agglobalcomputer.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agglobalcomputer.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agglobalcomputer.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T12:02:03Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agglobalcomputer.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8b030c1-aa8f-5a76-936a-d8f9cbeb336a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T04:29:08Z","modified":"2026-02-13T04:29:08Z","name":"Phishing domain: aggsystem.pro","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating [\"zoom\"]. Report & evidence: https://phishdestroy.io/domain/aggsystem.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aggsystem.pro']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T04:29:08Z","labels":["malicious-activity","phishing","brand:[\"zoom\"]"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aggsystem.pro"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8712fb2c-0b7a-5c41-a79f-85dac7df8c08","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-01T03:48:33Z","modified":"2026-07-01T03:48:33Z","name":"Phishing domain: aghoghosccarefoundation.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aghoghosccarefoundation.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aghoghosccarefoundation.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-01T03:48:33Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aghoghosccarefoundation.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--008f47c2-ae74-5819-87c8-a945df35f67f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-26T14:06:54Z","modified":"2025-11-26T14:06:54Z","name":"Phishing domain: aghov.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aave. Report & evidence: https://phishdestroy.io/domain/aghov.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aghov.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-26T14:06:54Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aghov.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd16497f-e222-51ac-8e0e-81320adf1db1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-11T03:10:40Z","modified":"2026-04-11T03:10:40Z","name":"Phishing domain: agi-alpha-agent.entrance-cryptolist.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agi-alpha-agent.entrance-cryptolist.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agi-alpha-agent.entrance-cryptolist.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-11T03:10:40Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agi-alpha-agent.entrance-cryptolist.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf0d7d5c-9487-5749-af07-a72d72036a1a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: agi7788.vip","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agi7788.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agi7788.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agi7788.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bb12741-3729-5d69-977c-f47193135edc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: agi8899.vip","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agi8899.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agi8899.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agi8899.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fdd28d4-307e-5265-bf7d-148c6f8f6566","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-06T15:59:35Z","modified":"2026-04-06T15:59:35Z","name":"Phishing domain: agibochat.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating MetaMask. Report & evidence: https://phishdestroy.io/domain/agibochat.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agibochat.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-06T15:59:35Z","labels":["malicious-activity","phishing","brand:metamask"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agibochat.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--955103c5-4419-55f6-b66c-a61ea5a34da3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-06T15:58:29Z","modified":"2026-04-06T15:58:29Z","name":"Phishing domain: agibogpt.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating MetaMask. Report & evidence: https://phishdestroy.io/domain/agibogpt.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agibogpt.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-06T15:58:29Z","labels":["malicious-activity","phishing","brand:metamask"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agibogpt.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8ff2b78-b9c0-551c-b3aa-9bca94b8b6d2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-02T02:41:39Z","modified":"2025-09-02T02:41:39Z","name":"Phishing domain: agicoin.vip","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agicoin.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agicoin.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-02T02:41:39Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agicoin.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a63e1f43-b53c-5470-a75d-9dcf2b7d46e0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:37Z","modified":"2026-02-26T23:19:37Z","name":"Phishing domain: agidaleconsulting.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/agidaleconsulting.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agidaleconsulting.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:37Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agidaleconsulting.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--df630113-3c7f-5b1a-bef5-dbffeb4eaeb2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-18T23:50:43Z","modified":"2026-01-18T23:50:43Z","name":"Phishing domain: agigpt.mom","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agigpt.mom","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agigpt.mom']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-18T23:50:43Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agigpt.mom"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aaef3c8e-655c-5c18-9359-c3b9f08ec9ce","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: agilecoachcamp.de","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agilecoachcamp.de","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agilecoachcamp.de']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agilecoachcamp.de"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--33590463-8ffd-53eb-a4a3-4c61269def42","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T13:44:42Z","modified":"2026-02-13T13:44:42Z","name":"Phishing domain: agilescoingain.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agilescoingain.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agilescoingain.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T13:44:42Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agilescoingain.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1629a2ab-ad49-5a7c-95d4-d56aa20c0cb2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T05:03:21Z","modified":"2026-07-27T05:03:21Z","name":"Phishing domain: agilitetrade.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agilitetrade.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agilitetrade.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T05:03:21Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agilitetrade.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--409c299f-8733-5812-82ea-f4dcba72d5b0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-20T03:39:39Z","modified":"2026-07-20T03:39:39Z","name":"Phishing domain: agingfighter.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agingfighter.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agingfighter.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-20T03:39:39Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agingfighter.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bd9c0ad-03a0-57b6-96f1-06507e7b146b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-21T03:13:33Z","modified":"2026-05-21T03:13:33Z","name":"Phishing domain: agipk.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agipk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agipk.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-21T03:13:33Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agipk.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--29b92d06-557d-5e32-8a5b-8bb8069f0570","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-24T16:52:20Z","modified":"2025-09-24T16:52:20Z","name":"Phishing domain: agix--sushi.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating SushiSwap. Report & evidence: https://phishdestroy.io/domain/agix--sushi.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agix--sushi.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-24T16:52:20Z","labels":["malicious-activity","phishing","brand:sushiswap"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agix--sushi.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--829e283b-746e-5165-94ac-d9206855ee93","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-07T04:36:16Z","modified":"2026-04-07T04:36:16Z","name":"Phishing domain: agix-reward.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/agix-reward.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agix-reward.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-07T04:36:16Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agix-reward.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7385bde1-edde-5db9-b044-11fec9655a97","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T14:47:29Z","modified":"2026-02-13T14:47:29Z","name":"Phishing domain: agixtoken.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/agixtoken.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agixtoken.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T14:47:29Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agixtoken.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f65f48c-81c3-5772-b31f-11448108b61e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T18:40:07Z","modified":"2026-08-09T18:40:07Z","name":"Phishing domain: aglobase.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aglobase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aglobase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T18:40:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aglobase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cf3bb25-ce8b-5323-9a64-67551b2a7d5d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-07T21:50:53Z","modified":"2025-11-07T21:50:53Z","name":"Phishing domain: agloflow.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/agloflow.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agloflow.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-07T21:50:53Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agloflow.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa221f7c-4b70-5a54-9322-26dcb91801ef","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-23T13:02:23Z","modified":"2025-09-23T13:02:23Z","name":"Phishing domain: agnicodrillcompany.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agnicodrillcompany.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agnicodrillcompany.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-23T13:02:23Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agnicodrillcompany.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--09cd9bb1-a1c7-5715-a1e5-4c97aa1b5050","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-25T12:00:05Z","modified":"2025-08-25T12:00:05Z","name":"Phishing domain: agnifinance.live","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Yearn. Report & evidence: https://phishdestroy.io/domain/agnifinance.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agnifinance.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-25T12:00:05Z","labels":["malicious-activity","phishing","brand:yearn"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agnifinance.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cac73276-4f09-5ff2-8d4f-03606d4ba354","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-02T15:55:03Z","modified":"2026-05-02T15:55:03Z","name":"Phishing domain: agnikacharjee.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating netflix. Report & evidence: https://phishdestroy.io/domain/agnikacharjee.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agnikacharjee.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-02T15:55:03Z","labels":["malicious-activity","phishing","brand:netflix"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agnikacharjee.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d786c68a-ba81-5cbe-b4da-a9cab4279b5c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-27T16:16:23Z","modified":"2026-03-27T16:16:23Z","name":"Phishing domain: agntclaims.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/agntclaims.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agntclaims.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-27T16:16:23Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agntclaims.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8da15f8a-a3ff-58eb-8b26-73dbc4970e2f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-27T16:52:47Z","modified":"2026-03-27T16:52:47Z","name":"Phishing domain: agnzetrta.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/agnzetrta.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agnzetrta.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-27T16:52:47Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agnzetrta.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9f1b04b-43cb-5ba2-802e-9926b6372e06","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: agoda-clone.vercel.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agoda-clone.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agoda-clone.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agoda-clone.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dffaff01-79c4-5e06-816e-0b24ac7e39c8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-29T05:57:27Z","modified":"2026-06-29T05:57:27Z","name":"Phishing domain: agoda-discountcode.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agoda-discountcode.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agoda-discountcode.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-29T05:57:27Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agoda-discountcode.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7dd7f94b-8cc9-52dc-bb96-d74007d68eae","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-06T13:03:15Z","modified":"2026-01-06T13:03:15Z","name":"Phishing domain: agokclaim.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating discord. Report & evidence: https://phishdestroy.io/domain/agokclaim.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agokclaim.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-06T13:03:15Z","labels":["malicious-activity","phishing","brand:discord"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agokclaim.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--afbc80aa-c4c3-54ec-a09c-a3a0148d96d0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-04T14:12:16Z","modified":"2026-07-04T14:12:16Z","name":"Phishing domain: agon-law.de","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agon-law.de","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agon-law.de']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-04T14:12:16Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agon-law.de"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--41b2c90d-ebcb-5ff7-a726-6d97fc539112","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-08T04:08:35Z","modified":"2025-08-08T04:08:35Z","name":"Phishing domain: agonlinebk.site","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/agonlinebk.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agonlinebk.site']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-08T04:08:35Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agonlinebk.site"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f95a68ed-408a-5363-87b8-69872912a5c1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-14T01:09:00Z","modified":"2026-03-14T01:09:00Z","name":"Phishing domain: agora-idea.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agora-idea.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agora-idea.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-14T01:09:00Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agora-idea.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f3fe480-964b-5ba1-8dab-303e1d612f6b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-19T10:14:56Z","modified":"2026-06-19T10:14:56Z","name":"Phishing domain: agora-onchain-web3.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agora-onchain-web3.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agora-onchain-web3.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-19T10:14:56Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agora-onchain-web3.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5adc53ff-1270-531f-9482-2a2a56270200","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:22Z","modified":"2026-02-26T23:21:22Z","name":"Phishing domain: agorareward.live","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agorareward.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agorareward.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:22Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agorareward.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7ca76f7-ff34-5b9e-aafc-466ea85f694c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-14T19:39:28Z","modified":"2026-02-14T19:39:28Z","name":"Phishing domain: agoraverificacao.digital","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agoraverificacao.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agoraverificacao.digital']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-14T19:39:28Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agoraverificacao.digital"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--88e38e86-bcaa-5546-a163-814f7cd4cf76","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-03T14:16:32Z","modified":"2026-07-03T14:16:32Z","name":"Phishing domain: agoth.com.au","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agoth.com.au","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agoth.com.au']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-03T14:16:32Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agoth.com.au"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1638b8ed-9a8e-5c65-8912-d75c36e3fbcc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-03T13:21:30Z","modified":"2025-12-03T13:21:30Z","name":"Phishing domain: agovoriliknopkibablo-net.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agovoriliknopkibablo-net.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agovoriliknopkibablo-net.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-03T13:21:30Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agovoriliknopkibablo-net.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--138c4476-2937-582f-b96a-5bfe573ebe83","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-17T03:31:42Z","modified":"2026-05-17T03:31:42Z","name":"Phishing domain: agraharijourney.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating netflix. Report & evidence: https://phishdestroy.io/domain/agraharijourney.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agraharijourney.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-17T03:31:42Z","labels":["malicious-activity","phishing","brand:netflix"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agraharijourney.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a76ef7ed-1f47-5b56-8785-ef0e43500048","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-10T14:31:23Z","modified":"2026-06-10T14:31:23Z","name":"Phishing domain: agrawaldd-1.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/agrawaldd-1.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agrawaldd-1.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-10T14:31:23Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agrawaldd-1.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--391c261b-5588-56eb-b21b-b45fde9139e1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:55Z","modified":"2026-02-26T23:20:55Z","name":"Phishing domain: agree-rabby--io-help.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Rabby. Report & evidence: https://phishdestroy.io/domain/agree-rabby--io-help.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agree-rabby--io-help.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:55Z","labels":["malicious-activity","phishing","brand:rabby"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agree-rabby--io-help.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--314d41d2-7dc1-5a86-8542-1f43790ee5a3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-29T15:02:44Z","modified":"2026-07-29T15:02:44Z","name":"Phishing domain: agreeable-pebble-0096d5110.7.azurestaticapps.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/agreeable-pebble-0096d5110.7.azurestaticapps.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agreeable-pebble-0096d5110.7.azurestaticapps.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-29T15:02:44Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agreeable-pebble-0096d5110.7.azurestaticapps.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--22552bb6-619f-5244-92d8-85206305be18","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-16T16:34:57Z","modified":"2026-02-16T16:34:57Z","name":"Phishing domain: agreeable-provide-508719.framer.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agreeable-provide-508719.framer.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agreeable-provide-508719.framer.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-16T16:34:57Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agreeable-provide-508719.framer.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--db8fb581-aa11-51c5-9a3d-aa2b91f4e7de","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-10T05:04:26Z","modified":"2025-12-10T05:04:26Z","name":"Phishing domain: agreed-approve-directories-ppc.trycloudflare.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating chase. Report & evidence: https://phishdestroy.io/domain/agreed-approve-directories-ppc.trycloudflare.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agreed-approve-directories-ppc.trycloudflare.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-10T05:04:26Z","labels":["malicious-activity","phishing","brand:chase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agreed-approve-directories-ppc.trycloudflare.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--33a6dced-b075-519b-8d4e-6c2e6f17043d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-17T01:22:27Z","modified":"2025-10-17T01:22:27Z","name":"Phishing domain: agreemalogistics.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Produbanco. Report & evidence: https://phishdestroy.io/domain/agreemalogistics.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agreemalogistics.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-17T01:22:27Z","labels":["malicious-activity","phishing","brand:produbanco"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agreemalogistics.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6af0098f-47c8-57c4-89b1-2e05e04f8805","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-02T16:24:07Z","modified":"2025-12-02T16:24:07Z","name":"Phishing domain: agreement-coinbase.iptvtsreamhub.online","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/agreement-coinbase.iptvtsreamhub.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agreement-coinbase.iptvtsreamhub.online']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-02T16:24:07Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agreement-coinbase.iptvtsreamhub.online"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8381dba-2e97-58ca-ae25-75a6f27d7a37","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-06T12:37:34Z","modified":"2026-03-06T12:37:34Z","name":"Phishing domain: agri-link.ca","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agri-link.ca","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agri-link.ca']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-06T12:37:34Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agri-link.ca"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecd555c3-3599-59e4-8d19-4dcc03373b9b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T18:40:07Z","modified":"2026-08-09T18:40:07Z","name":"Phishing domain: agric-growth.ltd","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agric-growth.ltd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agric-growth.ltd']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T18:40:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agric-growth.ltd"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a25c4ad8-16b1-5e74-9c99-c05d99428790","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:35Z","modified":"2026-02-26T23:22:35Z","name":"Phishing domain: agric.swizzfx.pro","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agric.swizzfx.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agric.swizzfx.pro']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:35Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agric.swizzfx.pro"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad52a9a1-4c25-534a-9323-598d03f24a31","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-28T15:33:13Z","modified":"2026-06-28T15:33:13Z","name":"Phishing domain: agriculturaleproexporters.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agriculturaleproexporters.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agriculturaleproexporters.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-28T15:33:13Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agriculturaleproexporters.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--514eaa97-b434-5614-9438-ba6ddc2bc2e9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-19T08:07:40Z","modified":"2025-10-19T08:07:40Z","name":"Phishing domain: agrireitstockwealth.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating revolut. Report & evidence: https://phishdestroy.io/domain/agrireitstockwealth.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agrireitstockwealth.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-19T08:07:40Z","labels":["malicious-activity","phishing","brand:revolut"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agrireitstockwealth.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b86e644-1b03-5c28-b8bf-9d23d32ffbe1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T18:40:07Z","modified":"2026-08-09T18:40:07Z","name":"Phishing domain: agristorduetorri.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agristorduetorri.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agristorduetorri.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T18:40:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agristorduetorri.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fea3de0d-b337-5c8e-a6b8-95c26738e392","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:13Z","modified":"2026-02-26T23:22:13Z","name":"Phishing domain: agroclimatenews.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/agroclimatenews.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agroclimatenews.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:13Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agroclimatenews.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d481d8a-f57c-5faa-8520-ca075f1851dd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:58Z","modified":"2026-02-26T23:21:58Z","name":"Phishing domain: agroencinar.es","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agroencinar.es","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agroencinar.es']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:58Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agroencinar.es"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8524dc4d-0a90-5505-a2a8-d7ab8652dc29","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-01T02:10:46Z","modified":"2026-06-01T02:10:46Z","name":"Phishing domain: agrofertinvestment.live","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agrofertinvestment.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agrofertinvestment.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-01T02:10:46Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agrofertinvestment.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c33c4974-b454-5bd3-87b3-d7205b25d7c1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:52:21Z","modified":"2026-07-27T04:52:21Z","name":"Phishing domain: agrofinance-autoearning.cloud","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agrofinance-autoearning.cloud","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agrofinance-autoearning.cloud']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:52:21Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agrofinance-autoearning.cloud"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad6e0404-3bd0-5ed1-9414-74418e354aa9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T07:02:12Z","modified":"2026-07-27T07:02:12Z","name":"Phishing domain: agrofunds.info","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agrofunds.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agrofunds.info']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T07:02:12Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agrofunds.info"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--44269661-29d3-520b-bca5-0c12bf216f50","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T07:02:12Z","modified":"2026-07-27T07:02:12Z","name":"Phishing domain: agroidbit.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Base. Report & evidence: https://phishdestroy.io/domain/agroidbit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agroidbit.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T07:02:12Z","labels":["malicious-activity","phishing","brand:base"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agroidbit.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3560586a-8bfa-59d1-b791-cbf7400c1eb8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T05:29:43Z","modified":"2026-07-27T05:29:43Z","name":"Phishing domain: agromina.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agromina.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agromina.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T05:29:43Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agromina.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--418d5ba2-2a86-5d0b-b0f3-d16ba4961f8c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:57Z","modified":"2026-02-26T23:21:57Z","name":"Phishing domain: agronavacommunity.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agronavacommunity.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agronavacommunity.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:57Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agronavacommunity.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e52d9024-6b9d-5329-a6bb-c173e552ddb8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:54Z","modified":"2026-02-26T23:23:54Z","name":"Phishing domain: agronavacommunity.com.pacific-vaulthub.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agronavacommunity.com.pacific-vaulthub.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agronavacommunity.com.pacific-vaulthub.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:54Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agronavacommunity.com.pacific-vaulthub.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb071671-dae2-5c75-a9fc-3445c8326fff","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:58Z","modified":"2026-02-26T23:20:58Z","name":"Phishing domain: agroplasticosla15.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agroplasticosla15.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agroplasticosla15.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:58Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agroplasticosla15.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb1d2032-c59e-5d4b-aaff-12f658888653","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-23T17:29:18Z","modified":"2026-03-23T17:29:18Z","name":"Phishing domain: agroprojectsdeveloserverice.appwrite.network","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agroprojectsdeveloserverice.appwrite.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agroprojectsdeveloserverice.appwrite.network']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-23T17:29:18Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agroprojectsdeveloserverice.appwrite.network"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c569329-35e0-55dd-a42a-8509c3faa30c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-06T15:46:52Z","modified":"2026-04-06T15:46:52Z","name":"Phishing domain: agrorotina.app.br","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agrorotina.app.br","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agrorotina.app.br']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-06T15:46:52Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agrorotina.app.br"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9be8c00e-1452-5ff1-b699-e670cce6fe77","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-18T13:48:06Z","modified":"2026-03-18T13:48:06Z","name":"Phishing domain: agrosabor.ec","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating base. Report & evidence: https://phishdestroy.io/domain/agrosabor.ec","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agrosabor.ec']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-18T13:48:06Z","labels":["malicious-activity","phishing","brand:base"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agrosabor.ec"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9e0314e-1adb-5d05-a9eb-54ae8a0eacb3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-10T14:34:51Z","modified":"2026-06-10T14:34:51Z","name":"Phishing domain: agrotrade.co.in","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating alibaba. Report & evidence: https://phishdestroy.io/domain/agrotrade.co.in","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agrotrade.co.in']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-10T14:34:51Z","labels":["malicious-activity","phishing","brand:alibaba"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agrotrade.co.in"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--098efd1b-5111-5b2f-9398-ba16addbeb86","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-07T16:34:46Z","modified":"2025-08-07T16:34:46Z","name":"Phishing domain: agrowealthsavings.pro","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating base. Report & evidence: https://phishdestroy.io/domain/agrowealthsavings.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agrowealthsavings.pro']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-07T16:34:46Z","labels":["malicious-activity","phishing","brand:base"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agrowealthsavings.pro"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--10de8001-0c1a-5b71-a675-bcdcf731b648","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-27T15:13:41Z","modified":"2026-04-27T15:13:41Z","name":"Phishing domain: agrrements-contract.onrender.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agrrements-contract.onrender.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agrrements-contract.onrender.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-27T15:13:41Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agrrements-contract.onrender.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--228df8b1-c536-5191-be74-5d5e1a349da0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-20T17:01:08Z","modified":"2025-09-20T17:01:08Z","name":"Phishing domain: agsglobalmovers.online","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating dhl. Report & evidence: https://phishdestroy.io/domain/agsglobalmovers.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agsglobalmovers.online']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-20T17:01:08Z","labels":["malicious-activity","phishing","brand:dhl"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agsglobalmovers.online"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a3a5301-c8d3-57d5-96d3-745a3535919c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:29Z","modified":"2026-02-26T23:21:29Z","name":"Phishing domain: agt-sushi.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating SushiSwap. Report & evidence: https://phishdestroy.io/domain/agt-sushi.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agt-sushi.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:29Z","labels":["malicious-activity","phishing","brand:sushiswap"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agt-sushi.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2934979-044a-5074-a33c-1d65fd24e611","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-06T02:07:05Z","modified":"2026-08-06T02:07:05Z","name":"Phishing domain: agtechsolar.shop","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agtechsolar.shop","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agtechsolar.shop']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-06T02:07:05Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agtechsolar.shop"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a81105e-8180-579e-95f2-6f99fa58a4b2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-27T11:38:24Z","modified":"2025-10-27T11:38:24Z","name":"Phishing domain: agthqbpwqtwjmjrtlvbrbxhzyvuwsbjbnvo.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/agthqbpwqtwjmjrtlvbrbxhzyvuwsbjbnvo.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agthqbpwqtwjmjrtlvbrbxhzyvuwsbjbnvo.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-27T11:38:24Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agthqbpwqtwjmjrtlvbrbxhzyvuwsbjbnvo.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b33341f-9728-5164-bee0-2705e612250a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-22T11:45:11Z","modified":"2026-07-22T11:45:11Z","name":"Phishing domain: agua-assassina.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aruba. Report & evidence: https://phishdestroy.io/domain/agua-assassina.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agua-assassina.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-22T11:45:11Z","labels":["malicious-activity","phishing","brand:aruba"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agua-assassina.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0803085e-52ad-50d9-be27-8e56eb019f8c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-27T13:48:07Z","modified":"2026-03-27T13:48:07Z","name":"Phishing domain: aguero-casino.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aguero-casino.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aguero-casino.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-27T13:48:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aguero-casino.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--59047b08-157a-56e5-82b3-c0799010cf7a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T06:27:24Z","modified":"2026-06-15T06:27:24Z","name":"Phishing domain: aguerocasinoplayar.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aguerocasinoplayar.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aguerocasinoplayar.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T06:27:24Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aguerocasinoplayar.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3562b5f-046d-5e79-906d-6fab73c2eb4f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-06T15:41:02Z","modified":"2026-04-06T15:41:02Z","name":"Phishing domain: agustindidiego.vercel.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agustindidiego.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agustindidiego.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-06T15:41:02Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agustindidiego.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cacfb83e-9bbd-5f99-a90c-137aebca721e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-20T21:43:06Z","modified":"2025-10-20T21:43:06Z","name":"Phishing domain: agustinmartel.