{"type": "bundle", "id": "bundle--2a5fa802-5e51-5540-80b2-51d111904a3a", "objects": [{"type": "identity", "spec_version": "2.1", "id": "identity--86d459cd-3f33-58e4-bfa7-0ba4291d28ec", "created": "2026-01-01T00:00:00.000Z", "modified": "2026-01-01T00:00:00.000Z", "name": "Hong Kong Monetary Authority (香港金融管理局)", "identity_class": "government", "sectors": ["financial-services", "government"], "contact_information": "https://www.hkma.gov.hk"}, {"type": "identity", "spec_version": "2.1", "id": "identity--2568db3a-c6d2-50cc-8e41-914a9115949c", "created": "2026-01-15T00:00:00Z", "modified": "2026-01-15T00:00:00Z", "name": "Hongkong and Shanghai Banking Corporation Limited", "identity_class": "organization", "sectors": ["financial-services"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--790405f0-8d47-5025-837c-f839dba659dd", "created": "2026-01-15T00:00:00Z", "modified": "2026-01-15T00:00:00Z", "pattern_type": "stix", "pattern": "[domain-name:value = 'hsbc-ebanking-fraud-alert.com']", "valid_from": "2026-01-15T00:00:00Z", "confidence": 90}, {"type": "report", "spec_version": "2.1", "id": "report--e61b1810-1ad7-5c8f-a167-672e6ffd702c", "created": "2026-01-15T00:00:00Z", "modified": "2026-01-15T00:00:00Z", "name": "HKMA Fraud Alert: Hongkong and Shanghai Banking Corporation Limited", "published": "2026-01-15T00:00:00Z", "confidence": 90, "x_veritas_license": "Open Government Data License (data.gov.hk)", "object_refs": ["identity--86d459cd-3f33-58e4-bfa7-0ba4291d28ec", "identity--2568db3a-c6d2-50cc-8e41-914a9115949c", "indicator--790405f0-8d47-5025-837c-f839dba659dd"], "external_references": [{"source_name": "HKMA Press Release", "url": "https://www.hkma.gov.hk/eng/news-and-media/press-releases/"}]}, {"type": "identity", "spec_version": "2.1", "id": "identity--78b24d6e-c348-56e3-8318-77b6031e8c5f", "created": "2026-01-01T00:00:00.000Z", "modified": "2026-01-01T00:00:00.000Z", "name": "OpenPhish Threat Intelligence (國際即時防釣魚情報)", "identity_class": "organization", "sectors": ["technology"], "contact_information": "https://openphish.com"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--287a9d02-3003-5b82-97b2-474e796c4c41", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "pattern_type": "stix", "pattern": "[domain-name:value = 'sp14ct-turex-biz-golvin-rastek.pages.dev']", "valid_from": "2026-10-09T05:48:42.954921Z", "confidence": 90}, {"type": "report", "spec_version": "2.1", "id": "report--d6c92784-34f5-5550-a577-efa17f2c6524", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "name": "OpenPhish Alert: sp14ct-turex-biz-golvin-rastek.pages.dev", "description": "Active credential phishing infrastructure targeting global brands: http://sp14ct-turex-biz-golvin-rastek.pages.dev/", "published": "2026-10-09T05:48:42.954921Z", "confidence": 90, "x_veritas_license": "OpenPhish Community Edition Terms", "external_references": [{"source_name": "OpenPhish Feed", "url": "https://openphish.com"}], "object_refs": ["identity--78b24d6e-c348-56e3-8318-77b6031e8c5f", "indicator--287a9d02-3003-5b82-97b2-474e796c4c41"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce85eab7-662c-5f21-9a0a-a3ec92c517c4", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "pattern_type": "stix", "pattern": "[domain-name:value = 's.team-um.com']", "valid_from": "2026-10-09T05:48:42.954921Z", "confidence": 90}, {"type": "report", "spec_version": "2.1", "id": "report--4414eba0-0abf-5728-b6a3-932f030d98ed", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "name": "OpenPhish Alert: s.team-um.com", "description": "Active credential phishing infrastructure targeting global brands: https://s.team-um.com/lp/sst-cgj/ibqkztxe/", "published": "2026-10-09T05:48:42.954921Z", "confidence": 90, "x_veritas_license": "OpenPhish Community Edition Terms", "external_references": [{"source_name": "OpenPhish Feed", "url": "https://openphish.com"}], "object_refs": ["identity--78b24d6e-c348-56e3-8318-77b6031e8c5f", "indicator--ce85eab7-662c-5f21-9a0a-a3ec92c517c4"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a1524a0-87f9-515b-a6de-9b23c3e5dee9", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "pattern_type": "stix", "pattern": "[domain-name:value = 'westbrookapartments.s3.us-east-2.amazonaws.com']", "valid_from": "2026-10-09T05:48:42.954921Z", "confidence": 90}, {"type": "report", "spec_version": "2.1", "id": "report--37219d8d-e3b8-50d6-a1ce-748b7ffd67e9", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "name": "OpenPhish Alert: westbrookapartments.s3.us-east-2.amazonaws.com", "description": "Active