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/agustinmartel.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agustinmartel.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-20T21:43:06Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agustinmartel.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1638a456-9042-5be0-82f0-338e34b54e34","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T17:36:37Z","modified":"2026-02-26T17:36:37Z","name":"Phishing domain: agvatatili.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/agvatatili.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'agvatatili.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T17:36:37Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/agvatatili.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--922a0ac2-220d-5394-a5ce-3861771cf866","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-30T20:51:31Z","modified":"2026-03-30T20:51:31Z","name":"Phishing domain: aha04346.vercel.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aha04346.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aha04346.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-30T20:51:31Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aha04346.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--61ca89aa-8fa1-5923-b02b-45cfc1ef076a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-03T09:54:03Z","modified":"2025-09-03T09:54:03Z","name":"Phishing domain: ahamv.my","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/ahamv.my","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahamv.my']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-03T09:54:03Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ahamv.my"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc33c6f1-d894-5b98-9c2b-f09ccb5e7f6b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-02T00:45:25Z","modified":"2025-12-02T00:45:25Z","name":"Phishing domain: ahaoinn.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ahaoinn.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahaoinn.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-02T00:45:25Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ahaoinn.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c66be8d-c077-53b3-a2c4-1ce6fda133e4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-05T12:04:45Z","modified":"2025-11-05T12:04:45Z","name":"Phishing domain: ahcoin.gemini-pro.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Gemini. Report & evidence: https://phishdestroy.io/domain/ahcoin.gemini-pro.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahcoin.gemini-pro.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-05T12:04:45Z","labels":["malicious-activity","phishing","brand:gemini"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ahcoin.gemini-pro.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d5c5559-61d2-5ec7-a3a9-55bba5a4e166","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:41Z","modified":"2026-02-26T23:23:41Z","name":"Phishing domain: ahcu.online","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating facebook. Report & evidence: https://phishdestroy.io/domain/ahcu.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahcu.online']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:41Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ahcu.online"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c00d8b2e-9506-5414-932c-937564eb1862","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:27Z","modified":"2026-02-26T23:24:27Z","name":"Phishing domain: ahcu.online.fhcu.online","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ahcu.online.fhcu.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahcu.online.fhcu.online']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:27Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ahcu.online.fhcu.online"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--875e49c2-02a8-5f40-842b-75916580dfe9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:43Z","modified":"2026-02-26T23:20:43Z","name":"Phishing domain: ahcunion.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ahcunion.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahcunion.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:43Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ahcunion.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--29169564-428d-5454-a39e-bfe95a75a0d0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-24T16:51:34Z","modified":"2026-02-24T16:51:34Z","name":"Phishing domain: ahdianity.jumpingcrab.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating amazon. Report & evidence: https://phishdestroy.io/domain/ahdianity.jumpingcrab.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahdianity.jumpingcrab.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-24T16:51:34Z","labels":["malicious-activity","phishing","brand:amazon"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ahdianity.jumpingcrab.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5acdc63-d190-5998-887c-13d0902e3dca","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-27T16:51:27Z","modified":"2025-11-27T16:51:27Z","name":"Phishing domain: ahhhh.pe.kr","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ahhhh.pe.kr","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahhhh.pe.kr']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-27T16:51:27Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ahhhh.pe.kr"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--daa21a5e-5eca-59dd-8164-9cfc62b20d96","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-07T15:54:38Z","modified":"2025-09-07T15:54:38Z","name":"Phishing domain: ahi.org.ng","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/ahi.org.ng","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahi.org.ng']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-07T15:54:38Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ahi.org.ng"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad6a35fd-bc0b-5733-904d-b39ec5921a95","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:16Z","modified":"2026-02-26T23:21:16Z","name":"Phishing domain: ahi.org.ng.smartrecord.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/ahi.org.ng.smartrecord.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahi.org.ng.smartrecord.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:16Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ahi.org.ng.smartrecord.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e15a83c-3f9d-5307-980d-b265993951a1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-20T19:21:44Z","modified":"2026-04-20T19:21:44Z","name":"Phishing domain: ahje-r5.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Apple. Report & evidence: https://phishdestroy.io/domain/ahje-r5.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahje-r5.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-20T19:21:44Z","labels":["malicious-activity","phishing","brand:apple"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ahje-r5.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4083fdd8-cd7c-51ab-8e61-f841d35ec437","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-24T03:16:55Z","modified":"2026-03-24T03:16:55Z","name":"Phishing domain: ahmad-344.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating netflix. Report & evidence: https://phishdestroy.io/domain/ahmad-344.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahmad-344.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-24T03:16:55Z","labels":["malicious-activity","phishing","brand:netflix"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ahmad-344.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--26126f16-1915-5a38-8612-086a7e7d0c10","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-15T03:10:15Z","modified":"2026-04-15T03:10:15Z","name":"Phishing domain: ahmadhussain99.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Microsoft. Report & evidence: https://phishdestroy.io/domain/ahmadhussain99.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahmadhussain99.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-15T03:10:15Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ahmadhussain99.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6dc80159-56f8-5a75-ba65-48be317186f9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-07T15:55:09Z","modified":"2025-09-07T15:55:09Z","name":"Phishing domain: ahmadmdconstruction.com.ng","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ahmadmdconstruction.com.ng","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahmadmdconstruction.com.ng']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-07T15:55:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ahmadmdconstruction.com.ng"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e64a9cc5-5161-5dd2-b50f-4dca020ba40a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-15T15:14:12Z","modified":"2026-04-15T15:14:12Z","name":"Phishing domain: ahmadtazkaragi.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericbanking. Report & evidence: https://phishdestroy.io/domain/ahmadtazkaragi.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahmadtazkaragi.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-15T15:14:12Z","labels":["malicious-activity","phishing","brand:genericbanking"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ahmadtazkaragi.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3aef7eb2-be27-5135-99ae-921059d51969","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-16T21:31:22Z","modified":"2026-05-16T21:31:22Z","name":"Phishing domain: ahmed-bytes.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating instagram. Report & evidence: https://phishdestroy.io/domain/ahmed-bytes.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahmed-bytes.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-16T21:31:22Z","labels":["malicious-activity","phishing","brand:instagram"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ahmed-bytes.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd536b00-7012-5912-9961-0ea048693d7c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-04T11:58:48Z","modified":"2026-05-04T11:58:48Z","name":"Phishing domain: ahmed-qureshi-dev.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating netflix. Report & evidence: https://phishdestroy.io/domain/ahmed-qureshi-dev.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahmed-qureshi-dev.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-04T11:58:48Z","labels":["malicious-activity","phishing","brand:netflix"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ahmed-qureshi-dev.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8e019eb-80bd-5fce-aa52-4b8dadf8728f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-22T09:20:05Z","modified":"2026-05-22T09:20:05Z","name":"Phishing domain: ahmedold111.github.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ahmedold111.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahmedold111.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-22T09:20:05Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ahmedold111.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--136c928c-3be2-51a0-b605-00c4b46d3d0e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-21T03:17:57Z","modified":"2026-04-21T03:17:57Z","name":"Phishing domain: ahmedraza-176.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Microsoft. Report & evidence: https://phishdestroy.io/domain/ahmedraza-176.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahmedraza-176.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-21T03:17:57Z","labels":["malicious-activity","phishing","brand:microsoft"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ahmedraza-176.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--886e7182-b51f-5ad6-a080-2dd4fcf52579","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-29T14:52:20Z","modified":"2026-07-29T14:52:20Z","name":"Phishing domain: ahmedraza-devs.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating amazon. Report & evidence: https://phishdestroy.io/domain/ahmedraza-devs.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahmedraza-devs.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-29T14:52:20Z","labels":["malicious-activity","phishing","brand:amazon"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ahmedraza-devs.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1c7a152-8de8-51a1-9840-e7d8ad61f70a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-01T20:50:04Z","modified":"2026-04-01T20:50:04Z","name":"Phishing domain: ahmedreo4.vercel.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ahmedreo4.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahmedreo4.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-01T20:50:04Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ahmedreo4.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--21f7ee67-d335-5e1b-941e-944b98b0bb87","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-15T15:18:13Z","modified":"2026-04-15T15:18:13Z","name":"Phishing domain: ahmedsiddiqui1948-tech.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating amazon. Report & evidence: https://phishdestroy.io/domain/ahmedsiddiqui1948-tech.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahmedsiddiqui1948-tech.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-15T15:18:13Z","labels":["malicious-activity","phishing","brand:amazon"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ahmedsiddiqui1948-tech.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--46a76e84-c1b4-5909-a40f-21138541a125","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-24T12:29:52Z","modified":"2026-06-24T12:29:52Z","name":"Phishing domain: ahmetisk.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Netflix. Report & evidence: https://phishdestroy.io/domain/ahmetisk.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahmetisk.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-24T12:29:52Z","labels":["malicious-activity","phishing","brand:netflix"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ahmetisk.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2aabb28-a1ab-53d9-aca6-1865716ae372","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-14T16:22:21Z","modified":"2026-04-14T16:22:21Z","name":"Phishing domain: ahmistics-glitch.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating netflix. Report & evidence: https://phishdestroy.io/domain/ahmistics-glitch.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahmistics-glitch.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-14T16:22:21Z","labels":["malicious-activity","phishing","brand:netflix"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ahmistics-glitch.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6dab93ed-28c1-559f-8b8e-d477ef1a1a8a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-07T10:40:41Z","modified":"2026-08-07T10:40:41Z","name":"Phishing domain: ahoraconbdvobtenuncredito.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bancodevenezuela. Report & evidence: https://phishdestroy.io/domain/ahoraconbdvobtenuncredito.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahoraconbdvobtenuncredito.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-07T10:40:41Z","labels":["malicious-activity","phishing","brand:bancodevenezuela"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ahoraconbdvobtenuncredito.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3761076-7aa0-5071-97ad-ec6a71e38c7d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-22T03:27:30Z","modified":"2026-03-22T03:27:30Z","name":"Phishing domain: ahoy-boats.co.uk","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/ahoy-boats.co.uk","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahoy-boats.co.uk']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-22T03:27:30Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ahoy-boats.co.uk"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--14678ab3-41ac-56cd-9e97-ce2f15f78bd4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-27T17:04:40Z","modified":"2025-11-27T17:04:40Z","name":"Phishing domain: ahrariraq.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating whatsapp. Report & evidence: https://phishdestroy.io/domain/ahrariraq.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahrariraq.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-27T17:04:40Z","labels":["malicious-activity","phishing","brand:whatsapp"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ahrariraq.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef2590fa-c4f5-5039-85c4-4829c4d075a0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-16T17:23:00Z","modified":"2025-08-16T17:23:00Z","name":"Phishing domain: ahrasjonews.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Facebook. Report & evidence: https://phishdestroy.io/domain/ahrasjonews.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahrasjonews.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-16T17:23:00Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ahrasjonews.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--90791a86-2876-56d5-8bb5-4ee6e3f134dd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-07-18T09:56:10Z","modified":"2025-07-18T09:56:10Z","name":"Phishing domain: ahrefs.site","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ahrefs.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahrefs.site']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-07-18T09:56:10Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ahrefs.site"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--73b0bfb5-3810-522c-bf82-6debfe6e3bd4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-12T21:35:09Z","modified":"2026-06-12T21:35:09Z","name":"Phishing domain: ahsltsbriliance.shop","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ahsltsbriliance.shop","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahsltsbriliance.shop']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-12T21:35:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ahsltsbriliance.shop"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ea5b7fc-fe9d-5c93-abc0-d2e3759dfd3e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-05T15:20:28Z","modified":"2026-01-05T15:20:28Z","name":"Phishing domain: ahuko.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Blast. Report & evidence: https://phishdestroy.io/domain/ahuko.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahuko.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-05T15:20:28Z","labels":["malicious-activity","phishing","brand:blast"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ahuko.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--abe40055-6d58-565b-ad7b-385c969f9e1d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:58Z","modified":"2026-02-26T23:19:58Z","name":"Phishing domain: ahuliqq.onelink.me","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating blast. Report & evidence: https://phishdestroy.io/domain/ahuliqq.onelink.me","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahuliqq.onelink.me']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:58Z","labels":["malicious-activity","phishing","brand:blast"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ahuliqq.onelink.me"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b611e78-c6fd-546c-a6c3-2103c39154bb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-29T15:53:16Z","modified":"2026-03-29T15:53:16Z","name":"Phishing domain: ahv3ctpms4e.it-support-group.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ahv3ctpms4e.it-support-group.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahv3ctpms4e.it-support-group.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-29T15:53:16Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ahv3ctpms4e.it-support-group.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--177a6b42-c777-5f4b-904c-77384c38d957","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-07T01:11:08Z","modified":"2026-06-07T01:11:08Z","name":"Phishing domain: ahv3ctpms4e.tokenvalidate.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ahv3ctpms4e.tokenvalidate.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ahv3ctpms4e.tokenvalidate.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-07T01:11:08Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ahv3ctpms4e.tokenvalidate.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b0b316d-d8f7-566e-acbd-bb47a8046337","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-13T08:35:21Z","modified":"2026-04-13T08:35:21Z","name":"Phishing domain: ai-9xf.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ai-9xf.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-9xf.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-13T08:35:21Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-9xf.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aff99bb3-0770-54ee-ae7e-e36567b6cd6d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-28T16:00:19Z","modified":"2026-06-28T16:00:19Z","name":"Phishing domain: ai-agents-trading.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ai-agents-trading.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-agents-trading.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-28T16:00:19Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-agents-trading.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e06ad7a-57fa-51b8-bc63-2d2c0f70e5d4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-28T15:35:04Z","modified":"2026-06-28T15:35:04Z","name":"Phishing domain: ai-agents-wallets.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ai-agents-wallets.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-agents-wallets.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-28T15:35:04Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-agents-wallets.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdfede27-fa8e-5bac-8d35-0a608182d4eb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-25T05:29:04Z","modified":"2025-10-25T05:29:04Z","name":"Phishing domain: ai-airdrop.top","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ai-airdrop.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-airdrop.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-25T05:29:04Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-airdrop.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e1dd678-cd5c-5e8e-b5e5-fdc9e938bb19","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-12T19:26:59Z","modified":"2026-03-12T19:26:59Z","name":"Phishing domain: ai-amlbot.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating AMLBot. Report & evidence: https://phishdestroy.io/domain/ai-amlbot.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-amlbot.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-12T19:26:59Z","labels":["malicious-activity","phishing","brand:amlbot"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-amlbot.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--294964d3-c584-582f-9bb1-d6edbdde64a1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-17T19:14:06Z","modified":"2026-02-17T19:14:06Z","name":"Phishing domain: ai-app-crypto.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Crypto.com. Report & evidence: https://phishdestroy.io/domain/ai-app-crypto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-app-crypto.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-17T19:14:06Z","labels":["malicious-activity","phishing","brand:crypto.com"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-app-crypto.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--74181f32-3b04-5cde-9c6b-125ff6647c2a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:36Z","modified":"2026-02-26T23:20:36Z","name":"Phishing domain: ai-appointment-booking.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ai-appointment-booking.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-appointment-booking.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:36Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-appointment-booking.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--84f3435c-55ea-5f57-88c6-4d74e39d6e47","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T05:27:07Z","modified":"2026-02-13T05:27:07Z","name":"Phishing domain: ai-appusd.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ai-appusd.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-appusd.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T05:27:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-appusd.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fe6ecc6-349b-5407-a252-d4684775f7c9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-07-27T06:53:57Z","modified":"2025-07-27T06:53:57Z","name":"Phishing domain: ai-centadecentralized.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ai-centadecentralized.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-centadecentralized.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-07-27T06:53:57Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-centadecentralized.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--420ae1a2-c19b-5963-b390-47f8a5c9379f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-07-29T11:47:21Z","modified":"2025-07-29T11:47:21Z","name":"Phishing domain: ai-centazdecentralized.pro","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ethereum. Report & evidence: https://phishdestroy.io/domain/ai-centazdecentralized.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-centazdecentralized.pro']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-07-29T11:47:21Z","labels":["malicious-activity","phishing","brand:ethereum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-centazdecentralized.pro"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7181b7a3-ed04-5c95-a2a8-bbb03fc74702","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-08T11:30:26Z","modified":"2025-08-08T11:30:26Z","name":"Phishing domain: ai-centradecentralized.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating ethereum. Report & evidence: https://phishdestroy.io/domain/ai-centradecentralized.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-centradecentralized.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-08T11:30:26Z","labels":["malicious-activity","phishing","brand:ethereum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-centradecentralized.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--49188004-ce2f-5348-ad2e-63f0b051cb57","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-07T01:10:48Z","modified":"2026-06-07T01:10:48Z","name":"Phishing domain: ai-chatbot-starter-39otfi6ibf.edgeone.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating [\"celer\"]. Report & evidence: https://phishdestroy.io/domain/ai-chatbot-starter-39otfi6ibf.edgeone.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-chatbot-starter-39otfi6ibf.edgeone.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-07T01:10:48Z","labels":["malicious-activity","phishing","brand:[\"celer\"]"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-chatbot-starter-39otfi6ibf.edgeone.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9d202a9-fa49-5f42-978e-8a5812ef184d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-07T01:10:42Z","modified":"2026-06-07T01:10:42Z","name":"Phishing domain: ai-chatbot-starter-jfkrkvshbu.edgeone.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ai-chatbot-starter-jfkrkvshbu.edgeone.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-chatbot-starter-jfkrkvshbu.edgeone.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-07T01:10:42Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-chatbot-starter-jfkrkvshbu.edgeone.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--853e2757-81f8-55aa-92a9-e1545c29a42f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-30T11:17:13Z","modified":"2025-11-30T11:17:13Z","name":"Phishing domain: ai-claim-regent.help","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ai-claim-regent.help","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-claim-regent.help']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-30T11:17:13Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-claim-regent.help"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--532cb6f6-8cd1-564f-bf22-f126e09d92cd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-06T19:43:21Z","modified":"2025-12-06T19:43:21Z","name":"Phishing domain: ai-community-cloudflare.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/ai-community-cloudflare.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-community-cloudflare.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-06T19:43:21Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-community-cloudflare.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a8c3a9f-da8e-51a2-a953-bdb2f308d5ee","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-12T15:03:52Z","modified":"2026-04-12T15:03:52Z","name":"Phishing domain: ai-compliance-check.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ai-compliance-check.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-compliance-check.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-12T15:03:52Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-compliance-check.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f5c7a84-421c-513c-bb0f-f80b03626d80","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-14T01:30:39Z","modified":"2025-12-14T01:30:39Z","name":"Phishing domain: ai-connexlimited.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/ai-connexlimited.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-connexlimited.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-14T01:30:39Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-connexlimited.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8d00a46-00f7-5bbe-89ba-e36469e6fa12","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-12T16:30:02Z","modified":"2026-03-12T16:30:02Z","name":"Phishing domain: ai-cryptex.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Facebook. Report & evidence: https://phishdestroy.io/domain/ai-cryptex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-cryptex.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-12T16:30:02Z","labels":["malicious-activity","phishing","brand:facebook"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-cryptex.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8f3cdbc-048e-543a-83fa-18f84da91f59","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-05T16:04:26Z","modified":"2025-12-05T16:04:26Z","name":"Phishing domain: ai-cryptohopper.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/ai-cryptohopper.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-cryptohopper.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-05T16:04:26Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-cryptohopper.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf3a9707-f94e-5ddd-a2ee-9c808d382e5f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-06T12:31:58Z","modified":"2026-07-06T12:31:58Z","name":"Phishing domain: ai-dad.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating cryptoscam. Report & evidence: https://phishdestroy.io/domain/ai-dad.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-dad.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-06T12:31:58Z","labels":["malicious-activity","phishing","brand:cryptoscam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-dad.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5243d158-8dc1-560c-882f-649514a3062e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-21T05:42:24Z","modified":"2026-06-21T05:42:24Z","name":"Phishing domain: ai-defichain.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ai-defichain.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-defichain.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-21T05:42:24Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-defichain.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4d57fc7-51b3-5433-84f3-809f762ae082","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-22T23:45:13Z","modified":"2026-06-22T23:45:13Z","name":"Phishing domain: ai-detect.online","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ai-detect.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-detect.online']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-22T23:45:13Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-detect.online"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1108a6a4-fdda-5a94-8616-ffa908c2a507","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:23Z","modified":"2026-02-26T23:21:23Z","name":"Phishing domain: ai-distributions.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/ai-distributions.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-distributions.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:23Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-distributions.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--722e201f-dbea-53a2-b7ee-d0bbe1ff002e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:23Z","modified":"2026-02-26T23:24:23Z","name":"Phishing domain: ai-draw-nexus-gt.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/ai-draw-nexus-gt.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-draw-nexus-gt.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:23Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-draw-nexus-gt.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--58291c92-6e5f-5d66-9255-950b59d4c0e3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-08T15:13:24Z","modified":"2026-04-08T15:13:24Z","name":"Phishing domain: ai-egao.github.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating netflix. Report & evidence: https://phishdestroy.io/domain/ai-egao.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-egao.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-08T15:13:24Z","labels":["malicious-activity","phishing","brand:netflix"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-egao.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0432f457-991d-579a-954e-5ae465885893","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:21Z","modified":"2026-02-26T23:23:21Z","name":"Phishing domain: ai-en-coinpro-login.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ai-en-coinpro-login.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-en-coinpro-login.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:21Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-en-coinpro-login.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e7cfa72-2d55-58ce-96c8-f01511c6b39a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-07-12T20:20:59Z","modified":"2025-07-12T20:20:59Z","name":"Phishing domain: ai-eva.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ai-eva.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-eva.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-07-12T20:20:59Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-eva.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c7df72e-fa8f-593d-8b9a-f8cd70c30feb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-11T03:10:49Z","modified":"2026-04-11T03:10:49Z","name":"Phishing domain: ai-fortuna.next-cryptolist.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ai-fortuna.next-cryptolist.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-fortuna.next-cryptolist.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-11T03:10:49Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-fortuna.next-cryptolist.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--14624930-222c-536f-9259-33b7af964cf0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-13T03:47:35Z","modified":"2026-03-13T03:47:35Z","name":"Phishing domain: ai-gateway.velvuresti.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Kraken. Report & evidence: https://phishdestroy.io/domain/ai-gateway.velvuresti.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-gateway.velvuresti.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-13T03:47:35Z","labels":["malicious-activity","phishing","brand:kraken"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-gateway.velvuresti.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--902a0cb7-11dc-5ce6-9972-bc43bbf70868","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-11T03:10:55Z","modified":"2026-04-11T03:10:55Z","name":"Phishing domain: ai-gcr.entry-cryptolist.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ai-gcr.entry-cryptolist.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-gcr.entry-cryptolist.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-11T03:10:55Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-gcr.entry-cryptolist.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f70894d-d747-5a5c-841d-f8b55b9d30b4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-11T03:11:03Z","modified":"2026-04-11T03:11:03Z","name":"Phishing domain: ai-glasses.next-cryptolist.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ai-glasses.next-cryptolist.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-glasses.next-cryptolist.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-11T03:11:03Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-glasses.next-cryptolist.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--50c07a6b-e421-5fe2-beb1-344f159b014f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-07T01:10:49Z","modified":"2026-06-07T01:10:49Z","name":"Phishing domain: ai-image-generator-starter-qi0pumsx4i.edgeone.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ai-image-generator-starter-qi0pumsx4i.edgeone.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-image-generator-starter-qi0pumsx4i.edgeone.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-07T01:10:49Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-image-generator-starter-qi0pumsx4i.edgeone.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bfe2d1c-9247-52b3-bda3-9a5bed0e1aab","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-07T01:10:37Z","modified":"2026-06-07T01:10:37Z","name":"Phishing domain: ai-image-generator-starter-u6luwnfe98.edgeone.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ai-image-generator-starter-u6luwnfe98.edgeone.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-image-generator-starter-u6luwnfe98.edgeone.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-07T01:10:37Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-image-generator-starter-u6luwnfe98.edgeone.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f041a926-f302-55bc-ab65-57e72d6c9145","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-07T01:10:40Z","modified":"2026-06-07T01:10:40Z","name":"Phishing domain: ai-image-generator-starter-ul8p6nh0ul.edgeone.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ai-image-generator-starter-ul8p6nh0ul.edgeone.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-image-generator-starter-ul8p6nh0ul.edgeone.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-07T01:10:40Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-image-generator-starter-ul8p6nh0ul.edgeone.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--90ded1f3-24cd-547c-a94f-10d24ef6c1db","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-03T17:37:44Z","modified":"2025-09-03T17:37:44Z","name":"Phishing domain: ai-invest-app-com.financecryptoworld.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating binance. Report & evidence: https://phishdestroy.io/domain/ai-invest-app-com.financecryptoworld.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-invest-app-com.financecryptoworld.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-03T17:37:44Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-invest-app-com.financecryptoworld.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad60efa3-aef2-5c3a-88b2-ffb1c8930bfb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-17T17:12:57Z","modified":"2026-02-17T17:12:57Z","name":"Phishing domain: ai-investfx.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/ai-investfx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-investfx.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-17T17:12:57Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-investfx.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--049373b5-6ac6-5370-8c36-bbe31066697a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-12T11:52:03Z","modified":"2025-11-12T11:52:03Z","name":"Phishing domain: ai-isaac.gitbook.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ai-isaac.gitbook.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-isaac.gitbook.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-12T11:52:03Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-isaac.gitbook.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3747355f-a12f-5226-996e-0285dcaa1992","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-07T01:10:35Z","modified":"2026-06-07T01:10:35Z","name":"Phishing domain: ai-ka-crm-0yjxnrtnro.edgeone.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ai-ka-crm-0yjxnrtnro.edgeone.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-ka-crm-0yjxnrtnro.edgeone.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-07T01:10:35Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-ka-crm-0yjxnrtnro.edgeone.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4a07b35-54d9-5e1a-b46f-22d24a1e1aff","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-10T14:27:35Z","modified":"2026-06-10T14:27:35Z","name":"Phishing domain: ai-ledger-docs.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/ai-ledger-docs.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-ledger-docs.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-10T14:27:35Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-ledger-docs.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--be300e54-c5c8-5a37-a878-929ad5bf721b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-02T15:12:14Z","modified":"2026-05-02T15:12:14Z","name":"Phishing domain: ai-ledgr-en-us.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/ai-ledgr-en-us.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-ledgr-en-us.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-02T15:12:14Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-ledgr-en-us.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7827448d-90d8-5a44-ad21-d5f6bb8bce0a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-28T18:25:33Z","modified":"2026-04-28T18:25:33Z","name":"Phishing domain: ai-lightchain.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ai-lightchain.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-lightchain.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-28T18:25:33Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-lightchain.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--84b28602-3a85-565c-8a9f-11bd686b0e3a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-12T03:52:46Z","modified":"2026-06-12T03:52:46Z","name":"Phishing domain: ai-like.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ai-like.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-like.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-12T03:52:46Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-like.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fa9e696-29ef-514b-adcf-81ec5363579a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-22T17:58:00Z","modified":"2026-02-22T17:58:00Z","name":"Phishing domain: ai-nexora.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating discord. Report & evidence: https://phishdestroy.io/domain/ai-nexora.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-nexora.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-22T17:58:00Z","labels":["malicious-activity","phishing","brand:discord"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-nexora.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9451096b-6cc7-5d88-8bdf-ce6b416729b8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-08T21:10:45Z","modified":"2026-03-08T21:10:45Z","name":"Phishing domain: ai-nexora.sbs","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ai-nexora.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-nexora.sbs']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-08T21:10:45Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-nexora.sbs"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f26cec31-d44a-52c5-9ef5-ba83d8e75bc2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:23Z","modified":"2026-02-26T23:24:23Z","name":"Phishing domain: ai-nodesyntax.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/ai-nodesyntax.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-nodesyntax.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:23Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-nodesyntax.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c173904-2e8f-5111-8a0e-7811ab000b13","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-07T01:10:44Z","modified":"2026-06-07T01:10:44Z","name":"Phishing domain: ai-okr-ee5lovzf96.edgeone.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ai-okr-ee5lovzf96.edgeone.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-okr-ee5lovzf96.edgeone.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-07T01:10:44Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-okr-ee5lovzf96.edgeone.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4360f3bd-4fb9-5b33-998d-f0656421a73a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-07T11:38:43Z","modified":"2025-08-07T11:38:43Z","name":"Phishing domain: ai-okx.asia","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating OKX. Report & evidence: https://phishdestroy.io/domain/ai-okx.asia","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-okx.asia']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-07T11:38:43Z","labels":["malicious-activity","phishing","brand:okx"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-okx.asia"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c07c3ca-59f7-5f09-bd7c-96221caf89e7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-19T05:50:41Z","modified":"2026-07-19T05:50:41Z","name":"Phishing domain: ai-openclaw.click","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/ai-openclaw.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-openclaw.click']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-19T05:50:41Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-openclaw.click"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--06041252-e7d2-5848-9fc7-2378b556df2f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-19T05:48:01Z","modified":"2026-07-19T05:48:01Z","name":"Phishing domain: ai-openclaw.digital","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/ai-openclaw.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-openclaw.digital']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-19T05:48:01Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-openclaw.digital"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a75b6ca-1bd7-55c1-b177-dd1001b69e42","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-19T05:54:24Z","modified":"2026-07-19T05:54:24Z","name":"Phishing domain: ai-openclaw.live","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/ai-openclaw.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-openclaw.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-19T05:54:24Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-openclaw.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--25cb10a8-0519-5b02-aef0-2d319811a3e2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-19T05:47:59Z","modified":"2026-07-19T05:47:59Z","name":"Phishing domain: ai-openclaw.surf","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Amazon. Report & evidence: https://phishdestroy.io/domain/ai-openclaw.surf","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-openclaw.surf']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-19T05:47:59Z","labels":["malicious-activity","phishing","brand:amazon"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-openclaw.surf"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9a78445-fdeb-540e-9cd0-7ff91cd4fa88","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-24T23:20:44Z","modified":"2026-01-24T23:20:44Z","name":"Phishing domain: ai-page-trust.created.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Trust Wallet. Report & evidence: https://phishdestroy.io/domain/ai-page-trust.created.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-page-trust.created.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-24T23:20:44Z","labels":["malicious-activity","phishing","brand:trust wallet"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-page-trust.created.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--df419951-1823-5d86-80fb-12069d22cd10","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-28T13:01:34Z","modified":"2026-03-28T13:01:34Z","name":"Phishing domain: ai-pepedoge.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/ai-pepedoge.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-pepedoge.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-28T13:01:34Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-pepedoge.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--51ea81a3-9155-5d91-a4f6-3dc1ec9a3fb3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-16T07:15:18Z","modified":"2025-12-16T07:15:18Z","name":"Phishing domain: ai-portal-rabby.framer.ai","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Rabby. Report & evidence: https://phishdestroy.io/domain/ai-portal-rabby.framer.ai","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-portal-rabby.framer.ai']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-16T07:15:18Z","labels":["malicious-activity","phishing","brand:rabby"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-portal-rabby.framer.ai"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d066b23d-43ff-50b0-9875-f128ea43f9b1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-08T14:38:57Z","modified":"2026-07-08T14:38:57Z","name":"Phishing domain: ai-powered-mining-tradingbot.online","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ai-powered-mining-tradingbot.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-powered-mining-tradingbot.online']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-08T14:38:57Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-powered-mining-tradingbot.online"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e42848f-678e-5785-b7f6-5685d5c3d6f7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-26T20:47:50Z","modified":"2025-09-26T20:47:50Z","name":"Phishing domain: ai-pro-iplex-soft.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/ai-pro-iplex-soft.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-pro-iplex-soft.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-26T20:47:50Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-pro-iplex-soft.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--25391272-2a07-524f-8c33-7fe72d9d0d72","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-04T12:55:22Z","modified":"2026-05-04T12:55:22Z","name":"Phishing domain: ai-product-builder-1nu.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ai-product-builder-1nu.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-product-builder-1nu.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-04T12:55:22Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-product-builder-1nu.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--db49eb6b-aee9-552d-909f-249722b1aae1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-07T09:31:14Z","modified":"2026-01-07T09:31:14Z","name":"Phishing domain: ai-profitengine.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating argent. Report & evidence: https://phishdestroy.io/domain/ai-profitengine.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-profitengine.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-07T09:31:14Z","labels":["malicious-activity","phishing","brand:argent"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-profitengine.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--25ed1e17-6140-504e-9ee1-6657b412eb27","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-02T15:36:58Z","modified":"2026-05-02T15:36:58Z","name":"Phishing domain: ai-qt.cyou","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/ai-qt.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-qt.cyou']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-02T15:36:58Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-qt.cyou"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--352b72c9-6656-576e-9cab-0ebe8ba0cb83","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-07-12T17:33:46Z","modified":"2025-07-12T17:33:46Z","name":"Phishing domain: ai-quanttrader.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/ai-quanttrader.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-quanttrader.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-07-12T17:33:46Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-quanttrader.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--648a0e3f-9301-5303-85e4-d7b3ef5dca9b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-21T20:28:18Z","modified":"2026-03-21T20:28:18Z","name":"Phishing domain: ai-quiver.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/ai-quiver.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-quiver.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-21T20:28:18Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-quiver.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e147669b-23a8-5f9e-b79d-91844a9fc078","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-23T15:55:42Z","modified":"2026-07-23T15:55:42Z","name":"Phishing domain: ai-rewards.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Robinhood. Report & evidence: https://phishdestroy.io/domain/ai-rewards.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-rewards.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-23T15:55:42Z","labels":["malicious-activity","phishing","brand:robinhood"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-rewards.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cbff904-3e14-581e-a83c-0f6db3d5d3eb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-10T04:52:51Z","modified":"2025-12-10T04:52:51Z","name":"Phishing domain: ai-rug.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/ai-rug.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-rug.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-10T04:52:51Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-rug.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c24db85-5f57-5fb6-8a31-7b2dbcad7e29","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-21T21:41:11Z","modified":"2026-02-21T21:41:11Z","name":"Phishing domain: ai-scans.lol","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/ai-scans.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-scans.lol']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-21T21:41:11Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-scans.lol"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--26d707b1-6ba4-560d-86fc-931f876c2183","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-01T04:55:43Z","modified":"2026-04-01T04:55:43Z","name":"Phishing domain: ai-scans.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/ai-scans.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-scans.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-01T04:55:43Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-scans.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b370e5a4-8296-5f56-a684-53ddb64f954b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-15T09:05:24Z","modified":"2026-02-15T09:05:24Z","name":"Phishing domain: ai-secure-hub.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ai-secure-hub.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-secure-hub.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-15T09:05:24Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-secure-hub.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--908de1ce-e551-56d3-81bc-39480eb846cf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T06:28:11Z","modified":"2026-06-15T06:28:11Z","name":"Phishing domain: ai-secure.work","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ai-secure.work","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-secure.work']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T06:28:11Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-secure.work"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d65eaa7-f342-5d55-92b0-47e187b7732d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-08T18:31:37Z","modified":"2026-06-08T18:31:37Z","name":"Phishing domain: ai-simplswp.wixstudio.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ai-simplswp.wixstudio.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-simplswp.wixstudio.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-08T18:31:37Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-simplswp.wixstudio.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9369188b-258e-50ce-aa9d-bbb83cb42342","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:23Z","modified":"2026-02-26T23:24:23Z","name":"Phishing domain: ai-soldapp.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/ai-soldapp.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-soldapp.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:23Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-soldapp.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dba6fc58-c3f5-50af-ba64-5d396999fae4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-24T03:30:25Z","modified":"2026-03-24T03:30:25Z","name":"Phishing domain: ai-start-trazu.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating trezor. Report & evidence: https://phishdestroy.io/domain/ai-start-trazu.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-start-trazu.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-24T03:30:25Z","labels":["malicious-activity","phishing","brand:trezor"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-start-trazu.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4c8d025-b649-53e6-be8c-8836063206d1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T18:40:07Z","modified":"2026-08-09T18:40:07Z","name":"Phishing domain: ai-start-trezorr-pubic.typedream.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Trezor. Report & evidence: https://phishdestroy.io/domain/ai-start-trezorr-pubic.typedream.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-start-trezorr-pubic.typedream.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T18:40:07Z","labels":["malicious-activity","phishing","brand:trezor"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-start-trezorr-pubic.typedream.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--05db6b65-33e0-50e4-8535-47a1897feaf3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-07T01:10:46Z","modified":"2026-06-07T01:10:46Z","name":"Phishing domain: ai-studio-k9um4hxslz.edgeone.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ai-studio-k9um4hxslz.edgeone.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-studio-k9um4hxslz.edgeone.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-07T01:10:46Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-studio-k9um4hxslz.edgeone.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2917faec-2800-54c5-b88f-b59d5d3eb65f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-11T22:30:02Z","modified":"2026-03-11T22:30:02Z","name":"Phishing domain: ai-teams10.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ai-teams10.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-teams10.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-11T22:30:02Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-teams10.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f83554e1-3786-5623-8e95-35136ac61724","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T04:45:44Z","modified":"2026-02-13T04:45:44Z","name":"Phishing domain: ai-titan.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bybit. Report & evidence: https://phishdestroy.io/domain/ai-titan.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-titan.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T04:45:44Z","labels":["malicious-activity","phishing","brand:bybit"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-titan.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fffc99b4-b5d6-51ef-9dcb-cc842e30bf5b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-02T00:17:34Z","modified":"2025-12-02T00:17:34Z","name":"Phishing domain: ai-trade.live","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating gemini. Report & evidence: https://phishdestroy.io/domain/ai-trade.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-trade.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-02T00:17:34Z","labels":["malicious-activity","phishing","brand:gemini"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-trade.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0678e155-c7b9-59ad-90e3-2223dbe05ce9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-23T12:51:23Z","modified":"2025-09-23T12:51:23Z","name":"Phishing domain: ai-trade.vault-edgex.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating avalanche. Report & evidence: https://phishdestroy.io/domain/ai-trade.vault-edgex.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-trade.vault-edgex.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-23T12:51:23Z","labels":["malicious-activity","phishing","brand:avalanche"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-trade.vault-edgex.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--878dacb2-fe93-5b04-85f4-99b98cd403f1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-20T17:52:21Z","modified":"2026-07-20T17:52:21Z","name":"Phishing domain: ai-traid.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ai-traid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-traid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-20T17:52:21Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-traid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--278c7c39-6794-50b3-8270-6f7eb9612134","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-24T21:53:43Z","modified":"2026-06-24T21:53:43Z","name":"Phishing domain: ai-traider.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ai-traider.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-traider.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-24T21:53:43Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-traider.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fc9a83e-ff77-5868-8f64-13eecb77b368","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T19:41:38Z","modified":"2026-06-15T19:41:38Z","name":"Phishing domain: ai-trezor.gitbook.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Trezor. Report & evidence: https://phishdestroy.io/domain/ai-trezor.gitbook.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-trezor.gitbook.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T19:41:38Z","labels":["malicious-activity","phishing","brand:trezor"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-trezor.gitbook.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1ec936b-ade0-5702-ae7d-74aa6c9c574c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-18T21:36:00Z","modified":"2025-08-18T21:36:00Z","name":"Phishing domain: ai-uniswaps.web.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Uniswap. Report & evidence: https://phishdestroy.io/domain/ai-uniswaps.web.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-uniswaps.web.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-18T21:36:00Z","labels":["malicious-activity","phishing","brand:uniswap"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-uniswaps.web.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcedc075-79ba-5461-b1c6-d19160b7ba1c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:34Z","modified":"2026-02-26T23:24:34Z","name":"Phishing domain: ai-uphold-sso-digtall.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/ai-uphold-sso-digtall.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-uphold-sso-digtall.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:34Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-uphold-sso-digtall.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--08f164c6-86d3-5e54-afad-1d72a5d8f18a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-21T08:11:01Z","modified":"2026-05-21T08:11:01Z","name":"Phishing domain: ai-uphold.created.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating uphold. Report & evidence: https://phishdestroy.io/domain/ai-uphold.created.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-uphold.created.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-21T08:11:01Z","labels":["malicious-activity","phishing","brand:uphold"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-uphold.created.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b6bd1e9-5e27-53f5-b75c-1aee2d1d6c16","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:48Z","modified":"2026-02-26T23:22:48Z","name":"Phishing domain: ai-uphuld-cdn.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/ai-uphuld-cdn.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-uphuld-cdn.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:48Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-uphuld-cdn.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--124dd4b4-0a8e-52b0-8ffe-093ba9b11790","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-23T20:44:20Z","modified":"2026-07-23T20:44:20Z","name":"Phishing domain: ai-vantagetrading.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Investment Scam. Report & evidence: https://phishdestroy.io/domain/ai-vantagetrading.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-vantagetrading.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-23T20:44:20Z","labels":["malicious-activity","phishing","brand:investment scam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-vantagetrading.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0d29942-1b7f-5a24-b245-c0c3a25b8064","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-11T03:10:14Z","modified":"2026-04-11T03:10:14Z","name":"Phishing domain: ai-vertex-by-virtuals.entry-cryptolist.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ai-vertex-by-virtuals.entry-cryptolist.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-vertex-by-virtuals.entry-cryptolist.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-11T03:10:14Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-vertex-by-virtuals.entry-cryptolist.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8ed112c-ee5f-522e-980b-b51816440e14","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-11T03:11:29Z","modified":"2026-04-11T03:11:29Z","name":"Phishing domain: ai-voice-agents.ai-cryptolist.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ai-voice-agents.ai-cryptolist.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-voice-agents.ai-cryptolist.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-11T03:11:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-voice-agents.ai-cryptolist.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cce3c660-9b31-56d1-a15c-b4b1e192d153","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T17:29:23Z","modified":"2026-02-26T17:29:23Z","name":"Phishing domain: ai-wallet-scout.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating backpack. Report & evidence: https://phishdestroy.io/domain/ai-wallet-scout.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-wallet-scout.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T17:29:23Z","labels":["malicious-activity","phishing","brand:backpack"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-wallet-scout.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4d9e01a-7fa4-5175-af07-1ec6d5ed8d0d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-28T12:56:41Z","modified":"2026-06-28T12:56:41Z","name":"Phishing domain: ai-wallet.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ai-wallet.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-wallet.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-28T12:56:41Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-wallet.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ccc05923-e8f2-590b-9669-b770ace4573b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:00Z","modified":"2026-02-26T23:21:00Z","name":"Phishing domain: ai-wine-ten.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating [\"twitter\"]. Report & evidence: https://phishdestroy.io/domain/ai-wine-ten.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-wine-ten.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:00Z","labels":["malicious-activity","phishing","brand:[\"twitter\"]"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-wine-ten.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--27413669-9a41-517e-be1f-190eeb1372ad","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-03T13:31:42Z","modified":"2025-12-03T13:31:42Z","name":"Phishing domain: ai-write.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ai-write.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-write.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-03T13:31:42Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-write.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0da82cd5-3515-5a39-b951-3a459d2e2775","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-29T11:16:54Z","modified":"2025-09-29T11:16:54Z","name":"Phishing domain: ai-x-protocol.netlify.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Sei. Report & evidence: https://phishdestroy.io/domain/ai-x-protocol.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-x-protocol.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-29T11:16:54Z","labels":["malicious-activity","phishing","brand:sei"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-x-protocol.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--49198ba0-046b-50a1-8ec8-a2e581482077","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T05:22:16Z","modified":"2026-02-13T05:22:16Z","name":"Phishing domain: ai-xyzverse.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ai-xyzverse.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai-xyzverse.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T05:22:16Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai-xyzverse.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--491df874-957a-59d8-9f10-9b77f5156eb2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-04T05:14:37Z","modified":"2026-08-04T05:14:37Z","name":"Phishing domain: ai.ac","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Base. Report & evidence: https://phishdestroy.io/domain/ai.ac","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai.ac']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-04T05:14:37Z","labels":["malicious-activity","phishing","brand:base"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai.ac"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--09fa0c14-dc49-5aad-97f1-5d847cfc0a2b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-03T03:31:23Z","modified":"2026-04-03T03:31:23Z","name":"Phishing domain: ai.base-app.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating [\"coinbase\"]. Report & evidence: https://phishdestroy.io/domain/ai.base-app.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai.base-app.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-03T03:31:23Z","labels":["malicious-activity","phishing","brand:[\"coinbase\"]"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai.base-app.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fae6d591-3bcb-5ed9-ba6c-634da3b83c96","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-22T19:21:42Z","modified":"2026-03-22T19:21:42Z","name":"Phishing domain: ai.cyraai.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ai.cyraai.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai.cyraai.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-22T19:21:42Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai.cyraai.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--197e122b-00ef-5b73-95f2-3cee31e600e6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-13T18:37:45Z","modified":"2026-04-13T18:37:45Z","name":"Phishing domain: ai.gomgmy.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ai.gomgmy.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai.gomgmy.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-13T18:37:45Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai.gomgmy.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--49f25e11-f738-5dff-87e6-2f3c928b6b73","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-08T15:24:23Z","modified":"2026-04-08T15:24:23Z","name":"Phishing domain: ai.hedera.hr","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ai.hedera.hr","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai.hedera.hr']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-08T15:24:23Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai.hedera.hr"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--311f3bf7-cc28-5a30-992b-340efa172fca","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T12:02:03Z","modified":"2026-07-27T12:02:03Z","name":"Phishing domain: ai.leventefazekas.hu","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ai.leventefazekas.hu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai.leventefazekas.hu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T12:02:03Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai.leventefazekas.hu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--88a625ba-6481-5def-9abb-fb387f91e163","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T19:49:21Z","modified":"2026-08-09T19:49:21Z","name":"Phishing domain: ai.myaifarmtrade.info","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/ai.myaifarmtrade.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai.myaifarmtrade.info']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T19:49:21Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai.myaifarmtrade.info"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab314391-7b01-58b0-864e-9a778e4a16d4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-27T22:38:34Z","modified":"2026-02-27T22:38:34Z","name":"Phishing domain: ai.predicts.top","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ai.predicts.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai.predicts.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-27T22:38:34Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai.predicts.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb92e72f-8322-5c77-a3de-95b3aaf36d52","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:10Z","modified":"2026-02-26T23:20:10Z","name":"Phishing domain: ai.quantumkledger.online","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aave. Report & evidence: https://phishdestroy.io/domain/ai.quantumkledger.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai.quantumkledger.online']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:10Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai.quantumkledger.online"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--309de7f3-6e65-568d-94d1-3a9634aeb86a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-11T02:45:25Z","modified":"2026-06-11T02:45:25Z","name":"Phishing domain: ai.sadman.vip","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ai.sadman.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai.sadman.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-11T02:45:25Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai.sadman.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--33f7b746-760f-5166-968e-10de1650a7a9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-24T21:20:50Z","modified":"2026-01-24T21:20:50Z","name":"Phishing domain: ai0210.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ai0210.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai0210.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-24T21:20:50Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai0210.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eeb1456f-bf61-53fa-ab06-5c5e51610287","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-24T21:20:54Z","modified":"2026-01-24T21:20:54Z","name":"Phishing domain: ai1115.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating [\"gmail\"]. Report & evidence: https://phishdestroy.io/domain/ai1115.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai1115.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-24T21:20:54Z","labels":["malicious-activity","phishing","brand:[\"gmail\"]"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai1115.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a54dff0d-70be-59df-9829-44f94cc05ed6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-24T16:37:06Z","modified":"2025-12-24T16:37:06Z","name":"Phishing domain: ai16z.allocated.live","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ai16z.allocated.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai16z.allocated.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-24T16:37:06Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai16z.allocated.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd33f985-499b-5b56-a1d8-ce5bc0f6c536","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-20T17:07:48Z","modified":"2025-12-20T17:07:48Z","name":"Phishing domain: ai16zsol.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ai16zsol.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai16zsol.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-20T17:07:48Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai16zsol.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--760bab79-70cd-5213-b9c8-c74b932c0a77","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-07T09:58:52Z","modified":"2026-01-07T09:58:52Z","name":"Phishing domain: ai20-invest.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating argent. Report & evidence: https://phishdestroy.io/domain/ai20-invest.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai20-invest.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-07T09:58:52Z","labels":["malicious-activity","phishing","brand:argent"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai20-invest.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--08496801-20fc-5fc3-86e9-0e3fc8026295","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-11T03:11:38Z","modified":"2026-04-11T03:11:38Z","name":"Phishing domain: ai21x.next-cryptolist.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ai21x.next-cryptolist.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai21x.next-cryptolist.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-11T03:11:38Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai21x.next-cryptolist.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8aea1c8-6a95-5682-873a-c4fd1ee5af99","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-18T13:52:12Z","modified":"2026-03-18T13:52:12Z","name":"Phishing domain: ai30.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ai30.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai30.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-18T13:52:12Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai30.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--97b5c1ba-4de5-5be7-a306-aadbb8e230f7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-11T03:10:54Z","modified":"2026-04-11T03:10:54Z","name":"Phishing domain: ai99x.entry-cryptolist.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ai99x.entry-cryptolist.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ai99x.entry-cryptolist.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-11T03:10:54Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ai99x.entry-cryptolist.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--10d6e0cc-14f6-5be3-8ab3-d38cda79316e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:45Z","modified":"2026-02-26T23:19:45Z","name":"Phishing domain: aiahalameen.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aiahalameen.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiahalameen.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:45Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aiahalameen.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e44413d-03f7-57a3-a174-2f0c0ac5e867","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-20T13:52:31Z","modified":"2026-07-20T13:52:31Z","name":"Phishing domain: aiai-constellation.