credential phishing infrastructure targeting global brands: https://westbrookapartments.s3.us-east-2.amazonaws.com/manag", "published": "2026-10-09T05:48:42.954921Z", "confidence": 90, "x_veritas_license": "OpenPhish Community Edition Terms", "external_references": [{"source_name": "OpenPhish Feed", "url": "https://openphish.com"}], "object_refs": ["identity--78b24d6e-c348-56e3-8318-77b6031e8c5f", "indicator--8a1524a0-87f9-515b-a6de-9b23c3e5dee9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f502d44-3a82-545a-971a-fc37ac082ccb", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "pattern_type": "stix", "pattern": "[domain-name:value = 'vineeey.github.io']", "valid_from": "2026-10-09T05:48:42.954921Z", "confidence": 90}, {"type": "report", "spec_version": "2.1", "id": "report--e439e380-ac1f-5f96-96fa-2d1f1530c886", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "name": "OpenPhish Alert: vineeey.github.io", "description": "Active credential phishing infrastructure targeting global brands: https://vineeey.github.io/Netflix-Clone/browse/", "published": "2026-10-09T05:48:42.954921Z", "confidence": 90, "x_veritas_license": "OpenPhish Community Edition Terms", "external_references": [{"source_name": "OpenPhish Feed", "url": "https://openphish.com"}], "object_refs": ["identity--78b24d6e-c348-56e3-8318-77b6031e8c5f", "indicator--1f502d44-3a82-545a-971a-fc37ac082ccb"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae109104-a360-5af6-96ea-f992f0ecfebf", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "pattern_type": "stix", "pattern": "[domain-name:value = 'teams-online.com']", "valid_from": "2026-10-09T05:48:42.954921Z", "confidence": 90}, {"type": "report", "spec_version": "2.1", "id": "report--32770010-ed5d-5b2f-94b6-9c698ce93a69", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "name": "OpenPhish Alert: teams-online.com", "description": "Active credential phishing infrastructure targeting global brands: https://teams-online.com/l/meetup-join/19:meeting_MDRhOTg4ZT", "published": "2026-10-09T05:48:42.954921Z", "confidence": 90, "x_veritas_license": "OpenPhish Community Edition Terms", "external_references": [{"source_name": "OpenPhish Feed", "url": "https://openphish.com"}], "object_refs": ["identity--78b24d6e-c348-56e3-8318-77b6031e8c5f", "indicator--ae109104-a360-5af6-96ea-f992f0ecfebf"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05f182a0-b531-5483-9315-22aa68c864e0", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "pattern_type": "stix", "pattern": "[domain-name:value = 'torpedototo1.store']", "valid_from": "2026-10-09T05:48:42.954921Z", "confidence": 90}, {"type": "report", "spec_version": "2.1", "id": "report--9d1e8448-4fbf-576c-b828-38d9d9a0fd49", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "name": "OpenPhish Alert: torpedototo1.store", "description": "Active credential phishing infrastructure targeting global brands: http://torpedototo1.store/", "published": "2026-10-09T05:48:42.954921Z", "confidence": 90, "x_veritas_license": "OpenPhish Community Edition Terms", "external_references": [{"source_name": "OpenPhish Feed", "url": "https://openphish.com"}], "object_refs": ["identity--78b24d6e-c348-56e3-8318-77b6031e8c5f", "indicator--05f182a0-b531-5483-9315-22aa68c864e0"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f08dd47-4778-5169-8d90-0256ea6f2f4d", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "pattern_type": "stix", "pattern": "[domain-name:value = 'www.masterchefnotes.com']", "valid_from": "2026-10-09T05:48:42.954921Z", "confidence": 90}, {"type": "report", "spec_version": "2.1", "id": "report--c88c4f9d-4f35-5a24-a6f5-d7e3375949b3", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "name": "OpenPhish Alert: www.masterchefnotes.com", "description": "Active credential phishing infrastructure targeting global brands: http://www.masterchefnotes.com/", "published": "2026-10-09T05:48:42.954921Z", "confidence": 90, "x_veritas_license": "OpenPhish Community Edition Terms", "external_references": [{"source_name": "OpenPhish Feed", "url": "https://openphish.com"}], "object_refs": ["identity--78b24d6e-c348-56e3-8318-77b6031e8c5f", "indicator--7f08dd47-4778-5169-8d90-0256ea6f2f4d"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aa9defe-e74c-59fe-8143-09193e6db854", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "pattern_type": "stix", "pattern": "[domain-name:value = 'www.perfectpitmaster.com']", "valid_from": "2026-10-09T05:48:42.954921Z", "confidence": 