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Airdrop Scam. Report & evidence: https://phishdestroy.io/domain/aiai-constellation.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiai-constellation.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-20T13:52:31Z","labels":["malicious-activity","phishing","brand:airdrop scam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aiai-constellation.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--97454bb1-1605-59cf-9a54-8478b540e363","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-07T16:34:58Z","modified":"2025-08-07T16:34:58Z","name":"Phishing domain: aiairdroprush.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/aiairdroprush.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiairdroprush.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-07T16:34:58Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aiairdroprush.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c9ecc5a-b92a-584d-9e7d-6d4d4912df3c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-11T03:11:43Z","modified":"2026-04-11T03:11:43Z","name":"Phishing domain: aiapis.entrance-cryptolist.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aiapis.entrance-cryptolist.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiapis.entrance-cryptolist.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-11T03:11:43Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aiapis.entrance-cryptolist.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec60e1d3-c190-5ae0-989a-297a9616a766","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: aiarb.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aiarb.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiarb.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aiarb.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--45e9b590-e97b-5a65-97a0-7f9ba7d075dd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-16T14:46:15Z","modified":"2025-10-16T14:46:15Z","name":"Phishing domain: aiarbitrage-ch.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Binance. Report & evidence: https://phishdestroy.io/domain/aiarbitrage-ch.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiarbitrage-ch.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-16T14:46:15Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aiarbitrage-ch.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4c9f46d-2668-54ee-aac5-dc6b121c829c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T07:02:12Z","modified":"2026-07-27T07:02:12Z","name":"Phishing domain: aiassetgrowth.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aiassetgrowth.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiassetgrowth.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T07:02:12Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aiassetgrowth.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7ab513b-bbec-52c7-92a9-8351b83b3d32","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-07-26T19:47:32Z","modified":"2025-07-26T19:47:32Z","name":"Phishing domain: aiauthenticate.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aiauthenticate.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiauthenticate.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-07-26T19:47:32Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aiauthenticate.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e289feea-bc5f-5ba8-8e61-73f183f2e5c4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-02T16:52:34Z","modified":"2026-03-02T16:52:34Z","name":"Phishing domain: aiaxots.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating generic. Report & evidence: https://phishdestroy.io/domain/aiaxots.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiaxots.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-02T16:52:34Z","labels":["malicious-activity","phishing","brand:generic"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aiaxots.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e265b1b7-c5ff-56e4-ae38-91b02ce99fd9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-28T15:35:32Z","modified":"2026-06-28T15:35:32Z","name":"Phishing domain: aib-cto.info","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aib-cto.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aib-cto.info']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-28T15:35:32Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aib-cto.info"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe3024f4-cccc-514b-a40e-254d3842d4ae","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-09T10:39:09Z","modified":"2025-12-09T10:39:09Z","name":"Phishing domain: aibaseone.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Coinbase. Report & evidence: https://phishdestroy.io/domain/aibaseone.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aibaseone.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-09T10:39:09Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aibaseone.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--52295ab2-7522-5644-8032-45d7578c4012","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-20T21:36:06Z","modified":"2026-03-20T21:36:06Z","name":"Phishing domain: aibinance.tokenclaims.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Binance. Report & evidence: https://phishdestroy.io/domain/aibinance.tokenclaims.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aibinance.tokenclaims.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-20T21:36:06Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aibinance.tokenclaims.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8366a04e-6c61-5759-9c67-873eba791874","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:08Z","modified":"2026-02-26T23:21:08Z","name":"Phishing domain: aibitstrust.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ethereum. Report & evidence: https://phishdestroy.io/domain/aibitstrust.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aibitstrust.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:08Z","labels":["malicious-activity","phishing","brand:ethereum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aibitstrust.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f275ea9c-c1e5-578e-9309-9229279b64cb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:17Z","modified":"2026-02-26T23:21:17Z","name":"Phishing domain: aibittraders.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aibittraders.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aibittraders.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aibittraders.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd99653e-7de4-5a52-8a96-bc98f4c1117e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T12:02:03Z","modified":"2026-07-27T12:02:03Z","name":"Phishing domain: aiblackboxfc.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aiblackboxfc.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiblackboxfc.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T12:02:03Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aiblackboxfc.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bc00e02-f0e4-53da-a5b8-b7caba4f079a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-02T14:02:55Z","modified":"2025-10-02T14:02:55Z","name":"Phishing domain: aiblockchain-us.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Blockchain.com. Report & evidence: https://phishdestroy.io/domain/aiblockchain-us.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiblockchain-us.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-02T14:02:55Z","labels":["malicious-activity","phishing","brand:blockchain.com"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aiblockchain-us.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc1b8659-06cd-5d83-8a2b-7eb352798141","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-30T04:13:09Z","modified":"2026-05-30T04:13:09Z","name":"Phishing domain: aibnb-1.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Airbnb. Report & evidence: https://phishdestroy.io/domain/aibnb-1.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aibnb-1.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-30T04:13:09Z","labels":["malicious-activity","phishing","brand:airbnb"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aibnb-1.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6a18c2f-9906-5354-a9ae-a70090647311","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-10T08:47:53Z","modified":"2025-12-10T08:47:53Z","name":"Phishing domain: aibnb5.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aibnb5.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aibnb5.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-10T08:47:53Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aibnb5.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--64d77d62-2ed5-5ae6-afa0-ccd6afdc16f0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:50Z","modified":"2026-02-26T23:20:50Z","name":"Phishing domain: aibnb6.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aibnb6.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aibnb6.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:50Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aibnb6.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c79f05e8-f511-55fd-b44c-ab155b62aa39","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T06:27:24Z","modified":"2026-06-15T06:27:24Z","name":"Phishing domain: aiboabpayqianbao.com.cn","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aiboabpayqianbao.com.cn","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiboabpayqianbao.com.cn']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T06:27:24Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aiboabpayqianbao.com.cn"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf17ca23-ab03-50c3-824d-f3af895f1386","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:49Z","modified":"2026-02-26T23:20:49Z","name":"Phishing domain: aibot5d.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aibot5d.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aibot5d.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:49Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aibot5d.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ee3fd2d-70a2-5c18-82f3-ba9b4c9461e2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-27T14:02:02Z","modified":"2026-01-27T14:02:02Z","name":"Phishing domain: aibot5p.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aibot5p.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aibot5p.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-27T14:02:02Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aibot5p.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--91a3839a-f695-54ee-b395-f1befbb60bdb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-26T13:50:27Z","modified":"2025-10-26T13:50:27Z","name":"Phishing domain: aibota.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aibota.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aibota.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-26T13:50:27Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aibota.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1a819e7-5c61-563e-b799-6e9bf74ba580","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:43Z","modified":"2026-02-26T23:22:43Z","name":"Phishing domain: aibotb.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aibotb.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aibotb.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:43Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aibotb.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--82f1a2aa-a202-51bc-9b88-e3e1f202bb26","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-26T16:26:29Z","modified":"2025-08-26T16:26:29Z","name":"Phishing domain: aibotgpts.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aibotgpts.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aibotgpts.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-26T16:26:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aibotgpts.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--74a855cc-143e-550a-b15d-2a45098e0461","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-02T16:17:56Z","modified":"2026-03-02T16:17:56Z","name":"Phishing domain: aiboth.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aiboth.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiboth.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-02T16:17:56Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aiboth.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a725d3f3-5fe3-5f2e-a1a5-8efe2cec5604","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-08T11:17:51Z","modified":"2025-08-08T11:17:51Z","name":"Phishing domain: aibotrader.ltd","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/aibotrader.ltd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aibotrader.ltd']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-08T11:17:51Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aibotrader.ltd"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6807d902-125a-55ba-bd8f-2928dfbf923c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-16T19:21:11Z","modified":"2025-09-16T19:21:11Z","name":"Phishing domain: aic.claim-coin.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aic.claim-coin.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aic.claim-coin.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-16T19:21:11Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aic.claim-coin.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--77234979-a2f8-5c88-bbed-8e241ec0c793","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:33Z","modified":"2026-02-26T23:24:33Z","name":"Phishing domain: aic.com.co","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/aic.com.co","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aic.com.co']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:33Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aic.com.co"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--295183bc-fe6b-5124-99c6-891a02e65642","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-04T12:10:28Z","modified":"2026-05-04T12:10:28Z","name":"Phishing domain: aicapital.cyou","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aicapital.cyou","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicapital.cyou']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-04T12:10:28Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aicapital.cyou"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--da7c3ea8-4b18-5b9c-ab57-193afe076976","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-08T13:22:04Z","modified":"2026-06-08T13:22:04Z","name":"Phishing domain: aicertsreviewer.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aicertsreviewer.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicertsreviewer.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-08T13:22:04Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aicertsreviewer.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfe518d0-c296-5794-95da-b03cf65ccec1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-20T07:30:03Z","modified":"2025-11-20T07:30:03Z","name":"Phishing domain: aichaingpt.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating generic. Report & evidence: https://phishdestroy.io/domain/aichaingpt.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aichaingpt.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-20T07:30:03Z","labels":["malicious-activity","phishing","brand:generic"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aichaingpt.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd99ac5e-1da5-5874-8617-acbcbb04f34c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-17T05:09:58Z","modified":"2025-09-17T05:09:58Z","name":"Phishing domain: aiclaimerver.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating solana. Report & evidence: https://phishdestroy.io/domain/aiclaimerver.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiclaimerver.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-17T05:09:58Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aiclaimerver.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2ef9fd4-e099-55ea-aa90-e94f9ea83649","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-18T17:02:45Z","modified":"2026-04-18T17:02:45Z","name":"Phishing domain: aicloudcmp.vip","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Apple. Report & evidence: https://phishdestroy.io/domain/aicloudcmp.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicloudcmp.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-18T17:02:45Z","labels":["malicious-activity","phishing","brand:apple"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aicloudcmp.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--969a2b24-b9a9-5340-891f-8af01ad1912b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-19T10:37:54Z","modified":"2025-09-19T10:37:54Z","name":"Phishing domain: aicnoini.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating discord. Report & evidence: https://phishdestroy.io/domain/aicnoini.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicnoini.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-19T10:37:54Z","labels":["malicious-activity","phishing","brand:discord"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aicnoini.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--68d1d066-adcc-5073-92db-a03cf0237f7c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-19T18:17:30Z","modified":"2025-11-19T18:17:30Z","name":"Phishing domain: aicodecollab.github.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aicodecollab.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicodecollab.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-19T18:17:30Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aicodecollab.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7103d096-b802-5792-8203-a9587d682f93","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: aicogni.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aicogni.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicogni.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aicogni.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--56dcf3d1-c4f9-5b52-a93d-a3ba72d2e9a4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-14T16:50:50Z","modified":"2026-07-14T16:50:50Z","name":"Phishing domain: aicoim.ai","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aicoim.ai","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicoim.ai']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-14T16:50:50Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aicoim.ai"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--15b65f61-fc55-5ced-b681-2aff334ce63d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-14T16:57:28Z","modified":"2026-07-14T16:57:28Z","name":"Phishing domain: aicoin-official.github.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aicoin-official.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicoin-official.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-14T16:57:28Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aicoin-official.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ee0701a-b4d0-577b-84f0-a889604a998d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-24T19:07:32Z","modified":"2026-02-24T19:07:32Z","name":"Phishing domain: aicoin.media","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating binance. Report & evidence: https://phishdestroy.io/domain/aicoin.media","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicoin.media']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-24T19:07:32Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aicoin.media"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb41d901-d7f1-525d-9d53-0b2efb87d188","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-15T17:46:02Z","modified":"2026-03-15T17:46:02Z","name":"Phishing domain: aicoinonsol.lol","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating revolut. Report & evidence: https://phishdestroy.io/domain/aicoinonsol.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicoinonsol.lol']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-15T17:46:02Z","labels":["malicious-activity","phishing","brand:revolut"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aicoinonsol.lol"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fb19544-a4ce-52a7-9c5b-a0d3a62f0f0e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-11T11:48:22Z","modified":"2025-11-11T11:48:22Z","name":"Phishing domain: aicoinx.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/aicoinx.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicoinx.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-11T11:48:22Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aicoinx.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--18295def-c413-53ce-b744-10b11427e031","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-09T06:12:30Z","modified":"2026-06-09T06:12:30Z","name":"Phishing domain: aicolk.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aicolk.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicolk.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-09T06:12:30Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aicolk.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--52ce96db-9806-5ba2-8c13-8ea777b0c393","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-24T00:15:57Z","modified":"2026-07-24T00:15:57Z","name":"Phishing domain: aiconnectors.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aiconnectors.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiconnectors.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-24T00:15:57Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aiconnectors.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b9b6c0f-ea93-5ce7-9be2-532d84f28858","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-28T11:42:41Z","modified":"2026-05-28T11:42:41Z","name":"Phishing domain: aicontentworld.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aicontentworld.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicontentworld.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-28T11:42:41Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aicontentworld.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--31743a16-e08b-55f1-bae4-0cf355f0d177","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-11T02:34:31Z","modified":"2026-06-11T02:34:31Z","name":"Phishing domain: aicopmtrade.click","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating PayPal. Report & evidence: https://phishdestroy.io/domain/aicopmtrade.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicopmtrade.click']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-11T02:34:31Z","labels":["malicious-activity","phishing","brand:paypal"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aicopmtrade.click"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1ef6659-c6a5-516c-a00a-d96916ff65f1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-29T18:24:56Z","modified":"2026-03-29T18:24:56Z","name":"Phishing domain: aicrypto.sbs","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aicrypto.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicrypto.sbs']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-29T18:24:56Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aicrypto.sbs"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f4043ce-9355-5f5e-b205-43f2c2b69ba8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-02T01:53:36Z","modified":"2025-09-02T01:53:36Z","name":"Phishing domain: aicryptoet.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aicryptoet.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicryptoet.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-02T01:53:36Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aicryptoet.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c53d7f82-ed4f-5b57-8185-1448bed06d78","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-23T15:38:42Z","modified":"2026-07-23T15:38:42Z","name":"Phishing domain: aicryptofxtrading.sbs","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericscam. Report & evidence: https://phishdestroy.io/domain/aicryptofxtrading.sbs","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicryptofxtrading.sbs']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-23T15:38:42Z","labels":["malicious-activity","phishing","brand:genericscam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aicryptofxtrading.sbs"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a9eb269-bd7b-5c28-9f00-0e3d13dd0428","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:34Z","modified":"2026-02-26T23:20:34Z","name":"Phishing domain: aicryptoguard.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating avalanche. Report & evidence: https://phishdestroy.io/domain/aicryptoguard.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicryptoguard.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:34Z","labels":["malicious-activity","phishing","brand:avalanche"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aicryptoguard.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--41e75efc-1c7d-5834-b3af-de29b0e39a76","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-09T19:15:42Z","modified":"2026-07-09T19:15:42Z","name":"Phishing domain: aicryptonet.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aicryptonet.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aicryptonet.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-09T19:15:42Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aicryptonet.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--524b5963-1559-5654-ab47-d2098e14da37","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-08T14:55:06Z","modified":"2026-03-08T14:55:06Z","name":"Phishing domain: aid-kraken.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating kraken. Report & evidence: https://phishdestroy.io/domain/aid-kraken.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aid-kraken.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-08T14:55:06Z","labels":["malicious-activity","phishing","brand:kraken"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aid-kraken.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4266e480-918a-51dd-a223-e2c8d2aced6f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-06T19:03:09Z","modified":"2026-02-06T19:03:09Z","name":"Phishing domain: aid-matamask-helpdesk.netlify.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating MetaMask. Report & evidence: https://phishdestroy.io/domain/aid-matamask-helpdesk.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aid-matamask-helpdesk.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-06T19:03:09Z","labels":["malicious-activity","phishing","brand:metamask"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aid-matamask-helpdesk.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4a62b9f-4c7c-5f40-99c6-c0e14abbe223","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-20T15:31:07Z","modified":"2025-11-20T15:31:07Z","name":"Phishing domain: aid.fuipwbeyrp.my","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/aid.fuipwbeyrp.my","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aid.fuipwbeyrp.my']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-20T15:31:07Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aid.fuipwbeyrp.my"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b81cf519-75c3-5b4e-af59-3a22d4d90e7d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:54Z","modified":"2026-02-26T23:22:54Z","name":"Phishing domain: aid.gaib.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aid.gaib.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aid.gaib.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:54Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aid.gaib.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--75d0d16b-458f-5b00-b416-fb1c4aeb77ae","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-22T11:08:57Z","modified":"2025-10-22T11:08:57Z","name":"Phishing domain: aid.gaib.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating metamask. Report & evidence: https://phishdestroy.io/domain/aid.gaib.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aid.gaib.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-22T11:08:57Z","labels":["malicious-activity","phishing","brand:metamask"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aid.gaib.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0436d1c0-2b9a-5d10-bc8c-8649b08f1dfc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-19T09:21:35Z","modified":"2025-11-19T09:21:35Z","name":"Phishing domain: aid.gaib.lat","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating arbitrum. Report & evidence: https://phishdestroy.io/domain/aid.gaib.lat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aid.gaib.lat']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-19T09:21:35Z","labels":["malicious-activity","phishing","brand:arbitrum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aid.gaib.lat"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--630299b7-6397-51cb-bc85-b2edb21c1f5b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-19T09:26:51Z","modified":"2025-11-19T09:26:51Z","name":"Phishing domain: aid.gaibs.network","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aid.gaibs.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aid.gaibs.network']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-19T09:26:51Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aid.gaibs.network"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d960e07-15be-56d3-aac4-1efd4b6d7c7e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-25T05:28:58Z","modified":"2025-10-25T05:28:58Z","name":"Phishing domain: aid.hgurehxhig.my","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/aid.hgurehxhig.my","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aid.hgurehxhig.my']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-25T05:28:58Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aid.hgurehxhig.my"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--38335925-12ab-50bb-a8f0-f05620616567","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:29Z","modified":"2026-02-26T23:19:29Z","name":"Phishing domain: aid.rnqgejxzdd.yoga","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/aid.rnqgejxzdd.yoga","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aid.rnqgejxzdd.yoga']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:29Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aid.rnqgejxzdd.yoga"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a913197b-cffa-597b-bd5e-b8753d5fdd40","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-07-14T13:06:37Z","modified":"2025-07-14T13:06:37Z","name":"Phishing domain: aidapp-restore.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aidapp-restore.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aidapp-restore.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-07-14T13:06:37Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aidapp-restore.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d49e244-696b-524f-805b-89edaf4e2409","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-04T05:13:52Z","modified":"2026-08-04T05:13:52Z","name":"Phishing domain: aidashbd.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Base. Report & evidence: https://phishdestroy.io/domain/aidashbd.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aidashbd.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-04T05:13:52Z","labels":["malicious-activity","phishing","brand:base"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aidashbd.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--60c88239-3751-594c-af59-16fe1436ed98","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:30Z","modified":"2026-02-26T23:20:30Z","name":"Phishing domain: aiddesk.ghost.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aiddesk.ghost.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiddesk.ghost.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:30Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aiddesk.ghost.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--78acff42-b2d2-5761-a445-1b9dda862468","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-07-13T09:47:41Z","modified":"2025-07-13T09:47:41Z","name":"Phishing domain: aidefiableauto.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aidefiableauto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aidefiableauto.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-07-13T09:47:41Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aidefiableauto.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1a7f21e-2171-5435-a846-6ebe949e3371","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-29T14:10:41Z","modified":"2025-08-29T14:10:41Z","name":"Phishing domain: aidfordisasterzones.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aidfordisasterzones.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aidfordisasterzones.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-29T14:10:41Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aidfordisasterzones.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--74d104f8-2156-5856-b5a4-f969e537acae","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-07-13T10:14:20Z","modified":"2025-07-13T10:14:20Z","name":"Phishing domain: aidinvestar.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aidinvestar.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aidinvestar.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-07-13T10:14:20Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aidinvestar.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9f42e88-9fbb-5499-90fb-be672d539b06","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-13T12:45:29Z","modified":"2026-04-13T12:45:29Z","name":"Phishing domain: aidmeconnect.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aidmeconnect.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aidmeconnect.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-13T12:45:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aidmeconnect.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b89420e8-17aa-56a4-9165-2c05b53695dd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-18T21:06:36Z","modified":"2026-04-18T21:06:36Z","name":"Phishing domain: aidrivenquant.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating generic. Report & evidence: https://phishdestroy.io/domain/aidrivenquant.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aidrivenquant.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-18T21:06:36Z","labels":["malicious-activity","phishing","brand:generic"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aidrivenquant.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--421f033e-9980-5f33-9bf3-88fba2a1b873","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-01T20:27:27Z","modified":"2026-03-01T20:27:27Z","name":"Phishing domain: aidrop.pippkinonsol.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aidrop.pippkinonsol.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aidrop.pippkinonsol.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-01T20:27:27Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aidrop.pippkinonsol.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--86bd3935-900c-5e46-bda3-e81629836e3d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T14:01:31Z","modified":"2026-06-15T14:01:31Z","name":"Phishing domain: aiduck.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aiduck.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiduck.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T14:01:31Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aiduck.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a8ab060-cafa-5b34-a4c9-286944ab7dd5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-02T16:22:29Z","modified":"2025-12-02T16:22:29Z","name":"Phishing domain: aie.changee.ai","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aie.changee.ai","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aie.changee.ai']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-02T16:22:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aie.changee.ai"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae5bdcb3-9599-5eb5-a810-c6b986c8b19f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-07T20:57:55Z","modified":"2026-06-07T20:57:55Z","name":"Phishing domain: aierfeinails.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aierfeinails.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aierfeinails.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-07T20:57:55Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aierfeinails.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--609d651b-211e-5273-af5a-6c60c5736145","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-31T15:52:03Z","modified":"2025-10-31T15:52:03Z","name":"Phishing domain: aifinans.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/aifinans.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aifinans.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-31T15:52:03Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aifinans.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0a4feec-931d-5b65-9211-2ed33baf8214","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-11T03:12:42Z","modified":"2026-04-11T03:12:42Z","name":"Phishing domain: aiflow-token.entry-cryptolist.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aiflow-token.entry-cryptolist.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiflow-token.entry-cryptolist.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-11T03:12:42Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aiflow-token.entry-cryptolist.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--78b904cd-1278-51ee-92cc-0c5096b87f2f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-11T03:12:59Z","modified":"2026-04-11T03:12:59Z","name":"Phishing domain: aiflow.entry-cryptolist.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aiflow.entry-cryptolist.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiflow.entry-cryptolist.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-11T03:12:59Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aiflow.entry-cryptolist.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3afa4bd3-6a6b-59e5-adce-4ec15aa8ac5d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-20T20:55:27Z","modified":"2026-01-20T20:55:27Z","name":"Phishing domain: aifnag.info","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aifnag.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aifnag.info']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-20T20:55:27Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aifnag.info"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c7ef9be-5c82-5512-9d0f-36486afd39fa","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T18:40:07Z","modified":"2026-08-09T18:40:07Z","name":"Phishing domain: aifory.pro","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aifory.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aifory.pro']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T18:40:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aifory.pro"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--88e7ef09-bbf0-5657-ac65-3886a3244d48","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-29T23:44:07Z","modified":"2026-05-29T23:44:07Z","name":"Phishing domain: aifoundationsgroup.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aifoundationsgroup.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aifoundationsgroup.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-29T23:44:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aifoundationsgroup.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--453d7a27-170c-5354-976e-1fb0febef447","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-01T23:07:13Z","modified":"2026-08-01T23:07:13Z","name":"Phishing domain: aifpleasurebeh.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aifpleasurebeh.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aifpleasurebeh.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-01T23:07:13Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aifpleasurebeh.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--28b24b9f-ef32-5728-b5cb-266af8fb4ef9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T06:41:08Z","modified":"2026-06-15T06:41:08Z","name":"Phishing domain: aifreeuse.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aifreeuse.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aifreeuse.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T06:41:08Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aifreeuse.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f37b7be5-f510-5d9a-bac7-8e7a4122e28c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-14T15:15:55Z","modified":"2025-10-14T15:15:55Z","name":"Phishing domain: aifroge.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aifroge.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aifroge.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-14T15:15:55Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aifroge.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7e1547e-17dc-5115-b36a-5abcbb740378","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-26T15:17:25Z","modified":"2026-06-26T15:17:25Z","name":"Phishing domain: aifruit.nft-chain.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating WalletConnect. Report & evidence: https://phishdestroy.io/domain/aifruit.nft-chain.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aifruit.nft-chain.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-26T15:17:25Z","labels":["malicious-activity","phishing","brand:walletconnect"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aifruit.nft-chain.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--00977567-6ee3-5b49-a17e-1ef7ca684d99","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-27T21:24:44Z","modified":"2026-02-27T21:24:44Z","name":"Phishing domain: aifxtrading.live","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aifxtrading.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aifxtrading.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-27T21:24:44Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aifxtrading.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--07d9313d-64ee-5467-a103-fb94977aeb59","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-04T16:15:11Z","modified":"2026-03-04T16:15:11Z","name":"Phishing domain: aigaea.vip","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aigaea.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aigaea.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-04T16:15:11Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aigaea.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--93856bd0-3d7b-5361-b25a-1c49f95f076c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-20T19:11:08Z","modified":"2026-02-20T19:11:08Z","name":"Phishing domain: aige.claims","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aige.claims","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aige.claims']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-20T19:11:08Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aige.claims"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--990eaf73-5f2d-504e-a471-f7713b13ea44","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-28T12:53:21Z","modified":"2026-06-28T12:53:21Z","name":"Phishing domain: aigentrun.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/aigentrun.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aigentrun.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-28T12:53:21Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aigentrun.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--516ac9ac-c8e9-530f-bf32-45c0b01b7f2d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-28T04:54:10Z","modified":"2026-03-28T04:54:10Z","name":"Phishing domain: aigentx-xyz-migration.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aigentx-xyz-migration.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aigentx-xyz-migration.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-28T04:54:10Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aigentx-xyz-migration.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--529a14c0-2b3d-5c74-9d1d-b06de50bb3b6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:19:26Z","modified":"2026-02-26T23:19:26Z","name":"Phishing domain: aigirlfriend-telegram.chat","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating telegram. Report & evidence: https://phishdestroy.io/domain/aigirlfriend-telegram.chat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aigirlfriend-telegram.chat']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:19:26Z","labels":["malicious-activity","phishing","brand:telegram"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aigirlfriend-telegram.chat"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2d89352-2748-5470-aaae-3a8ca35eefc7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-29T05:16:48Z","modified":"2025-08-29T05:16:48Z","name":"Phishing domain: aigirlfriendtelegram.chat","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/aigirlfriendtelegram.chat","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aigirlfriendtelegram.chat']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-29T05:16:48Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aigirlfriendtelegram.chat"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ad43b18-310c-50c2-8289-96c4b4d71986","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-23T20:11:24Z","modified":"2025-11-23T20:11:24Z","name":"Phishing domain: aigle-insightstreamsoft.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating revolut. Report & evidence: https://phishdestroy.io/domain/aigle-insightstreamsoft.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aigle-insightstreamsoft.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-23T20:11:24Z","labels":["malicious-activity","phishing","brand:revolut"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aigle-insightstreamsoft.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe3bb318-d5b9-53a7-bdc3-c466201ea180","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-09T18:40:07Z","modified":"2026-08-09T18:40:07Z","name":"Phishing domain: aiglobaltrademarketing.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aiglobaltrademarketing.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiglobaltrademarketing.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-09T18:40:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aiglobaltrademarketing.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--53588d64-e643-5241-895a-f7f98c4c29c4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-25T20:43:18Z","modified":"2026-02-25T20:43:18Z","name":"Phishing domain: aigti.info","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aigti.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aigti.info']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-25T20:43:18Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aigti.info"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--94e36c26-07b6-5cba-a8d7-ef3cc0a3b388","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-25T20:51:56Z","modified":"2026-02-25T20:51:56Z","name":"Phishing domain: aigti.life","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aigti.life","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aigti.life']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-25T20:51:56Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aigti.life"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e355654-29d8-5862-8f1b-aedf5ea27c19","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-11T03:13:28Z","modified":"2026-04-11T03:13:28Z","name":"Phishing domain: aihub.ai-cryptolist.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/aihub.ai-cryptolist.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aihub.ai-cryptolist.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-11T03:13:28Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aihub.ai-cryptolist.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f7e6ae9-b7c1-5291-843f-46b689a83135","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-08T14:53:34Z","modified":"2026-03-08T14:53:34Z","name":"Phishing domain: aihypem.qpon","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/aihypem.qpon","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aihypem.qpon']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-08T14:53:34Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aihypem.qpon"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--94490b27-5053-5b49-a3c6-2cdd3f4b147e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-11T03:49:18Z","modified":"2026-02-11T03:49:18Z","name":"Phishing domain: aihyperp.one","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Hyperliquid. Report & evidence: https://phishdestroy.io/domain/aihyperp.one","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aihyperp.one']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-11T03:49:18Z","labels":["malicious-activity","phishing","brand:hyperliquid"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aihyperp.one"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eab7715e-3342-57f1-b686-245476950059","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-27T06:21:55Z","modified":"2026-02-27T06:21:55Z","name":"Phishing domain: aihypeyp.one","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/aihypeyp.one","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aihypeyp.one']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-27T06:21:55Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aihypeyp.one"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3037d1ed-3f6b-590b-b337-9a1dc46b7406","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-02T15:13:57Z","modified":"2026-02-02T15:13:57Z","name":"Phishing domain: aihypezp.one","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Hyperliquid. Report & evidence: https://phishdestroy.io/domain/aihypezp.one","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aihypezp.one']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-02T15:13:57Z","labels":["malicious-activity","phishing","brand:hyperliquid"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aihypezp.one"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fd43b01-a8c5-5426-bd87-3f5ea3bdad17","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T17:33:43Z","modified":"2026-02-26T17:33:43Z","name":"Phishing domain: aihypezt.one","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aihypezt.one","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aihypezt.one']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T17:33:43Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aihypezt.one"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--165bed3f-ea43-5fa5-8f3b-a3db150aef6a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-05T16:03:00Z","modified":"2025-12-05T16:03:00Z","name":"Phishing domain: aii-chuirokin-or-jp.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aii-chuirokin-or-jp.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aii-chuirokin-or-jp.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-05T16:03:00Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aii-chuirokin-or-jp.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac2dc160-fbee-55d2-8bf5-c68cd36fbc89","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-05T16:01:52Z","modified":"2025-12-05T16:01:52Z","name":"Phishing domain: aii-ib-chuirokin-or-jp.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aii-ib-chuirokin-or-jp.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aii-ib-chuirokin-or-jp.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-05T16:01:52Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aii-ib-chuirokin-or-jp.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4ef7962-79bc-584c-8934-8c609c882e35","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-08T21:47:53Z","modified":"2025-10-08T21:47:53Z","name":"Phishing domain: aiieeenve.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aave. Report & evidence: https://phishdestroy.io/domain/aiieeenve.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiieeenve.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-08T21:47:53Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aiieeenve.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5589cea3-d044-5481-bce1-87e3a5bc8e71","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-21T21:04:44Z","modified":"2026-04-21T21:04:44Z","name":"Phishing domain: aiinvest-tw.co","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating near. Report & evidence: https://phishdestroy.io/domain/aiinvest-tw.co","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiinvest-tw.co']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-21T21:04:44Z","labels":["malicious-activity","phishing","brand:near"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aiinvest-tw.co"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d2c843c-72e0-5424-b122-94f50bc1d388","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T16:35:59Z","modified":"2026-06-15T16:35:59Z","name":"Phishing domain: aiinvest-us.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/aiinvest-us.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiinvest-us.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T16:35:59Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aiinvest-us.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c11d6b83-f180-575e-b1a1-3a2544ba0576","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-09T20:55:07Z","modified":"2026-06-09T20:55:07Z","name":"Phishing domain: aiinvest.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/aiinvest.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiinvest.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-09T20:55:07Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aiinvest.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--74722abd-0b1a-58b8-9d5c-7a145586851d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-14T12:21:28Z","modified":"2026-03-14T12:21:28Z","name":"Phishing domain: aiinvest.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/aiinvest.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiinvest.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-14T12:21:28Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aiinvest.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8b51a1d-806f-5b6c-97fa-d0e90682825e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-23T18:59:28Z","modified":"2026-06-23T18:59:28Z","name":"Phishing domain: aiinvest.us","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/aiinvest.us","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiinvest.us']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-23T18:59:28Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aiinvest.us"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a76d434-0af1-5604-827c-1024758c3b00","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T16:35:04Z","modified":"2026-06-15T16:35:04Z","name":"Phishing domain: aiinvest.vip","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/aiinvest.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiinvest.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T16:35:04Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aiinvest.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca5b8906-0453-5472-89f6-64ced7cbff7f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-15T03:59:50Z","modified":"2026-05-15T03:59:50Z","name":"Phishing domain: aiinvestmaximum-es.live","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aiinvestmaximum-es.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiinvestmaximum-es.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-15T03:59:50Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aiinvestmaximum-es.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b475816-fc19-50c7-af4a-b1067bf5fed4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-18T22:38:35Z","modified":"2026-05-18T22:38:35Z","name":"Phishing domain: aiiqcoinsol.lol","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aiiqcoinsol.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiiqcoinsol.lol']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-18T22:38:35Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aiiqcoinsol.lol"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7467e080-00e7-58dc-a4ee-ef305de13fee","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-28T18:05:39Z","modified":"2026-02-28T18:05:39Z","name":"Phishing domain: aijarvis.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aijarvis.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aijarvis.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-28T18:05:39Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aijarvis.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c181f47-2919-5b1d-b86e-c005ee4b3326","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-23T01:21:04Z","modified":"2026-03-23T01:21:04Z","name":"Phishing domain: aijarvis.site","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aijarvis.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aijarvis.site']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-23T01:21:04Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aijarvis.site"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--641120e2-efae-5186-b692-bc30a505cea8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-23T15:36:14Z","modified":"2026-01-23T15:36:14Z","name":"Phishing domain: aikacoin.lol","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aikacoin.lol","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aikacoin.lol']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-23T15:36:14Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aikacoin.lol"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--950defaf-d615-5ff3-960e-a17e9a065ce6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:15Z","modified":"2026-02-26T23:21:15Z","name":"Phishing domain: aikasol.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aikasol.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aikasol.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:15Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aikasol.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbf49dd6-5c34-5ba0-9003-5718e4031c8e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-09T02:19:48Z","modified":"2026-07-09T02:19:48Z","name":"Phishing domain: ail-rosenheim-marion-knauf-bc9143473673.herokuapp.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ail-rosenheim-marion-knauf-bc9143473673.herokuapp.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ail-rosenheim-marion-knauf-bc9143473673.herokuapp.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-09T02:19:48Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ail-rosenheim-marion-knauf-bc9143473673.herokuapp.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d26e72c0-25fd-5959-bdcc-6fb18a8fbe47","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-28T18:08:27Z","modified":"2026-07-28T18:08:27Z","name":"Phishing domain: aileensoto.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating MetaMask. Report & evidence: https://phishdestroy.io/domain/aileensoto.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aileensoto.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-28T18:08:27Z","labels":["malicious-activity","phishing","brand:metamask"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aileensoto.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--86b244a6-7e02-53d0-93b8-1668177c9d96","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-06T21:22:37Z","modified":"2026-01-06T21:22:37Z","name":"Phishing domain: aileosnova.info","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/aileosnova.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aileosnova.info']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-06T21:22:37Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aileosnova.info"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1468c9a0-64b8-51b4-b186-dac562c5fa5a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-14T01:34:28Z","modified":"2025-12-14T01:34:28Z","name":"Phishing domain: ailgun.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/ailgun.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ailgun.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-14T01:34:28Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ailgun.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d53213f-54fa-5fd9-a337-6c939913d7ba","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-11T03:13:13Z","modified":"2026-04-11T03:13:13Z","name":"Phishing domain: ailiquid.ai-cryptolist.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Cloudflare. Report & evidence: https://phishdestroy.io/domain/ailiquid.ai-cryptolist.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ailiquid.ai-cryptolist.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-11T03:13:13Z","labels":["malicious-activity","phishing","brand:cloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ailiquid.ai-cryptolist.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--feba5acd-e2b0-5aac-9a72-67318dda2f60","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-11T03:13:48Z","modified":"2026-04-11T03:13:48Z","name":"Phishing domain: ailive.entry-cryptolist.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ailive.entry-cryptolist.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ailive.entry-cryptolist.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-11T03:13:48Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ailive.entry-cryptolist.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--76b0d10e-0707-57ee-8f95-5333bd9ccc44","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-20T17:38:19Z","modified":"2026-07-20T17:38:19Z","name":"Phishing domain: ailux.trade","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ailux.trade","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ailux.trade']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-20T17:38:19Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ailux.trade"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--60a7b540-8564-539e-9ee3-7441e66be563","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-23T02:36:21Z","modified":"2026-02-23T02:36:21Z","name":"Phishing domain: aim-market.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aim-market.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aim-market.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-23T02:36:21Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aim-market.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--83882a7a-2509-51c8-b15f-9ff68eaad2b6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-20T12:57:09Z","modified":"2026-07-20T12:57:09Z","name":"Phishing domain: aiman-wazir.github.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aiman-wazir.github.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiman-wazir.github.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-20T12:57:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aiman-wazir.github.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e220ea40-15e0-563c-b909-bf019bde6379","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-12T22:11:32Z","modified":"2025-12-12T22:11:32Z","name":"Phishing domain: aimanak.co","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aimanak.co","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aimanak.co']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-12T22:11:32Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aimanak.co"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3c8d3a5-3864-5928-9cc0-df66572d4c88","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-11T04:55:59Z","modified":"2026-03-11T04:55:59Z","name":"Phishing domain: aimarketslimited.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aimarketslimited.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aimarketslimited.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-11T04:55:59Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aimarketslimited.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c884113-ccea-5946-bfc1-79cc48cdfebe","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-01T14:08:03Z","modified":"2026-04-01T14:08:03Z","name":"Phishing domain: aimbot-mod-apk.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Roblox. Report & evidence: https://phishdestroy.io/domain/aimbot-mod-apk.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aimbot-mod-apk.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-01T14:08:03Z","labels":["malicious-activity","phishing","brand:roblox"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aimbot-mod-apk.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1823b220-cdf8-54a6-84b2-99bd7a613dc0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-14T16:09:25Z","modified":"2026-04-14T16:09:25Z","name":"Phishing domain: aimbot.world","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aimbot.world","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aimbot.world']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-14T16:09:25Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aimbot.world"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--10355a24-e7ee-53e4-9aa2-33c31c4825b2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-06T05:40:01Z","modified":"2026-02-06T05:40:01Z","name":"Phishing domain: aimcryptospace.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/aimcryptospace.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aimcryptospace.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-06T05:40:01Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aimcryptospace.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c55eb03-4c12-578b-9763-df292d95743c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-03T14:28:17Z","modified":"2025-11-03T14:28:17Z","name":"Phishing domain: aimduelx.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating cs2. Report & evidence: https://phishdestroy.io/domain/aimduelx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aimduelx.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-03T14:28:17Z","labels":["malicious-activity","phishing","brand:cs2"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aimduelx.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7577304b-b967-5278-ae4c-a0b1ee539bef","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-21T19:18:40Z","modified":"2025-10-21T19:18:40Z","name":"Phishing domain: aimek.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ethereum. Report & evidence: https://phishdestroy.io/domain/aimek.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aimek.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-21T19:18:40Z","labels":["malicious-activity","phishing","brand:ethereum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aimek.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--32d9a55e-c04f-5941-926a-550660e0b837","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-11T03:13:47Z","modified":"2026-04-11T03:13:47Z","name":"Phishing domain: aimerica.entry-cryptolist.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aimerica.entry-cryptolist.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aimerica.entry-cryptolist.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-11T03:13:47Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aimerica.entry-cryptolist.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e3aa826-b6c5-546a-a470-91e1c7e0a56b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T06:41:08Z","modified":"2026-06-15T06:41:08Z","name":"Phishing domain: aimevbot.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aimevbot.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aimevbot.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T06:41:08Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aimevbot.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7739c2a6-0f1b-5a8b-afb2-7ae6891d6ccd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:39Z","modified":"2026-02-26T23:24:39Z","name":"Phishing domain: aiminers.vip","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aiminers.vip","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiminers.vip']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:39Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aiminers.vip"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--00c65e05-5321-5b6d-8475-099c32eabdfb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T04:56:40Z","modified":"2026-07-27T04:56:40Z","name":"Phishing domain: aimirrortrading.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aimirrortrading.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aimirrortrading.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T04:56:40Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aimirrortrading.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b293e5b-703e-5c59-a70e-50c0dc558a2b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-11T16:27:28Z","modified":"2026-07-11T16:27:28Z","name":"Phishing domain: aimistral.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aimistral.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aimistral.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-11T16:27:28Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aimistral.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--12ef3241-7242-5e33-9227-b698d30de333","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-14T01:50:38Z","modified":"2025-12-14T01:50:38Z","name":"Phishing domain: aimlogicco.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/aimlogicco.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aimlogicco.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-14T01:50:38Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aimlogicco.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed720d3c-8d32-5b18-a049-1105de2f2e7d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-10T22:17:15Z","modified":"2026-03-10T22:17:15Z","name":"Phishing domain: aimmaiket.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aimmaiket.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aimmaiket.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-10T22:17:15Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aimmaiket.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e502c8a0-d9a2-5741-ba93-2e60ad72866f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-27T19:35:23Z","modified":"2026-03-27T19:35:23Z","name":"Phishing domain: aimmaoket.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aimmaoket.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aimmaoket.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-27T19:35:23Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aimmaoket.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9451e2bd-245e-53d0-a129-571ae82d5088","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-27T18:59:42Z","modified":"2026-03-27T18:59:42Z","name":"Phishing domain: aimmaqket.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aimmaqket.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aimmaqket.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-27T18:59:42Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aimmaqket.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--07839664-b934-522a-ab64-e54568f49260","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-10T22:17:32Z","modified":"2026-03-10T22:17:32Z","name":"Phishing domain: aimmarket.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aimmarket.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aimmarket.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-10T22:17:32Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aimmarket.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b5df38f-ded3-5bbb-bebc-c89be03bfc26","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-15T23:41:16Z","modified":"2026-04-15T23:41:16Z","name":"Phishing domain: aimmarket.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating [\"cs2\"]. Report & evidence: https://phishdestroy.io/domain/aimmarket.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aimmarket.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-15T23:41:16Z","labels":["malicious-activity","phishing","brand:[\"cs2\"]"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aimmarket.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e3ecaa9-3585-5ec3-b420-d38c4ff56193","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-27T18:59:41Z","modified":"2026-03-27T18:59:41Z","name":"Phishing domain: aimmauket.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aimmauket.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aimmauket.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-27T18:59:41Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aimmauket.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b879f519-7d5f-5abd-aa8f-8550047da660","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-27T19:35:25Z","modified":"2026-03-27T19:35:25Z","name":"Phishing domain: aimmawket.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aimmawket.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aimmawket.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-27T19:35:25Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aimmawket.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b563e8e-9500-589d-bcb5-907a63fdaa46","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-05T21:19:32Z","modified":"2026-03-05T21:19:32Z","name":"Phishing domain: aimmayket.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating [\"cs2\"]. Report & evidence: https://phishdestroy.io/domain/aimmayket.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aimmayket.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-05T21:19:32Z","labels":["malicious-activity","phishing","brand:[\"cs2\"]"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aimmayket.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd0e3318-66ba-59e2-b83c-97ab3bdc52d9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-27T19:00:33Z","modified":"2026-03-27T19:00:33Z","name":"Phishing domain: aimmerket.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating cs2. Report & evidence: https://phishdestroy.io/domain/aimmerket.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aimmerket.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-27T19:00:33Z","labels":["malicious-activity","phishing","brand:cs2"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aimmerket.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--99fff0a0-e666-590c-a0ae-b20d452a24b2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-16T07:19:53Z","modified":"2025-12-16T07:19:53Z","name":"Phishing domain: aimodelitalia.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating instagram. Report & evidence: https://phishdestroy.io/domain/aimodelitalia.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aimodelitalia.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-16T07:19:53Z","labels":["malicious-activity","phishing","brand:instagram"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aimodelitalia.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--225f8901-936c-56b4-aecf-96fa1810b422","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: aimpowerment.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aimpowerment.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aimpowerment.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aimpowerment.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--39ac7d40-5126-5e44-a600-0829d5ebb52d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-18T17:37:28Z","modified":"2026-07-18T17:37:28Z","name":"Phishing domain: aims-intl.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aims-intl.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aims-intl.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-18T17:37:28Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aims-intl.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddcfa903-08d4-5251-a0dc-61fcf9a3978b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:40Z","modified":"2026-02-26T23:24:40Z","name":"Phishing domain: aimstars.pro","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aimstars.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aimstars.pro']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:40Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aimstars.pro"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--83346df1-581b-5f2a-9f9a-26fdb11c1d98","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-07T09:57:55Z","modified":"2025-08-07T09:57:55Z","name":"Phishing domain: aimsvipfx.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating amazon. Report & evidence: https://phishdestroy.io/domain/aimsvipfx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aimsvipfx.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-07T09:57:55Z","labels":["malicious-activity","phishing","brand:amazon"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aimsvipfx.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4868c4e8-40da-5e5c-b4d2-9aa690b82eaf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-16T17:13:53Z","modified":"2025-11-16T17:13:53Z","name":"Phishing domain: aimtournament.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating cs2. Report & evidence: https://phishdestroy.io/domain/aimtournament.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aimtournament.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-16T17:13:53Z","labels":["malicious-activity","phishing","brand:cs2"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aimtournament.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--81b378ec-355f-5cad-9e65-5aeecfb35e32","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-28T22:38:23Z","modified":"2026-01-28T22:38:23Z","name":"Phishing domain: aimtournamentx.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating cs2. Report & evidence: https://phishdestroy.io/domain/aimtournamentx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aimtournamentx.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-28T22:38:23Z","labels":["malicious-activity","phishing","brand:cs2"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aimtournamentx.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c19921da-b142-57a1-8aef-a80d2b96ebb2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-27T00:43:28Z","modified":"2026-03-27T00:43:28Z","name":"Phishing domain: aimware.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aimware.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aimware.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-27T00:43:28Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aimware.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--75886d00-2459-575e-874b-4dd09c1825e1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-11T23:59:18Z","modified":"2025-11-11T23:59:18Z","name":"Phishing domain: aimxduels.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating cs2. Report & evidence: https://phishdestroy.io/domain/aimxduels.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aimxduels.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-11T23:59:18Z","labels":["malicious-activity","phishing","brand:cs2"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aimxduels.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea5b5e11-b943-5e90-84cd-2e97792cf2a1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T09:58:56Z","modified":"2026-02-13T09:58:56Z","name":"Phishing domain: aineofinance.site","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Lido. Report & evidence: https://phishdestroy.io/domain/aineofinance.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aineofinance.site']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T09:58:56Z","labels":["malicious-activity","phishing","brand:lido"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aineofinance.site"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--200b7370-c86e-5d9b-aec3-18b37eb72931","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-28T16:30:04Z","modified":"2026-04-28T16:30:04Z","name":"Phishing domain: ainewsportals.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/ainewsportals.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ainewsportals.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-28T16:30:04Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ainewsportals.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--95f688f6-5147-55a4-9644-5c0920eb3346","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-29T11:54:40Z","modified":"2026-06-29T11:54:40Z","name":"Phishing domain: ainft-updates.live","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ainft-updates.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ainft-updates.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-29T11:54:40Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ainft-updates.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e825822f-079f-5dcb-af7c-efd034fbb0aa","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-05T13:33:06Z","modified":"2026-08-05T13:33:06Z","name":"Phishing domain: ainftswap.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ainftswap.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ainftswap.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-05T13:33:06Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ainftswap.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--442fc530-e2a7-5dd9-8f38-8d4c9f73a825","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-29T10:12:54Z","modified":"2026-07-29T10:12:54Z","name":"Phishing domain: ainftswap.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/ainftswap.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'ainftswap.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-29T10:12:54Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/ainftswap.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--39425388-2f6d-591d-8e9f-970c3cd8881c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: aintiution.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aintiution.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aintiution.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aintiution.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c878c388-8e04-5f2d-aa53-85a1f5eaef64","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-08T20:12:09Z","modified":"2026-04-08T20:12:09Z","name":"Phishing domain: aintivirs-migrate.live","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating [\"solana\"]. Report & evidence: https://phishdestroy.io/domain/aintivirs-migrate.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aintivirs-migrate.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-08T20:12:09Z","labels":["malicious-activity","phishing","brand:[\"solana\"]"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aintivirs-migrate.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ca3a6ab-deb6-5432-8a8f-521b70f34fb7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-11T03:13:50Z","modified":"2026-04-11T03:13:50Z","name":"Phishing domain: aintivirus-2.entry-cryptolist.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aintivirus-2.entry-cryptolist.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aintivirus-2.entry-cryptolist.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-11T03:13:50Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aintivirus-2.entry-cryptolist.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8092e03-e60c-5c7f-bc7c-e32f4698489a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:23Z","modified":"2026-02-26T23:23:23Z","name":"Phishing domain: aintivirus.migrat.online","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aintivirus.migrat.online","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aintivirus.migrat.online']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:23Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aintivirus.migrat.online"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f32f50ce-af7d-5a66-b3df-b1d6db1eeecd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-08T15:09:37Z","modified":"2026-04-08T15:09:37Z","name":"Phishing domain: aintivirusmigration.world","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating [\"solana\"]. Report & evidence: https://phishdestroy.io/domain/aintivirusmigration.world","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aintivirusmigration.world']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-08T15:09:37Z","labels":["malicious-activity","phishing","brand:[\"solana\"]"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aintivirusmigration.world"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--28d9fc41-1666-5413-84ad-afeea3041bc0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T14:35:06Z","modified":"2026-02-26T14:35:06Z","name":"Phishing domain: aintuition.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aintuition.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aintuition.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T14:35:06Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aintuition.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bc837c1-1ac2-515b-89f2-f3bb4c1d0782","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-16T19:38:20Z","modified":"2025-09-16T19:38:20Z","name":"Phishing domain: aio.sushi.us.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating SushiSwap. Report & evidence: https://phishdestroy.io/domain/aio.sushi.us.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aio.sushi.us.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-16T19:38:20Z","labels":["malicious-activity","phishing","brand:sushiswap"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aio.sushi.us.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--99eb8ab0-a9d8-560e-a79c-499d2033ae08","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-24T11:15:13Z","modified":"2025-09-24T11:15:13Z","name":"Phishing domain: aio.sushistakes.biz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating SushiSwap. Report & evidence: https://phishdestroy.io/domain/aio.sushistakes.biz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aio.sushistakes.biz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-24T11:15:13Z","labels":["malicious-activity","phishing","brand:sushiswap"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aio.sushistakes.biz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9c27554-e7bf-5202-9d38-eac3604c2901","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-24T11:14:28Z","modified":"2025-09-24T11:14:28Z","name":"Phishing domain: aio.sushistakes.info","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating SushiSwap. Report & evidence: https://phishdestroy.io/domain/aio.sushistakes.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aio.sushistakes.info']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-24T11:14:28Z","labels":["malicious-activity","phishing","brand:sushiswap"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aio.sushistakes.info"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--622a4d70-5e72-520c-bcaf-de0aa18068ef","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-24T11:12:32Z","modified":"2025-09-24T11:12:32Z","name":"Phishing domain: aio.sushistakes.us","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating SushiSwap. Report & evidence: https://phishdestroy.io/domain/aio.sushistakes.us","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aio.sushistakes.us']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-24T11:12:32Z","labels":["malicious-activity","phishing","brand:sushiswap"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aio.sushistakes.us"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a49c061-c6fb-52f5-98b0-b8f186f993e1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-20T13:43:42Z","modified":"2025-09-20T13:43:42Z","name":"Phishing domain: aio.sushiswap.tech","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating SushiSwap. Report & evidence: https://phishdestroy.io/domain/aio.sushiswap.tech","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aio.sushiswap.tech']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-20T13:43:42Z","labels":["malicious-activity","phishing","brand:sushiswap"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aio.sushiswap.tech"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6018d668-c564-56cb-adf3-25a93a10309d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T16:35:21Z","modified":"2026-06-15T16:35:21Z","name":"Phishing domain: aiobais.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/aiobais.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiobais.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T16:35:21Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aiobais.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d117e74-8852-56c5-8709-b91c7554be32","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-28T21:02:55Z","modified":"2026-04-28T21:02:55Z","name":"Phishing domain: aiobais.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/aiobais.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiobais.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-28T21:02:55Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aiobais.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e3f1add-29bc-53a4-8892-9eec575fa167","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T16:35:42Z","modified":"2026-06-15T16:35:42Z","name":"Phishing domain: aiobais.org","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/aiobais.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiobais.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T16:35:42Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aiobais.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cc1d757-f79e-56e7-96de-e8c303987074","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-03T13:23:29Z","modified":"2026-06-03T13:23:29Z","name":"Phishing domain: aiocins.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aiocins.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiocins.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-03T13:23:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aiocins.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--378c4f03-78da-5616-995e-bfa2db353552","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-15T12:37:53Z","modified":"2025-11-15T12:37:53Z","name":"Phishing domain: aiohmygoodnes.store","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating youtube. Report & evidence: https://phishdestroy.io/domain/aiohmygoodnes.store","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiohmygoodnes.store']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-15T12:37:53Z","labels":["malicious-activity","phishing","brand:youtube"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aiohmygoodnes.store"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2517c596-1832-5520-89a3-7039a54fe857","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:19Z","modified":"2026-02-26T23:21:19Z","name":"Phishing domain: aiorodrome.finance","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aiorodrome.finance","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiorodrome.finance']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:19Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aiorodrome.finance"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--50d69244-95b3-55cc-a103-a2252074a749","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-24T16:52:45Z","modified":"2025-09-24T16:52:45Z","name":"Phishing domain: aioz--sushi.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating SushiSwap. Report & evidence: https://phishdestroy.io/domain/aioz--sushi.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aioz--sushi.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-24T16:52:45Z","labels":["malicious-activity","phishing","brand:sushiswap"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aioz--sushi.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--58e52aa6-0605-57d7-a0bd-085c850bad37","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:05Z","modified":"2026-02-26T23:21:05Z","name":"Phishing domain: aioz-sushi.pro","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating SushiSwap. Report & evidence: https://phishdestroy.io/domain/aioz-sushi.pro","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aioz-sushi.pro']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:05Z","labels":["malicious-activity","phishing","brand:sushiswap"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aioz-sushi.pro"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ca67a4b-83e0-5287-8eec-294cd1d54477","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-24T11:15:39Z","modified":"2025-09-24T11:15:39Z","name":"Phishing domain: aioz.sushistakes.biz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating SushiSwap. Report & evidence: https://phishdestroy.io/domain/aioz.sushistakes.biz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aioz.sushistakes.biz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-24T11:15:39Z","labels":["malicious-activity","phishing","brand:sushiswap"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aioz.sushistakes.biz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--338202c8-1efd-5e44-8a3e-8c67bde13a05","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-24T11:14:00Z","modified":"2025-09-24T11:14:00Z","name":"Phishing domain: aioz.sushistakes.info","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating SushiSwap. Report & evidence: https://phishdestroy.io/domain/aioz.sushistakes.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aioz.sushistakes.info']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-24T11:14:00Z","labels":["malicious-activity","phishing","brand:sushiswap"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aioz.sushistakes.info"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--988eddc4-bd40-5607-8780-cb3ed530d1b6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-24T11:12:48Z","modified":"2025-09-24T11:12:48Z","name":"Phishing domain: aioz.sushistakes.us","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating SushiSwap. Report & evidence: https://phishdestroy.io/domain/aioz.sushistakes.us","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aioz.sushistakes.us']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-24T11:12:48Z","labels":["malicious-activity","phishing","brand:sushiswap"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aioz.sushistakes.us"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1fc282e-4066-55df-99c8-7801c628c45c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:04Z","modified":"2026-02-26T23:20:04Z","name":"Phishing domain: aioznetwork.sushis.it.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating SushiSwap. Report & evidence: https://phishdestroy.io/domain/aioznetwork.sushis.it.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aioznetwork.sushis.it.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:04Z","labels":["malicious-activity","phishing","brand:sushiswap"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aioznetwork.sushis.it.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5121f5d5-519b-5cfe-9d5c-2ec52d8daa8f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: aiozsushi.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating SushiSwap. Report & evidence: https://phishdestroy.io/domain/aiozsushi.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiozsushi.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing","brand:sushiswap"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aiozsushi.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e111704d-868f-595c-b3a7-b0e28c14bd23","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-12T23:51:42Z","modified":"2026-02-12T23:51:42Z","name":"Phishing domain: aipartnercloud.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aipartnercloud.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aipartnercloud.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-12T23:51:42Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aipartnercloud.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe3ece55-bbeb-5c15-8ed6-87cd72659e32","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T04:26:23Z","modified":"2026-02-13T04:26:23Z","name":"Phishing domain: aipartnerhelp.org","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aipartnerhelp.org","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aipartnerhelp.org']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T04:26:23Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aipartnerhelp.org"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b78ffcd-4c47-558c-b800-cf318e02af7c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:56Z","modified":"2026-02-26T23:21:56Z","name":"Phishing domain: aipck.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/aipck.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aipck.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:56Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aipck.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8879bf5c-371e-58fd-85ad-4987bdb72df8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-08T08:17:11Z","modified":"2026-07-08T08:17:11Z","name":"Phishing domain: aipeakx.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aipeakx.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aipeakx.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-08T08:17:11Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aipeakx.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8425c47f-3c60-58b6-bcd2-b737303af24e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-04T12:13:12Z","modified":"2025-11-04T12:13:12Z","name":"Phishing domain: aipepex100.fun","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/aipepex100.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aipepex100.fun']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-04T12:13:12Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aipepex100.fun"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6662d40c-e715-5828-ba2a-2ba5a89614ac","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T13:29:19Z","modified":"2026-02-13T13:29:19Z","name":"Phishing domain: aiplayersdash.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aiplayersdash.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiplayersdash.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T13:29:19Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aiplayersdash.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--35b73fa1-a5f1-5b7d-b42e-e53d6f1fce11","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-23T03:10:18Z","modified":"2025-10-23T03:10:18Z","name":"Phishing domain: aipolvne.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating WalletConnect. Report & evidence: https://phishdestroy.io/domain/aipolvne.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aipolvne.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-23T03:10:18Z","labels":["malicious-activity","phishing","brand:walletconnect"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aipolvne.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc8a801d-4e6e-5513-9984-72fd7dd313dd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T06:41:09Z","modified":"2026-06-15T06:41:09Z","name":"Phishing domain: aipolymarket.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aipolymarket.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aipolymarket.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T06:41:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aipolymarket.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c69723d5-8ec0-55f6-a83c-821b7f80db86","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-13T12:30:12Z","modified":"2026-02-13T12:30:12Z","name":"Phishing domain: aipolypredictor.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aipolypredictor.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aipolypredictor.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-13T12:30:12Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aipolypredictor.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--43b71c20-d823-54de-9e1e-79334fa0372d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-26T15:20:02Z","modified":"2026-07-26T15:20:02Z","name":"Phishing domain: aipornland.cfd","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aipornland.cfd","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aipornland.cfd']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-26T15:20:02Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aipornland.cfd"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fb3402f-1a9a-596e-9192-24b4c283d427","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:01Z","modified":"2026-02-26T23:21:01Z","name":"Phishing domain: aipos223.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating trust wallet. Report & evidence: https://phishdestroy.io/domain/aipos223.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aipos223.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:01Z","labels":["malicious-activity","phishing","brand:trust wallet"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aipos223.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f85f418-827b-5d85-b769-da6340e934ec","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:35Z","modified":"2026-02-26T23:23:35Z","name":"Phishing domain: aipos999.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aipos999.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aipos999.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:35Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aipos999.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--681eb397-46a0-5a0f-8637-6c3d0df635ae","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-11T12:01:01Z","modified":"2025-11-11T12:01:01Z","name":"Phishing domain: aipoweredtoolkit.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/aipoweredtoolkit.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aipoweredtoolkit.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-11T12:01:01Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aipoweredtoolkit.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f81a00b9-6037-541f-92e1-d200e4978cd9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-07-13T09:47:41Z","modified":"2025-07-13T09:47:41Z","name":"Phishing domain: aipremiumtradingplatform.live","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/aipremiumtradingplatform.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aipremiumtradingplatform.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-07-13T09:47:41Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aipremiumtradingplatform.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a557459-8693-50ac-9952-6b19f88e2f2c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-10T00:40:09Z","modified":"2026-08-10T00:40:09Z","name":"Phishing domain: aiprimemarket.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aiprimemarket.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiprimemarket.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-10T00:40:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aiprimemarket.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c3f561c-8f7c-54fa-8537-211eb0afce0e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-11T03:14:19Z","modified":"2026-04-11T03:14:19Z","name":"Phishing domain: aipump.entrance-cryptolist.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aipump.entrance-cryptolist.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aipump.entrance-cryptolist.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-11T03:14:19Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aipump.entrance-cryptolist.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9551e7c-9d9c-5cdd-8632-d17d898ddb11","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-05T06:12:48Z","modified":"2026-05-05T06:12:48Z","name":"Phishing domain: aiquant.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating generic. Report & evidence: https://phishdestroy.io/domain/aiquant.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiquant.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-05T06:12:48Z","labels":["malicious-activity","phishing","brand:generic"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aiquant.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--abe68e26-cd9c-5a7e-859b-c5947edff1c0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-06T18:13:14Z","modified":"2026-07-06T18:13:14Z","name":"Phishing domain: aiquantitativefund.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aiquantitativefund.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiquantitativefund.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-06T18:13:14Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aiquantitativefund.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d6b43a8-c795-5f0a-98d8-fc690401a180","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-07T15:54:51Z","modified":"2025-09-07T15:54:51Z","name":"Phishing domain: aiquantitativeplus.co","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/aiquantitativeplus.co","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aiquantitativeplus.co']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-07T15:54:51Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aiquantitativeplus.co"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--559442cd-7c82-542e-adcf-62d1d5b3ebd0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-19T09:53:45Z","modified":"2026-06-19T09:53:45Z","name":"Phishing domain: air-claim.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/air-claim.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'air-claim.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-19T09:53:45Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/air-claim.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1362a071-dcca-59a8-8c43-dcfc1e67edfe","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-19T08:10:34Z","modified":"2025-10-19T08:10:34Z","name":"Phishing domain: air.cryptbnb.live","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/air.cryptbnb.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'air.cryptbnb.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-19T08:10:34Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/air.cryptbnb.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--037e57a5-d366-5e63-be93-4675c6ecc79c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-23T03:08:09Z","modified":"2025-09-23T03:08:09Z","name":"Phishing domain: air.sol-community.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating solana. Report & evidence: https://phishdestroy.io/domain/air.sol-community.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'air.sol-community.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-23T03:08:09Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/air.sol-community.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d216c999-1857-5c45-81b5-1c192c599da3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-05T15:50:38Z","modified":"2025-11-05T15:50:38Z","name":"Phishing domain: air.sol-shelter.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/air.sol-shelter.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'air.sol-shelter.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-05T15:50:38Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/air.sol-shelter.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdd8a4f8-610e-55a5-9d5d-03911a36ab58","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-20T02:33:17Z","modified":"2025-11-20T02:33:17Z","name":"Phishing domain: air.sol-union.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating solana. Report & evidence: https://phishdestroy.io/domain/air.sol-union.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'air.sol-union.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-20T02:33:17Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/air.sol-union.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f5cbbcc-020e-5b8b-b930-6864499fe726","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-23T21:55:21Z","modified":"2025-11-23T21:55:21Z","name":"Phishing domain: air.sol-world.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/air.sol-world.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'air.sol-world.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-23T21:55:21Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/air.sol-world.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--28696864-0c14-574a-9aec-8c3abde1a76d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-01T20:46:42Z","modified":"2025-09-01T20:46:42Z","name":"Phishing domain: air.solcore.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating solana. Report & evidence: https://phishdestroy.io/domain/air.solcore.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'air.solcore.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-01T20:46:42Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/air.solcore.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--81525fa4-d19e-551c-8bb9-667bba2137cc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-08T14:53:05Z","modified":"2025-12-08T14:53:05Z","name":"Phishing domain: air.solgalaxy.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/air.solgalaxy.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'air.solgalaxy.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-08T14:53:05Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/air.solgalaxy.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec13d3d1-7107-53f8-99a2-cf51dda0c58d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-08T04:28:04Z","modified":"2025-11-08T04:28:04Z","name":"Phishing domain: air.solhq.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Solana. Report & evidence: https://phishdestroy.io/domain/air.solhq.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'air.solhq.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-08T04:28:04Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/air.solhq.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0e5b317-9f9e-590e-beb7-c75ec7b817cf","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:21Z","modified":"2026-02-26T23:23:21Z","name":"Phishing domain: airableton.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airableton.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airableton.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:21Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airableton.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--56b421e6-bdb0-524c-98b9-070b2498425b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:09Z","modified":"2026-02-26T23:22:09Z","name":"Phishing domain: airableton.com.waforxste.cc","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airableton.com.waforxste.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airableton.com.waforxste.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airableton.com.waforxste.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--178feae9-ae1f-5938-97a8-c3c0d6220dde","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-22T21:55:13Z","modified":"2026-03-22T21:55:13Z","name":"Phishing domain: airacoin.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airacoin.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airacoin.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-22T21:55:13Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airacoin.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--38b53420-868b-5a38-9565-b090b7f1d963","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-26T19:06:01Z","modified":"2025-12-26T19:06:01Z","name":"Phishing domain: airally.co","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating binance. Report & evidence: https://phishdestroy.io/domain/airally.co","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airally.co']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-26T19:06:01Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airally.co"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dfa0593-c13e-5444-8310-4aa401d8d1bd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-28T07:36:02Z","modified":"2026-01-28T07:36:02Z","name":"Phishing domain: airallys.cc","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating binance. Report & evidence: https://phishdestroy.io/domain/airallys.cc","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airallys.cc']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-28T07:36:02Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airallys.cc"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea69ae3b-d33f-530a-9589-c8d37a2cd77a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-07T16:35:03Z","modified":"2025-08-07T16:35:03Z","name":"Phishing domain: airasiadiplomaticdelivery.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Polygon. Report & evidence: https://phishdestroy.io/domain/airasiadiplomaticdelivery.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airasiadiplomaticdelivery.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-07T16:35:03Z","labels":["malicious-activity","phishing","brand:polygon"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airasiadiplomaticdelivery.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7367d28b-7361-589c-9a31-0b119a6af607","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-23T05:42:54Z","modified":"2026-04-23T05:42:54Z","name":"Phishing domain: airasiamalaysia.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating phairlines. Report & evidence: https://phishdestroy.io/domain/airasiamalaysia.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airasiamalaysia.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-23T05:42:54Z","labels":["malicious-activity","phishing","brand:phairlines"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airasiamalaysia.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--87ab311f-fa81-5544-b5b1-f756da81d82e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-20T19:34:11Z","modified":"2025-12-20T19:34:11Z","name":"Phishing domain: airbnb-1869ae.webflow.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airbnb-1869ae.webflow.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airbnb-1869ae.webflow.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-20T19:34:11Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airbnb-1869ae.webflow.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dc94d14-391a-5dd4-b156-d7a0ef891be9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-06T13:57:31Z","modified":"2026-05-06T13:57:31Z","name":"Phishing domain: airbnb-62uf59t64-lukwiya23.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Airbnb. Report & evidence: https://phishdestroy.io/domain/airbnb-62uf59t64-lukwiya23.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airbnb-62uf59t64-lukwiya23.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-06T13:57:31Z","labels":["malicious-activity","phishing","brand:airbnb"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airbnb-62uf59t64-lukwiya23.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1beb77df-d84c-5c22-8109-a34866d1e238","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-23T02:20:01Z","modified":"2026-06-23T02:20:01Z","name":"Phishing domain: airbnb-assistant-landing.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Airbnb. Report & evidence: https://phishdestroy.io/domain/airbnb-assistant-landing.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airbnb-assistant-landing.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-23T02:20:01Z","labels":["malicious-activity","phishing","brand:airbnb"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airbnb-assistant-landing.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b15869f2-5391-5bf9-8c82-000b4b731667","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-09T19:15:48Z","modified":"2025-12-09T19:15:48Z","name":"Phishing domain: airbnb-booking-app.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airbnb-booking-app.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airbnb-booking-app.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-09T19:15:48Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airbnb-booking-app.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6d736fa-1284-597c-bcbc-4f4bf8ff58f8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-21T10:41:55Z","modified":"2025-12-21T10:41:55Z","name":"Phishing domain: airbnb-clone-2-a869t5upn-swissjake.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Airbnb. Report & evidence: https://phishdestroy.io/domain/airbnb-clone-2-a869t5upn-swissjake.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airbnb-clone-2-a869t5upn-swissjake.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-21T10:41:55Z","labels":["malicious-activity","phishing","brand:airbnb"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airbnb-clone-2-a869t5upn-swissjake.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a84a2b14-d174-5b1a-b97a-91818df30d18","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-17T03:10:56Z","modified":"2026-03-17T03:10:56Z","name":"Phishing domain: airbnb-clone-2-sigma.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Airbnb. Report & evidence: https://phishdestroy.io/domain/airbnb-clone-2-sigma.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airbnb-clone-2-sigma.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-17T03:10:56Z","labels":["malicious-activity","phishing","brand:airbnb"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airbnb-clone-2-sigma.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7634c18-0bee-5439-9ddf-5244ae817407","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:30Z","modified":"2026-02-26T23:20:30Z","name":"Phishing domain: airbnb-clone-app.vercel.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airbnb-clone-app.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airbnb-clone-app.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:30Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airbnb-clone-app.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c237d2c-84ad-5a52-b3c1-f782d97ffc18","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-08T15:06:24Z","modified":"2026-03-08T15:06:24Z","name":"Phishing domain: airbnb-clone-coral.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Airbnb. Report & evidence: https://phishdestroy.io/domain/airbnb-clone-coral.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airbnb-clone-coral.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-08T15:06:24Z","labels":["malicious-activity","phishing","brand:airbnb"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airbnb-clone-coral.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fcba89c-70df-55b6-9991-70b993fb337a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-10T14:15:29Z","modified":"2026-07-10T14:15:29Z","name":"Phishing domain: airbnb-clone-cp4.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Airbnb. Report & evidence: https://phishdestroy.io/domain/airbnb-clone-cp4.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airbnb-clone-cp4.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-10T14:15:29Z","labels":["malicious-activity","phishing","brand:airbnb"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airbnb-clone-cp4.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a994075-11d1-5f57-95e3-ad2d1f9cc10a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-13T03:08:02Z","modified":"2026-04-13T03:08:02Z","name":"Phishing domain: airbnb-clone-eosin-sigma.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/airbnb-clone-eosin-sigma.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airbnb-clone-eosin-sigma.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-13T03:08:02Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airbnb-clone-eosin-sigma.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5180c21b-6f63-5d78-95c2-47b74f3dea2a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:23Z","modified":"2026-02-26T23:22:23Z","name":"Phishing domain: airbnb-clone-farukipekcom.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating argent. Report & evidence: https://phishdestroy.io/domain/airbnb-clone-farukipekcom.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airbnb-clone-farukipekcom.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:23Z","labels":["malicious-activity","phishing","brand:argent"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airbnb-clone-farukipekcom.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--daff506e-da88-502e-9058-50359ca6ca66","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-13T15:12:31Z","modified":"2025-12-13T15:12:31Z","name":"Phishing domain: airbnb-clone-final.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Airbnb. Report & evidence: https://phishdestroy.io/domain/airbnb-clone-final.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airbnb-clone-final.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-13T15:12:31Z","labels":["malicious-activity","phishing","brand:airbnb"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airbnb-clone-final.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--476545d5-a276-585f-8ca0-4c167bf4d2de","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-05-13T03:49:37Z","modified":"2026-05-13T03:49:37Z","name":"Phishing domain: airbnb-clone-g54voyuwx-huucanh2011.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating airbnb. Report & evidence: https://phishdestroy.io/domain/airbnb-clone-g54voyuwx-huucanh2011.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airbnb-clone-g54voyuwx-huucanh2011.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-05-13T03:49:37Z","labels":["malicious-activity","phishing","brand:airbnb"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airbnb-clone-g54voyuwx-huucanh2011.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e346608-50b6-5376-95c5-09620c643fdc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-18T13:43:13Z","modified":"2026-03-18T13:43:13Z","name":"Phishing domain: airbnb-clone-hulu-app.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating youtube. Report & evidence: https://phishdestroy.io/domain/airbnb-clone-hulu-app.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airbnb-clone-hulu-app.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-18T13:43:13Z","labels":["malicious-activity","phishing","brand:youtube"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airbnb-clone-hulu-app.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d33d7115-74d7-593e-a6b0-10f53660dfb8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-20T16:15:42Z","modified":"2026-02-20T16:15:42Z","name":"Phishing domain: airbnb-clone-iota-five.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Airbnb. Report & evidence: https://phishdestroy.io/domain/airbnb-clone-iota-five.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airbnb-clone-iota-five.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-20T16:15:42Z","labels":["malicious-activity","phishing","brand:airbnb"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airbnb-clone-iota-five.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--308b43d3-eeda-524b-949f-12d2bccc27bb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-02T13:17:25Z","modified":"2026-01-02T13:17:25Z","name":"Phishing domain: airbnb-clone-lime.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Airbnb. Report & evidence: https://phishdestroy.io/domain/airbnb-clone-lime.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airbnb-clone-lime.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-02T13:17:25Z","labels":["malicious-activity","phishing","brand:airbnb"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airbnb-clone-lime.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e17b2fec-d5cd-57be-9641-a127b969ee7e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-27T12:46:13Z","modified":"2025-12-27T12:46:13Z","name":"Phishing domain: airbnb-clone-omega-gules.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Airbnb. Report & evidence: https://phishdestroy.io/domain/airbnb-clone-omega-gules.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airbnb-clone-omega-gules.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-27T12:46:13Z","labels":["malicious-activity","phishing","brand:airbnb"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airbnb-clone-omega-gules.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--503e34a3-fb03-576d-84d2-2b37ca676876","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-01T16:20:40Z","modified":"2026-04-01T16:20:40Z","name":"Phishing domain: airbnb-clone-pi-seven.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Airbnb. Report & evidence: https://phishdestroy.io/domain/airbnb-clone-pi-seven.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airbnb-clone-pi-seven.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-01T16:20:40Z","labels":["malicious-activity","phishing","brand:airbnb"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airbnb-clone-pi-seven.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d431cace-934c-564f-a5ef-17fb62970f61","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-19T15:14:03Z","modified":"2026-02-19T15:14:03Z","name":"Phishing domain: airbnb-clone-randilw.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating youtube. Report & evidence: https://phishdestroy.io/domain/airbnb-clone-randilw.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airbnb-clone-randilw.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-19T15:14:03Z","labels":["malicious-activity","phishing","brand:youtube"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airbnb-clone-randilw.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c291fd1b-0e0d-5c52-b444-b1b19fd1167a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-10T04:59:25Z","modified":"2025-12-10T04:59:25Z","name":"Phishing domain: airbnb-clone-site.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcloudflare. Report & evidence: https://phishdestroy.io/domain/airbnb-clone-site.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airbnb-clone-site.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-10T04:59:25Z","labels":["malicious-activity","phishing","brand:genericcloudflare"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airbnb-clone-site.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c62d7ac-1c0b-5367-89ac-0ccfd0bbe831","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-01T16:19:55Z","modified":"2026-04-01T16:19:55Z","name":"Phishing domain: airbnb-clone-teal-nine.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Airbnb. Report & evidence: https://phishdestroy.io/domain/airbnb-clone-teal-nine.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airbnb-clone-teal-nine.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-01T16:19:55Z","labels":["malicious-activity","phishing","brand:airbnb"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airbnb-clone-teal-nine.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--673753bf-b2ce-5b79-8e1e-1ebf53860fe2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-28T16:33:12Z","modified":"2026-04-28T16:33:12Z","name":"Phishing domain: airbnb-clone-theta-nine.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Airbnb. Report & evidence: https://phishdestroy.io/domain/airbnb-clone-theta-nine.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airbnb-clone-theta-nine.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-28T16:33:12Z","labels":["malicious-activity","phishing","brand:airbnb"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airbnb-clone-theta-nine.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--468f566e-d1eb-5581-aba4-2b5945a27689","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: airbnb-clone-theta-ruddy.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Airbnb. Report & evidence: https://phishdestroy.io/domain/airbnb-clone-theta-ruddy.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airbnb-clone-theta-ruddy.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing","brand:airbnb"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airbnb-clone-theta-ruddy.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc31c2bf-09b9-569d-9c54-35ef6c3fc753","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-19T15:11:32Z","modified":"2026-02-19T15:11:32Z","name":"Phishing domain: airbnb-clone-theta-ten.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating youtube. Report & evidence: https://phishdestroy.io/domain/airbnb-clone-theta-ten.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airbnb-clone-theta-ten.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-19T15:11:32Z","labels":["malicious-activity","phishing","brand:youtube"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airbnb-clone-theta-ten.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--12e036fd-0891-527e-b7ca-d379195b387f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-08T15:07:46Z","modified":"2026-03-08T15:07:46Z","name":"Phishing domain: airbnb-clone-xi-nine.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Airbnb. Report & evidence: https://phishdestroy.io/domain/airbnb-clone-xi-nine.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airbnb-clone-xi-nine.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-08T15:07:46Z","labels":["malicious-activity","phishing","brand:airbnb"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airbnb-clone-xi-nine.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a00ac0a7-62ee-534d-882e-0f9d27c18302","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-12T02:18:37Z","modified":"2025-12-12T02:18:37Z","name":"Phishing domain: airbnb-clone-zeta-drab.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Airbnb. Report & evidence: https://phishdestroy.io/domain/airbnb-clone-zeta-drab.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airbnb-clone-zeta-drab.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-12T02:18:37Z","labels":["malicious-activity","phishing","brand:airbnb"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airbnb-clone-zeta-drab.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9507423-6422-5cf6-a71b-4945c5939774","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-22T03:14:55Z","modified":"2026-03-22T03:14:55Z","name":"Phishing domain: airbnb-clone-zeta-five.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Airbnb. Report & evidence: https://phishdestroy.io/domain/airbnb-clone-zeta-five.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airbnb-clone-zeta-five.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-22T03:14:55Z","labels":["malicious-activity","phishing","brand:airbnb"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airbnb-clone-zeta-five.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--39e77423-7499-5328-abaf-4f834d8e4133","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:11Z","modified":"2026-02-26T23:23:11Z","name":"Phishing domain: airbnb-cloneuv6y.rollout.site","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating [\"near\"]. Report & evidence: https://phishdestroy.io/domain/airbnb-cloneuv6y.rollout.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airbnb-cloneuv6y.rollout.site']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:11Z","labels":["malicious-activity","phishing","brand:[\"near\"]"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airbnb-cloneuv6y.rollout.site"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b77126eb-1921-5fd9-aed8-8af5de4f0770","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-07T14:57:08Z","modified":"2025-12-07T14:57:08Z","name":"Phishing domain: airbnb-demo-jade.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Airbnb. Report & evidence: https://phishdestroy.io/domain/airbnb-demo-jade.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airbnb-demo-jade.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-07T14:57:08Z","labels":["malicious-activity","phishing","brand:airbnb"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airbnb-demo-jade.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--47efb1eb-9483-5cd5-9f49-491091ef3ee3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-04T14:58:39Z","modified":"2026-01-04T14:58:39Z","name":"Phishing domain: airbnb-dev.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Airbnb. Report & evidence: https://phishdestroy.io/domain/airbnb-dev.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airbnb-dev.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-04T14:58:39Z","labels":["malicious-activity","phishing","brand:airbnb"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airbnb-dev.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--49c533e4-8b26-5166-9ebd-0515de75a200","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-23T12:24:18Z","modified":"2025-12-23T12:24:18Z","name":"Phishing domain: airbnb-frontend-beryl.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Airbnb. Report & evidence: https://phishdestroy.io/domain/airbnb-frontend-beryl.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airbnb-frontend-beryl.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-23T12:24:18Z","labels":["malicious-activity","phishing","brand:airbnb"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airbnb-frontend-beryl.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--867d85ed-cb62-5020-9608-f1e0011ae823","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-02T16:45:01Z","modified":"2026-03-02T16:45:01Z","name":"Phishing domain: airbnb-housing.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/airbnb-housing.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airbnb-housing.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-02T16:45:01Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airbnb-housing.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--35856659-a564-5879-a5ac-ae2ccc85df35","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:00Z","modified":"2026-02-26T23:23:00Z","name":"Phishing domain: airbnb-meedoox.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating youtube. Report & evidence: https://phishdestroy.io/domain/airbnb-meedoox.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airbnb-meedoox.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:00Z","labels":["malicious-activity","phishing","brand:youtube"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airbnb-meedoox.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad1933ac-527a-549c-981f-d4a13232497b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:59Z","modified":"2026-02-26T23:20:59Z","name":"Phishing domain: airbnb-nextjs-ammar-ahmads-projects.vercel.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airbnb-nextjs-ammar-ahmads-projects.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airbnb-nextjs-ammar-ahmads-projects.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:59Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airbnb-nextjs-ammar-ahmads-projects.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b30b53b8-0d84-5a71-9332-16bc8ccc0e41","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-02T16:44:20Z","modified":"2026-03-02T16:44:20Z","name":"Phishing domain: airbnb-nextjs-prahladtimalsina7-gmailcom.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Airbnb. Report & evidence: https://phishdestroy.io/domain/airbnb-nextjs-prahladtimalsina7-gmailcom.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airbnb-nextjs-prahladtimalsina7-gmailcom.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-02T16:44:20Z","labels":["malicious-activity","phishing","brand:airbnb"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airbnb-nextjs-prahladtimalsina7-gmailcom.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbc9b87f-7c34-5fb2-9692-417cd00974c8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-28T16:35:51Z","modified":"2026-04-28T16:35:51Z","name":"Phishing domain: airbnb-project.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Airbnb. Report & evidence: https://phishdestroy.io/domain/airbnb-project.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airbnb-project.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-28T16:35:51Z","labels":["malicious-activity","phishing","brand:airbnb"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airbnb-project.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--76dd2dfa-1580-53a5-ab74-cb46388cf0e6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-18T16:11:50Z","modified":"2025-10-18T16:11:50Z","name":"Phishing domain: airbnb-reservations-rooms-31377018-properties.projedekorasyon.com.tr","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airbnb-reservations-rooms-31377018-properties.projedekorasyon.com.tr","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airbnb-reservations-rooms-31377018-properties.projedekorasyon.com.tr']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-18T16:11:50Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airbnb-reservations-rooms-31377018-properties.projedekorasyon.com.tr"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e3765a2-35e1-5088-8ee3-a38b80896345","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-26T12:16:22Z","modified":"2025-12-26T12:16:22Z","name":"Phishing domain: airbnb-rooms.netlify.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Airbnb. Report & evidence: https://phishdestroy.io/domain/airbnb-rooms.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airbnb-rooms.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-26T12:16:22Z","labels":["malicious-activity","phishing","brand:airbnb"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airbnb-rooms.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a72c33e4-baba-57a8-bc30-b90f8237e5d9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-03T12:16:37Z","modified":"2026-01-03T12:16:37Z","name":"Phishing domain: airbnb-seven-lime.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Airbnb. Report & evidence: https://phishdestroy.io/domain/airbnb-seven-lime.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airbnb-seven-lime.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-03T12:16:37Z","labels":["malicious-activity","phishing","brand:airbnb"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airbnb-seven-lime.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba6a2780-77f1-5f10-95cb-09c101b1527c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-09T14:24:19Z","modified":"2026-06-09T14:24:19Z","name":"Phishing domain: airbnb-style-clone.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Airbnb. Report & evidence: https://phishdestroy.io/domain/airbnb-style-clone.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airbnb-style-clone.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-09T14:24:19Z","labels":["malicious-activity","phishing","brand:airbnb"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airbnb-style-clone.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d66a1ff-2ca2-5fa0-8cbe-51d92e2608da","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-29T15:11:50Z","modified":"2025-11-29T15:11:50Z","name":"Phishing domain: airbnb-ten-zeta.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Airbnb. Report & evidence: https://phishdestroy.io/domain/airbnb-ten-zeta.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airbnb-ten-zeta.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-29T15:11:50Z","labels":["malicious-activity","phishing","brand:airbnb"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airbnb-ten-zeta.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6477ff41-7be0-5dfa-8db1-7c49f9b9e226","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-03T13:20:36Z","modified":"2025-12-03T13:20:36Z","name":"Phishing domain: airbnb-test2.endless-creativity.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airbnb-test2.endless-creativity.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airbnb-test2.endless-creativity.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-03T13:20:36Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airbnb-test2.endless-creativity.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--81b760cc-b6fb-5fce-bf37-41c7349c9adb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-24T01:32:14Z","modified":"2026-06-24T01:32:14Z","name":"Phishing domain: airbnb-us.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Airbnb. Report & evidence: https://phishdestroy.io/domain/airbnb-us.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airbnb-us.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-24T01:32:14Z","labels":["malicious-activity","phishing","brand:airbnb"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airbnb-us.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1cf22ee-fe52-5990-b6d2-7bdd2c905919","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:35Z","modified":"2026-02-26T23:21:35Z","name":"Phishing domain: airbnb-virid-five.vercel.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airbnb-virid-five.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airbnb-virid-five.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:35Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airbnb-virid-five.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--118ce037-bad5-5e21-8bbe-78d197b37705","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-12T16:30:04Z","modified":"2026-03-12T16:30:04Z","name":"Phishing domain: airbnbclone-haris.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Airbnb. Report & evidence: https://phishdestroy.io/domain/airbnbclone-haris.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airbnbclone-haris.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-12T16:30:04Z","labels":["malicious-activity","phishing","brand:airbnb"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airbnbclone-haris.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e6fd663-07da-54a7-af8c-4e84cc0bb263","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-01T03:44:03Z","modified":"2026-06-01T03:44:03Z","name":"Phishing domain: airbnbclone-jrg8daobo-yusef-mohamed.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Airbnb. Report & evidence: https://phishdestroy.io/domain/airbnbclone-jrg8daobo-yusef-mohamed.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airbnbclone-jrg8daobo-yusef-mohamed.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-01T03:44:03Z","labels":["malicious-activity","phishing","brand:airbnb"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airbnbclone-jrg8daobo-yusef-mohamed.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e61f8fe-bcac-540c-955f-9ed330129095","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-23T12:40:05Z","modified":"2025-11-23T12:40:05Z","name":"Phishing domain: airbnbd085.rollout.site","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airbnbd085.rollout.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airbnbd085.rollout.site']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-23T12:40:05Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airbnbd085.rollout.site"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--359953eb-c930-5da8-8009-01d00fb65db1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-01T20:10:09Z","modified":"2026-08-01T20:10:09Z","name":"Phishing domain: airbnbs-clone.netlify.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Airbnb. Report & evidence: https://phishdestroy.io/domain/airbnbs-clone.netlify.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airbnbs-clone.netlify.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-01T20:10:09Z","labels":["malicious-activity","phishing","brand:airbnb"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airbnbs-clone.netlify.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d438a963-3ae6-5091-932c-05a23558a72a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-29T02:30:26Z","modified":"2026-06-29T02:30:26Z","name":"Phishing domain: airbnbvip.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Airbnb. Report & evidence: https://phishdestroy.io/domain/airbnbvip.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airbnbvip.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-29T02:30:26Z","labels":["malicious-activity","phishing","brand:airbnb"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airbnbvip.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a4047f7-79d9-53cc-8605-4cf88e7f8780","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-16T16:34:31Z","modified":"2026-02-16T16:34:31Z","name":"Phishing domain: airbnbwebsite-nine.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Airbnb. Report & evidence: https://phishdestroy.io/domain/airbnbwebsite-nine.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airbnbwebsite-nine.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-16T16:34:31Z","labels":["malicious-activity","phishing","brand:airbnb"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airbnbwebsite-nine.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e2ee39e-dc62-58a0-8964-72c1b22c54d8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-21T15:14:07Z","modified":"2026-02-21T15:14:07Z","name":"Phishing domain: airbornechatter.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airbornechatter.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airbornechatter.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-21T15:14:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airbornechatter.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8deeccf9-3081-5d97-b9ad-29c745745fc0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:30Z","modified":"2026-02-26T23:23:30Z","name":"Phishing domain: airbridgecargologistics.com.goldentrustfundz.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Google. Report & evidence: https://phishdestroy.io/domain/airbridgecargologistics.com.goldentrustfundz.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airbridgecargologistics.com.goldentrustfundz.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:30Z","labels":["malicious-activity","phishing","brand:google"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airbridgecargologistics.com.goldentrustfundz.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9ba38b2-6e77-5377-95d1-f1014dc0230b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: airc-on-arc.vercel.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airc-on-arc.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airc-on-arc.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airc-on-arc.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b0ba524-c3e8-5e32-af34-b65c31f56181","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:57Z","modified":"2026-02-26T23:21:57Z","name":"Phishing domain: aircash.club","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aircash.club","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aircash.club']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:57Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aircash.club"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e109366-f2a2-55d0-8cde-d542fccf841d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-01T18:04:20Z","modified":"2026-04-01T18:04:20Z","name":"Phishing domain: aircat.click","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/aircat.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aircat.click']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-01T18:04:20Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aircat.click"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--64b7823b-4efd-5d6a-8af9-7579049c3cd8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-27T09:05:36Z","modified":"2026-07-27T09:05:36Z","name":"Phishing domain: airchanellelogistics.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airchanellelogistics.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airchanellelogistics.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-27T09:05:36Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airchanellelogistics.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2549209e-c69a-5d0d-9294-94060a8e6684","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-24T16:59:48Z","modified":"2025-10-24T16:59:48Z","name":"Phishing domain: airclaim.presidentxi.live","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating solana. Report & evidence: https://phishdestroy.io/domain/airclaim.presidentxi.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airclaim.presidentxi.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-24T16:59:48Z","labels":["malicious-activity","phishing","brand:solana"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airclaim.presidentxi.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--46f79ae1-6319-5797-b25e-b368d056650d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-07-18T17:41:38Z","modified":"2026-07-18T17:41:38Z","name":"Phishing domain: airconalgarve.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airconalgarve.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airconalgarve.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-07-18T17:41:38Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airconalgarve.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa08c21d-d9ee-51f9-a695-cfb30fc9e467","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-29T04:18:42Z","modified":"2025-08-29T04:18:42Z","name":"Phishing domain: airconditionerwithheatpump.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airconditionerwithheatpump.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airconditionerwithheatpump.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-29T04:18:42Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airconditionerwithheatpump.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6147e141-1d6d-546b-b49d-0638ae2a22f0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:03Z","modified":"2026-02-26T23:23:03Z","name":"Phishing domain: aircourierdelivery.info","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/aircourierdelivery.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aircourierdelivery.info']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:03Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aircourierdelivery.info"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d35d785-8210-53e3-b6a6-99b75b82a1b8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-28T18:45:01Z","modified":"2025-11-28T18:45:01Z","name":"Phishing domain: aircrypto.info","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating metamask. Report & evidence: https://phishdestroy.io/domain/aircrypto.info","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'aircrypto.info']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-28T18:45:01Z","labels":["malicious-activity","phishing","brand:metamask"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/aircrypto.info"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c9fc89a-bc48-5f48-9404-4b96b08546e9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-05T23:19:01Z","modified":"2026-02-05T23:19:01Z","name":"Phishing domain: airdao-steam.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aave. Report & evidence: https://phishdestroy.io/domain/airdao-steam.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdao-steam.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-05T23:19:01Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdao-steam.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--355c0ce1-f5f9-55fa-b123-86aa946396d0","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-28T17:58:48Z","modified":"2026-02-28T17:58:48Z","name":"Phishing domain: airdaodapp.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airdaodapp.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdaodapp.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-28T17:58:48Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdaodapp.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7968afc9-f53e-5197-97f4-101dfbb4f25e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-13T05:56:54Z","modified":"2026-03-13T05:56:54Z","name":"Phishing domain: airdaorpcdapp.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airdaorpcdapp.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdaorpcdapp.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-13T05:56:54Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdaorpcdapp.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef75d440-b5a8-5f3c-8681-dd88a5de19ee","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-11T05:57:24Z","modified":"2026-02-11T05:57:24Z","name":"Phishing domain: airdaosteam.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating aave. Report & evidence: https://phishdestroy.io/domain/airdaosteam.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdaosteam.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-11T05:57:24Z","labels":["malicious-activity","phishing","brand:aave"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdaosteam.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9d3414c-0bab-5a92-a139-74699236b784","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:35Z","modified":"2026-02-26T23:20:35Z","name":"Phishing domain: airdapp.click","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating binance. Report & evidence: https://phishdestroy.io/domain/airdapp.click","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdapp.click']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:35Z","labels":["malicious-activity","phishing","brand:binance"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdapp.click"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd0c992d-674e-50ef-9aa2-73ec19cea885","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:09Z","modified":"2026-02-26T23:23:09Z","name":"Phishing domain: airdexnexus.site","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airdexnexus.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdexnexus.site']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:09Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdexnexus.site"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d6ae3e7-d105-5736-9c3a-5736208c03ea","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-13T04:17:21Z","modified":"2026-06-13T04:17:21Z","name":"Phishing domain: airdo.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airdo.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdo.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-13T04:17:21Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdo.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--01dd5e95-9f73-59ee-b768-0b0a109b6803","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-24T15:55:28Z","modified":"2025-10-24T15:55:28Z","name":"Phishing domain: airdop-hypeliquid.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/airdop-hypeliquid.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdop-hypeliquid.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-24T15:55:28Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdop-hypeliquid.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--98586777-b57e-5a1d-8311-7c9fd24317f8","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-21T01:03:38Z","modified":"2025-08-21T01:03:38Z","name":"Phishing domain: airdorops.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating discord. Report & evidence: https://phishdestroy.io/domain/airdorops.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdorops.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-21T01:03:38Z","labels":["malicious-activity","phishing","brand:discord"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdorops.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6d30164-a451-5a73-9cf4-1ae76575489c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-01T01:49:46Z","modified":"2026-06-01T01:49:46Z","name":"Phishing domain: airdrobusdt.biz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airdrobusdt.biz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrobusdt.biz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-01T01:49:46Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrobusdt.biz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bf58193-6e76-5899-8fb2-d5e484d4184a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-17T00:11:00Z","modified":"2025-09-17T00:11:00Z","name":"Phishing domain: airdroop.art","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/airdroop.art","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdroop.art']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-17T00:11:00Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdroop.art"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea83fe04-1002-5a08-8a65-cb071000858c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-14T15:41:11Z","modified":"2025-11-14T15:41:11Z","name":"Phishing domain: airdroop.cam","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/airdroop.cam","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdroop.cam']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-14T15:41:11Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdroop.cam"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d224556b-edba-59f3-b426-4256c4f28d28","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-25T12:38:05Z","modified":"2025-11-25T12:38:05Z","name":"Phishing domain: airdroop.top","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ethereum. Report & evidence: https://phishdestroy.io/domain/airdroop.top","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdroop.top']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-25T12:38:05Z","labels":["malicious-activity","phishing","brand:ethereum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdroop.top"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--40163759-390e-5b57-ac29-48b9a7c9ed3c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-17T13:18:46Z","modified":"2025-11-17T13:18:46Z","name":"Phishing domain: airdroop.world","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating foundation. Report & evidence: https://phishdestroy.io/domain/airdroop.world","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdroop.world']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-17T13:18:46Z","labels":["malicious-activity","phishing","brand:foundation"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdroop.world"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--91cad164-e070-5749-9c42-41e55339ba5c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-16T15:54:47Z","modified":"2025-09-16T15:54:47Z","name":"Phishing domain: airdrop-0gfoundation.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airdrop-0gfoundation.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-0gfoundation.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-16T15:54:47Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-0gfoundation.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a0b7333-456c-585b-b7d7-8999d58af5ac","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-28T12:34:44Z","modified":"2025-09-28T12:34:44Z","name":"Phishing domain: airdrop-0gfoundatlon.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airdrop-0gfoundatlon.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-0gfoundatlon.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-28T12:34:44Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-0gfoundatlon.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--363e7670-d88a-5ae2-ab92-c81a1804642c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:08Z","modified":"2026-02-26T23:23:08Z","name":"Phishing domain: airdrop-162.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/airdrop-162.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-162.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:08Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-162.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a5b12ec-185f-5725-80d8-240b4d82dfea","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:08Z","modified":"2026-02-26T23:21:08Z","name":"Phishing domain: airdrop-1rp.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airdrop-1rp.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-1rp.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:08Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-1rp.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--60ab679e-8e1f-5bb5-8332-06a499972d7f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-29T11:27:23Z","modified":"2025-12-29T11:27:23Z","name":"Phishing domain: airdrop-2026.fun","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airdrop-2026.fun","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-2026.fun']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-29T11:27:23Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-2026.fun"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--41f319b6-9b93-5fc9-ae76-bbc843de021f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-09T04:14:21Z","modified":"2026-06-09T04:14:21Z","name":"Phishing domain: airdrop-250.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Airdrop Scam. Report & evidence: https://phishdestroy.io/domain/airdrop-250.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-250.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-09T04:14:21Z","labels":["malicious-activity","phishing","brand:airdrop scam"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-250.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--49eaa7fd-a12e-5dfb-832b-bb1edbf604e1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-08T07:43:06Z","modified":"2025-09-08T07:43:06Z","name":"Phishing domain: airdrop-375ai.live","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating revolut. Report & evidence: https://phishdestroy.io/domain/airdrop-375ai.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-375ai.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-08T07:43:06Z","labels":["malicious-activity","phishing","brand:revolut"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-375ai.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--71552e6c-a504-59ea-9876-bb99560712de","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-29T06:14:05Z","modified":"2026-04-29T06:14:05Z","name":"Phishing domain: airdrop-3me.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airdrop-3me.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-3me.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-29T06:14:05Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-3me.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3de35b24-f0fa-5d19-a7f3-50e5df142130","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-18T22:57:12Z","modified":"2026-04-18T22:57:12Z","name":"Phishing domain: airdrop-4tw.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airdrop-4tw.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-4tw.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-18T22:57:12Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-4tw.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b983e76-4f36-5d58-9799-2ed7d02de2f9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-01T04:36:25Z","modified":"2026-04-01T04:36:25Z","name":"Phishing domain: airdrop-5i9.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airdrop-5i9.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-5i9.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-01T04:36:25Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-5i9.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebe98b08-8ae1-51cc-a795-9cbf72310aeb","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-30T05:42:58Z","modified":"2026-03-30T05:42:58Z","name":"Phishing domain: airdrop-6nr.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airdrop-6nr.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-6nr.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-30T05:42:58Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-6nr.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e5260ab-775c-5511-8055-48fb85cfd96a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: airdrop-7su.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airdrop-7su.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-7su.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-7su.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4a1cf87-2606-5c68-8758-933d89fb2762","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-03T16:52:18Z","modified":"2025-12-03T16:52:18Z","name":"Phishing domain: airdrop-888.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airdrop-888.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-888.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-03T16:52:18Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-888.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5fbb61a-5b40-5222-bf53-a6fc91565901","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-15T00:27:29Z","modified":"2026-06-15T00:27:29Z","name":"Phishing domain: airdrop-8ln.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airdrop-8ln.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-8ln.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-15T00:27:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-8ln.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b854cfc-a670-5180-bdd6-8fe647dcce20","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:56Z","modified":"2026-02-26T23:23:56Z","name":"Phishing domain: airdrop-9e6.pages.dev","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating [\"bitget\"]. Report & evidence: https://phishdestroy.io/domain/airdrop-9e6.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-9e6.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:56Z","labels":["malicious-activity","phishing","brand:[\"bitget\"]"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-9e6.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e45c19b-5248-5ce9-8259-a2556580c27f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-23T07:03:53Z","modified":"2026-06-23T07:03:53Z","name":"Phishing domain: airdrop-aa3.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airdrop-aa3.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-aa3.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-23T07:03:53Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-aa3.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb2905a0-6d9c-5a85-83ec-0973db0bb952","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-01T10:20:35Z","modified":"2026-08-01T10:20:35Z","name":"Phishing domain: airdrop-ads.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/airdrop-ads.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-ads.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-01T10:20:35Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-ads.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ef6224d-33c7-5119-bde4-f7f8370e858b","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-06-19T09:58:17Z","modified":"2026-06-19T09:58:17Z","name":"Phishing domain: airdrop-agent.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airdrop-agent.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-agent.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-06-19T09:58:17Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-agent.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8567b075-4282-5b2d-9d56-cee0f6221d5d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-03T20:06:27Z","modified":"2025-12-03T20:06:27Z","name":"Phishing domain: airdrop-alpha-eight.vercel.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ledger. Report & evidence: https://phishdestroy.io/domain/airdrop-alpha-eight.vercel.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-alpha-eight.vercel.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-03T20:06:27Z","labels":["malicious-activity","phishing","brand:ledger"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-alpha-eight.vercel.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6872e461-3708-50d1-900d-9891d277090e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-07T17:32:28Z","modified":"2026-04-07T17:32:28Z","name":"Phishing domain: airdrop-ama.one","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/airdrop-ama.one","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-ama.one']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-07T17:32:28Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-ama.one"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3969441c-0a3c-59d7-87ea-fd084ebd638e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:21Z","modified":"2026-02-26T23:24:21Z","name":"Phishing domain: airdrop-analog.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airdrop-analog.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-analog.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:21Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-analog.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--98e66ce5-4543-5ab8-8817-09a82d39289e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-03T16:50:01Z","modified":"2025-12-03T16:50:01Z","name":"Phishing domain: airdrop-apro.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/airdrop-apro.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-apro.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-03T16:50:01Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-apro.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a605a39b-bd4e-5557-a7e3-bf5347f1084c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-16T17:34:03Z","modified":"2025-09-16T17:34:03Z","name":"Phishing domain: airdrop-arai.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airdrop-arai.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-arai.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-16T17:34:03Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-arai.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c305483-49c7-5732-b0e3-a62156cc98f2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-07T12:43:14Z","modified":"2025-08-07T12:43:14Z","name":"Phishing domain: airdrop-arb.net","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating arbitrum. Report & evidence: https://phishdestroy.io/domain/airdrop-arb.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-arb.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-07T12:43:14Z","labels":["malicious-activity","phishing","brand:arbitrum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-arb.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c09be11-434f-5ed2-9adc-32265cb8daf7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-24T22:23:11Z","modified":"2026-03-24T22:23:11Z","name":"Phishing domain: airdrop-arbdoge.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airdrop-arbdoge.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-arbdoge.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-24T22:23:11Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-arbdoge.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd0f7611-24a7-53d9-94cc-edacb44d48b5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-08T07:39:54Z","modified":"2025-09-08T07:39:54Z","name":"Phishing domain: airdrop-arweave.live","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airdrop-arweave.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-arweave.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-08T07:39:54Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-arweave.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c4b3647-0b85-5a38-a8e0-0ddd7ea57ac9","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-08T07:43:28Z","modified":"2025-09-08T07:43:28Z","name":"Phishing domain: airdrop-assisterr.live","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airdrop-assisterr.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-assisterr.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-08T07:43:28Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-assisterr.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cd8332f-a35d-55e5-be5b-94f26561d035","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-12-16T13:40:19Z","modified":"2025-12-16T13:40:19Z","name":"Phishing domain: airdrop-asterdex.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating WalletConnect. Report & evidence: https://phishdestroy.io/domain/airdrop-asterdex.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-asterdex.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-12-16T13:40:19Z","labels":["malicious-activity","phishing","brand:walletconnect"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-asterdex.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cbd4600-0a7d-584d-ac24-ba0920b46c85","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:53Z","modified":"2026-02-26T23:22:53Z","name":"Phishing domain: airdrop-avici.money","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airdrop-avici.money","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-avici.money']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:53Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-avici.money"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--63e2a805-2191-59d6-8978-64e6b37639d6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-08T07:43:41Z","modified":"2025-09-08T07:43:41Z","name":"Phishing domain: airdrop-babylon.live","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating revolut. Report & evidence: https://phishdestroy.io/domain/airdrop-babylon.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-babylon.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-08T07:43:41Z","labels":["malicious-activity","phishing","brand:revolut"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-babylon.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1409a06-954f-52e2-8d52-d082b52cfa04","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-04-07T17:32:20Z","modified":"2026-04-07T17:32:20Z","name":"Phishing domain: airdrop-backpack.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating [\"backpack\"]. Report & evidence: https://phishdestroy.io/domain/airdrop-backpack.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-backpack.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-04-07T17:32:20Z","labels":["malicious-activity","phishing","brand:[\"backpack\"]"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-backpack.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4e32707-4c32-5f79-970f-b45b8770a522","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:43Z","modified":"2026-02-26T23:23:43Z","name":"Phishing domain: airdrop-base.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating coinbase. Report & evidence: https://phishdestroy.io/domain/airdrop-base.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-base.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:43Z","labels":["malicious-activity","phishing","brand:coinbase"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-base.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--35dcc38d-78d4-57f4-a596-1ec0be0c2cf4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:12Z","modified":"2026-02-26T23:23:12Z","name":"Phishing domain: airdrop-bbx.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airdrop-bbx.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-bbx.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:12Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-bbx.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4fc70a5-de25-54d6-b0e5-2d3a1f459d03","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:27Z","modified":"2026-02-26T23:20:27Z","name":"Phishing domain: airdrop-beam-token.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airdrop-beam-token.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-beam-token.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:27Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-beam-token.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--73e99c7c-cb3b-5511-8d2d-7415b3545a21","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-08T07:43:25Z","modified":"2025-09-08T07:43:25Z","name":"Phishing domain: airdrop-bedrock.live","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating revolut. Report & evidence: https://phishdestroy.io/domain/airdrop-bedrock.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-bedrock.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-08T07:43:25Z","labels":["malicious-activity","phishing","brand:revolut"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-bedrock.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--325f031b-00e4-53a5-9e41-cfa90cd6d131","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-28T07:58:46Z","modified":"2026-01-28T07:58:46Z","name":"Phishing domain: airdrop-bevm.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/airdrop-bevm.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-bevm.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-28T07:58:46Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-bevm.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--46efc7dd-70c6-5404-91ac-248238156478","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-01-27T18:23:40Z","modified":"2026-01-27T18:23:40Z","name":"Phishing domain: airdrop-billions.network","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/airdrop-billions.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-billions.network']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-01-27T18:23:40Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-billions.network"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce7670bd-df8a-5642-af97-83d36ffc4f8a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-21T18:11:47Z","modified":"2026-02-21T18:11:47Z","name":"Phishing domain: airdrop-biofoundation.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/airdrop-biofoundation.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-biofoundation.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-21T18:11:47Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-biofoundation.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ba02435-5c35-5ebc-87d7-762207df0488","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-21T22:07:53Z","modified":"2025-11-21T22:07:53Z","name":"Phishing domain: airdrop-bitcoinhyper.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Bitcoin. Report & evidence: https://phishdestroy.io/domain/airdrop-bitcoinhyper.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-bitcoinhyper.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-21T22:07:53Z","labels":["malicious-activity","phishing","brand:bitcoin"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-bitcoinhyper.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8d3b078-695a-5c36-89e3-63e72abb0f4c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-08T07:40:52Z","modified":"2025-09-08T07:40:52Z","name":"Phishing domain: airdrop-bitgetwallet.live","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating bitget. Report & evidence: https://phishdestroy.io/domain/airdrop-bitgetwallet.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-bitgetwallet.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-08T07:40:52Z","labels":["malicious-activity","phishing","brand:bitget"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-bitgetwallet.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a0a411f-13d3-519b-81e4-7e81c086f609","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-03T16:48:35Z","modified":"2025-09-03T16:48:35Z","name":"Phishing domain: airdrop-bitlayer.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating foundation. Report & evidence: https://phishdestroy.io/domain/airdrop-bitlayer.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-bitlayer.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-03T16:48:35Z","labels":["malicious-activity","phishing","brand:foundation"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-bitlayer.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d94146e-a4c9-5993-b606-f6b45dd35919","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:22:40Z","modified":"2026-02-26T23:22:40Z","name":"Phishing domain: airdrop-blackhole.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating metamask. Report & evidence: https://phishdestroy.io/domain/airdrop-blackhole.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-blackhole.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:22:40Z","labels":["malicious-activity","phishing","brand:metamask"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-blackhole.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a84231b8-f789-5f3b-b331-4dff58a9330f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-09T18:56:05Z","modified":"2025-09-09T18:56:05Z","name":"Phishing domain: airdrop-blackwing.live","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airdrop-blackwing.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-blackwing.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-09T18:56:05Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-blackwing.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9154e8e-df9d-5e30-8cff-ddc4ec30e580","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:24:35Z","modified":"2026-02-26T23:24:35Z","name":"Phishing domain: airdrop-blockdag.network","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airdrop-blockdag.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-blockdag.network']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:24:35Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-blockdag.network"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--402b7bd4-a8bd-5778-a66f-3c2d00375d2a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-08T07:45:57Z","modified":"2025-09-08T07:45:57Z","name":"Phishing domain: airdrop-blockmesh.live","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating revolut. Report & evidence: https://phishdestroy.io/domain/airdrop-blockmesh.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-blockmesh.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-08T07:45:57Z","labels":["malicious-activity","phishing","brand:revolut"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-blockmesh.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7b81d2b-1669-5040-82f3-81129fca61b3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-03-15T00:05:29Z","modified":"2026-03-15T00:05:29Z","name":"Phishing domain: airdrop-blockstreet.live","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airdrop-blockstreet.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-blockstreet.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-03-15T00:05:29Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-blockstreet.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a88fa97-60bc-5472-ba30-61ecc594d7a4","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-09T12:46:14Z","modified":"2025-09-09T12:46:14Z","name":"Phishing domain: airdrop-blockstreet.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airdrop-blockstreet.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-blockstreet.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-09T12:46:14Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-blockstreet.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf60967b-59a7-5c5f-bc65-0c22161e929a","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-08T14:18:26Z","modified":"2025-09-08T14:18:26Z","name":"Phishing domain: airdrop-blum.live","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Ethereum. Report & evidence: https://phishdestroy.io/domain/airdrop-blum.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-blum.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-08T14:18:26Z","labels":["malicious-activity","phishing","brand:ethereum"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-blum.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ed39831-0e4e-5b9d-980a-650d4d9f56aa","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-03T16:48:47Z","modified":"2025-09-03T16:48:47Z","name":"Phishing domain: airdrop-blum.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating telegram. Report & evidence: https://phishdestroy.io/domain/airdrop-blum.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-blum.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-03T16:48:47Z","labels":["malicious-activity","phishing","brand:telegram"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-blum.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c88b33c-ae4e-560c-b470-ce72fcb88a53","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-28T12:34:58Z","modified":"2025-09-28T12:34:58Z","name":"Phishing domain: airdrop-boost.icu","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airdrop-boost.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-boost.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-28T12:34:58Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-boost.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae8e3b22-621a-572b-9d3e-e6dada5e5706","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:20:02Z","modified":"2026-02-26T23:20:02Z","name":"Phishing domain: airdrop-boredtopia.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airdrop-boredtopia.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-boredtopia.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:20:02Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-boredtopia.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8a2d8ee-c132-5271-82ab-57f4ca2e0fb1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:59Z","modified":"2026-02-26T23:23:59Z","name":"Phishing domain: airdrop-boundless-network.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airdrop-boundless-network.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-boundless-network.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:59Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-boundless-network.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec6e5f7c-5d81-5d71-977c-4009e2c98876","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-28T23:12:19Z","modified":"2025-09-28T23:12:19Z","name":"Phishing domain: airdrop-boundless.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airdrop-boundless.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-boundless.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-28T23:12:19Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-boundless.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f58e2b0-6576-5303-b53b-901dd22133b2","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-17T15:06:39Z","modified":"2025-09-17T15:06:39Z","name":"Phishing domain: airdrop-boundless.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airdrop-boundless.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-boundless.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-17T15:06:39Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-boundless.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a631d8cd-0559-57cb-af5c-1d5f054f4d4d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-17T15:06:52Z","modified":"2025-09-17T15:06:52Z","name":"Phishing domain: airdrop-boundless.digital","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airdrop-boundless.digital","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-boundless.digital']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-17T15:06:52Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-boundless.digital"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f720d52b-381f-53ae-b0bf-a32d054a45ae","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-28T12:34:37Z","modified":"2025-09-28T12:34:37Z","name":"Phishing domain: airdrop-boundless.icu","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airdrop-boundless.icu","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-boundless.icu']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-28T12:34:37Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-boundless.icu"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e30472cd-5868-505d-aeb2-22cac58a1336","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-08T07:44:50Z","modified":"2025-09-08T07:44:50Z","name":"Phishing domain: airdrop-boundless.live","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airdrop-boundless.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-boundless.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-08T07:44:50Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-boundless.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b20f426-660a-583d-8fbf-a6d6b7d52b30","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-10T05:55:26Z","modified":"2025-09-10T05:55:26Z","name":"Phishing domain: airdrop-boundless.network","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airdrop-boundless.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-boundless.network']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-10T05:55:26Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-boundless.network"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--936293d1-8c4b-5fe5-95cf-a9c720d433a7","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-16T17:12:01Z","modified":"2025-09-16T17:12:01Z","name":"Phishing domain: airdrop-boundless.site","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airdrop-boundless.site","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-boundless.site']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-16T17:12:01Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-boundless.site"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d58bc9ec-8aff-5219-8c40-b1cb9f95f60d","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-13T12:01:20Z","modified":"2025-09-13T12:01:20Z","name":"Phishing domain: airdrop-boundless.xyz","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating metamask. Report & evidence: https://phishdestroy.io/domain/airdrop-boundless.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-boundless.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-13T12:01:20Z","labels":["malicious-activity","phishing","brand:metamask"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-boundless.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a74a542-e8bf-5908-ac7b-4d19022b7fde","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-10T21:39:07Z","modified":"2025-10-10T21:39:07Z","name":"Phishing domain: airdrop-boundlles.app","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airdrop-boundlles.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-boundlles.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-10T21:39:07Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-boundlles.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bda79126-cbf5-5a1d-bae1-8dbc8271038e","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-09T07:26:51Z","modified":"2025-10-09T07:26:51Z","name":"Phishing domain: airdrop-boundlles.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airdrop-boundlles.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-boundlles.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-09T07:26:51Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-boundlles.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f540d1f9-8aaa-5725-9c3a-704582da5dcd","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-08-07T15:06:39Z","modified":"2025-08-07T15:06:39Z","name":"Phishing domain: airdrop-box.web.app","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating Dropbox. Report & evidence: https://phishdestroy.io/domain/airdrop-box.web.app","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-box.web.app']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-08-07T15:06:39Z","labels":["malicious-activity","phishing","brand:dropbox"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-box.web.app"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--05e9e5eb-c69b-5f99-b9c2-cd870baf45d1","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-03T19:27:34Z","modified":"2026-02-03T19:27:34Z","name":"Phishing domain: airdrop-brevis.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating genericcrypto. Report & evidence: https://phishdestroy.io/domain/airdrop-brevis.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-brevis.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-03T19:27:34Z","labels":["malicious-activity","phishing","brand:genericcrypto"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-brevis.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b93dfe2-8a89-535e-82f2-959a93a0b813","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:41Z","modified":"2026-02-26T23:23:41Z","name":"Phishing domain: airdrop-brevis.network","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airdrop-brevis.network","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-brevis.network']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:41Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-brevis.network"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d060dea9-5bd5-59d1-994e-d6e23c7e0a8f","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-03T19:28:38Z","modified":"2026-02-03T19:28:38Z","name":"Phishing domain: airdrop-britcardmeme.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating base. Report & evidence: https://phishdestroy.io/domain/airdrop-britcardmeme.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-britcardmeme.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-03T19:28:38Z","labels":["malicious-activity","phishing","brand:base"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-britcardmeme.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fda36056-f8c5-5732-a3fa-b95e039034c3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-08T07:39:36Z","modified":"2025-09-08T07:39:36Z","name":"Phishing domain: airdrop-bsx.live","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating revolut. Report & evidence: https://phishdestroy.io/domain/airdrop-bsx.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-bsx.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-08T07:39:36Z","labels":["malicious-activity","phishing","brand:revolut"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-bsx.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0bdc738-1532-56e5-acb8-efa0360ae9e5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-28T10:34:03Z","modified":"2025-10-28T10:34:03Z","name":"Phishing domain: airdrop-buckybonk.io","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airdrop-buckybonk.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-buckybonk.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-28T10:34:03Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-buckybonk.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac84df95-0dc2-544c-a041-85e11d82afd6","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-21T22:07:42Z","modified":"2025-11-21T22:07:42Z","name":"Phishing domain: airdrop-bullish.xyz","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airdrop-bullish.xyz","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-bullish.xyz']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-21T22:07:42Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-bullish.xyz"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--feaccd67-b3aa-5f8e-9386-3fa4a519eaf5","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-10-26T23:34:26Z","modified":"2025-10-26T23:34:26Z","name":"Phishing domain: airdrop-bullishdegen.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airdrop-bullishdegen.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-bullishdegen.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-10-26T23:34:26Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-bullishdegen.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e884a4f-25c7-5d50-8e20-a23fc1b8b130","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-08T07:43:49Z","modified":"2025-09-08T07:43:49Z","name":"Phishing domain: airdrop-bytenova.live","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airdrop-bytenova.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-bytenova.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-08T07:43:49Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-bytenova.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e44ba846-11c8-5392-81af-11e6fc36d359","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:21:13Z","modified":"2026-02-26T23:21:13Z","name":"Phishing domain: airdrop-c5d.pages.dev","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airdrop-c5d.pages.dev","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-c5d.pages.dev']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:21:13Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-c5d.pages.dev"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0bd46b0-4ead-59b7-9e1c-f35b5c786c75","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-08-07T10:58:38Z","modified":"2026-08-07T10:58:38Z","name":"Phishing domain: airdrop-cate.com","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating across. Report & evidence: https://phishdestroy.io/domain/airdrop-cate.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-cate.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-07T10:58:38Z","labels":["malicious-activity","phishing","brand:across"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-cate.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c5c6335-5c4e-56da-a695-bcede685eec3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-26T23:23:43Z","modified":"2026-02-26T23:23:43Z","name":"Phishing domain: airdrop-centrifuge.live","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airdrop-centrifuge.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-centrifuge.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-26T23:23:43Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-centrifuge.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6886b03a-ac16-54c3-b2a7-9a3b450ed601","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-08T07:43:05Z","modified":"2025-09-08T07:43:05Z","name":"Phishing domain: airdrop-cex.live","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating base. Report & evidence: https://phishdestroy.io/domain/airdrop-cex.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-cex.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-08T07:43:05Z","labels":["malicious-activity","phishing","brand:base"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-cex.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--42d1ac91-6e5c-5050-8a6e-cddd735167cc","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-09T18:41:47Z","modified":"2025-09-09T18:41:47Z","name":"Phishing domain: airdrop-chainbase.com","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airdrop-chainbase.com","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-chainbase.com']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-09T18:41:47Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-chainbase.com"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2739026c-14b7-592b-a2e6-d3cb6ad9648c","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-08T07:44:06Z","modified":"2025-09-08T07:44:06Z","name":"Phishing domain: airdrop-chakra.live","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airdrop-chakra.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-chakra.live']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-09-08T07:44:06Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-chakra.live"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdb2b888-57a4-5b8a-94a3-3e9214851631","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-11-04T10:49:34Z","modified":"2025-11-04T10:49:34Z","name":"Phishing domain: airdrop-checker.io","description":"Phishing / scam domain detected by PhishDestroy \u2014 impersonating 1inch. Report & evidence: https://phishdestroy.io/domain/airdrop-checker.io","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-checker.io']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2025-11-04T10:49:34Z","labels":["malicious-activity","phishing","brand:1inch"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-checker.io"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9fa3b8f-bdd3-529a-a42d-b5ae70067fc3","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2026-02-03T13:57:49Z","modified":"2026-02-03T13:57:49Z","name":"Phishing domain: airdrop-checker.net","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airdrop-checker.net","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-checker.net']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-02-03T13:57:49Z","labels":["malicious-activity","phishing"],"external_references":[{"source_name":"PhishDestroy","url":"https://phishdestroy.io/domain/airdrop-checker.net"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d61f56c8-52c4-55f7-ad0a-6027ed7164fe","created_by_ref":"identity--b6e5f2a0-7c3d-5e41-9a2b-000000000001","created":"2025-09-08T07:44:51Z","modified":"2025-09-08T07:44:51Z","name":"Phishing domain: airdrop-cherry.live","description":"Phishing / scam domain detected by PhishDestroy. Report & evidence: https://phishdestroy.io/domain/airdrop-cherry.live","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'airdrop-cherry.live']","pattern_t