90}, {"type": "report", "spec_version": "2.1", "id": "report--262b23ad-2f5f-5748-a8be-3410cf0d7d45", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "name": "OpenPhish Alert: www.perfectpitmaster.com", "description": "Active credential phishing infrastructure targeting global brands: http://www.perfectpitmaster.com/", "published": "2026-10-09T05:48:42.954921Z", "confidence": 90, "x_veritas_license": "OpenPhish Community Edition Terms", "external_references": [{"source_name": "OpenPhish Feed", "url": "https://openphish.com"}], "object_refs": ["identity--78b24d6e-c348-56e3-8318-77b6031e8c5f", "indicator--9aa9defe-e74c-59fe-8143-09193e6db854"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf71dc6f-ac0d-53c3-a5e7-9a53709af019", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "pattern_type": "stix", "pattern": "[domain-name:value = 'www.grillrecipepros.com']", "valid_from": "2026-10-09T05:48:42.954921Z", "confidence": 90}, {"type": "report", "spec_version": "2.1", "id": "report--37c66a0a-77c4-5977-a81a-637f2631019d", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "name": "OpenPhish Alert: www.grillrecipepros.com", "description": "Active credential phishing infrastructure targeting global brands: https://www.grillrecipepros.com/", "published": "2026-10-09T05:48:42.954921Z", "confidence": 90, "x_veritas_license": "OpenPhish Community Edition Terms", "external_references": [{"source_name": "OpenPhish Feed", "url": "https://openphish.com"}], "object_refs": ["identity--78b24d6e-c348-56e3-8318-77b6031e8c5f", "indicator--cf71dc6f-ac0d-53c3-a5e7-9a53709af019"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24c6d0e1-346e-5f86-be4f-2a62055c53d7", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "pattern_type": "stix", "pattern": "[domain-name:value = 'www.thegrillinglab.com']", "valid_from": "2026-10-09T05:48:42.954921Z", "confidence": 90}, {"type": "report", "spec_version": "2.1", "id": "report--007282be-ca51-5b6a-bd57-e3b28cc55f88", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "name": "OpenPhish Alert: www.thegrillinglab.com", "description": "Active credential phishing infrastructure targeting global brands: http://www.thegrillinglab.com/", "published": "2026-10-09T05:48:42.954921Z", "confidence": 90, "x_veritas_license": "OpenPhish Community Edition Terms", "external_references": [{"source_name": "OpenPhish Feed", "url": "https://openphish.com"}], "object_refs": ["identity--78b24d6e-c348-56e3-8318-77b6031e8c5f", "indicator--24c6d0e1-346e-5f86-be4f-2a62055c53d7"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5305733-426a-57f3-a23f-36215653bb0c", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "pattern_type": "stix", "pattern": "[domain-name:value = 'www.perfectgrillsecrets.com']", "valid_from": "2026-10-09T05:48:42.954921Z", "confidence": 90}, {"type": "report", "spec_version": "2.1", "id": "report--501bf3f7-e1ea-5d14-b2d5-e4e63117e991", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "name": "OpenPhish Alert: www.perfectgrillsecrets.com", "description": "Active credential phishing infrastructure targeting global brands: http://www.perfectgrillsecrets.com/", "published": "2026-10-09T05:48:42.954921Z", "confidence": 90, "x_veritas_license": "OpenPhish Community Edition Terms", "external_references": [{"source_name": "OpenPhish Feed", "url": "https://openphish.com"}], "object_refs": ["identity--78b24d6e-c348-56e3-8318-77b6031e8c5f", "indicator--e5305733-426a-57f3-a23f-36215653bb0c"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f233ebca-3f5d-56b7-a8aa-7cc416401e52", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "pattern_type": "stix", "pattern": "[domain-name:value = 'www.primegrillmaster.com']", "valid_from": "2026-10-09T05:48:42.954921Z", "confidence": 90}, {"type": "report", "spec_version": "2.1", "id": "report--bca14164-a0d1-5b1f-919c-da48fae812c5", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "name": "OpenPhish Alert: www.primegrillmaster.com", "description": "Active credential phishing infrastructure targeting global brands: http://www.primegrillmaster.com/", "published": "2026-10-09T05:48:42.954921Z", "confidence": 90, "x_veritas_license": "OpenPhish Community Edition Terms", "external_references": [{"source_name": "OpenPhish Feed", "url": "https://openphish.com"}], "object_refs": ["identity--78b24d6e-c348-56e3-8318-77b6031e8c5f", "indicator--f233ebca-3f5d-56b7-a8aa-7cc416401e52"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26483a99-6d30-5e55-8444-2c425d66059f", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "pattern_type": "stix", "pattern": "[domain-name:value = 'ultimategrillhub.com']", "valid_from": "2026-10-09T05:48:42.954921Z", "confidence": 90}, {"type": "report", "spec_version": "2.1", "id": "report--3e9969bd-d37b-542f-9b25-f456caef2053", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "name": "OpenPhish Alert: ultimategrillhub.com", "description": "Active credential phishing infrastructure targeting global brands: http://ultimategrillhub.com/", "published": "2026-10-09T05:48:42.954921Z", "confidence": 90, "x_veritas_license": "OpenPhish Community Edition Terms", "external_references": [{"source_name": "OpenPhish Feed", "url": "https://openphish.com"}], "object_refs": ["identity--78b24d6e-c348-56e3-8318-77b6031e8c5f", "indicator--26483a99-6d30-5e55-8444-2c425d66059f"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7e43649-4692-5d02-835d-373ec3f1bda2", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "pattern_type": "stix", "pattern": "[domain-name:value = 'www.chefskitchenbox.com']", "valid_from": "2026-10-09T05:48:42.954921Z", "confidence": 90}, {"type": "report", "spec_version": "2.1", "id": "report--4d2676c5-3919-5013-bdb1-2a4cc67986b7", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "name": "OpenPhish Alert: www.chefskitchenbox.com", "description": "Active credential phishing infrastructure targeting global brands: http://www.chefskitchenbox.com/", "published": "2026-10-09T05:48:42.954921Z", "confidence": 90, "x_veritas_license": "OpenPhish Community Edition Terms", "external_references": [{"source_name": "OpenPhish Feed", "url": "https://openphish.com"}], "object_refs": ["identity--78b24d6e-c348-56e3-8318-77b6031e8c5f", "indicator--f7e43649-4692-5d02-835d-373ec3f1bda2"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ec739b8-f70c-5559-966d-150006c585cc", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "pattern_type": "stix", "pattern": "[domain-name:value = 'thegrillbible.com']", "valid_from": "2026-10-09T05:48:42.954921Z", "confidence": 90}, {"type": "report", "spec_version": "2.1", "id": "report--012d4940-ac36-566c-9939-b9705da0284f", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "name": "OpenPhish Alert: thegrillbible.com", "description": "Active credential phishing infrastructure targeting global brands: http://thegrillbible.com/", "published": "2026-10-09T05:48:42.954921Z", "confidence": 90, "x_veritas_license": "OpenPhish Community Edition Terms", "external_references": [{"source_name": "OpenPhish Feed", "url": "https://openphish.com"}], "object_refs": ["identity--78b24d6e-c348-56e3-8318-77b6031e8c5f", "indicator--2ec739b8-f70c-5559-966d-150006c585cc"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25530221-c27a-51b0-8c10-471e06bc258c", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "pattern_type": "stix", "pattern": "[domain-name:value = 'simplegastronomy.com']", "valid_from": "2026-10-09T05:48:42.954921Z", "confidence": 90}, {"type": "report", "spec_version": "2.1", "id": "report--8c8ab19b-03fe-5dfb-a1cb-826688fe563b", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "name": "OpenPhish Alert: simplegastronomy.com", "description": "Active credential phishing infrastructure targeting global brands: http://simplegastronomy.com/", "published": "2026-10-09T05:48:42.954921Z", "confidence": 90, "x_veritas_license": "OpenPhish Community Edition Terms", "external_references": [{"source_name": "OpenPhish Feed", "url": "https://openphish.com"}], "object_refs": ["identity--78b24d6e-c348-56e3-8318-77b6031e8c5f", "indicator--25530221-c27a-51b0-8c10-471e06bc258c"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32c16ec7-b548-5e79-9a9f-0b7040d05097", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "pattern_type": "stix", "pattern": "[domain-name:value = 'searedrecipes.com']", "valid_from": "2026-10-09T05:48:42.954921Z", "confidence": 90}, {"type": "report", "spec_version": "2.1", "id": "report--8be130cc-ec70-5f6c-98a6-5e4256b382e0", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "name": "OpenPhish Alert: searedrecipes.com", "description": "Active credential phishing infrastructure targeting global brands: http://searedrecipes.com/", "published": "2026-10-09T05:48:42.954921Z", "confidence": 90, "x_veritas_license": "OpenPhish Community Edition Terms", "external_references": [{"source_name": "OpenPhish Feed", "url": "https://openphish.com"}], "object_refs": ["identity--78b24d6e-c348-56e3-8318-77b6031e8c5f", "indicator--32c16ec7-b548-5e79-9a9f-0b7040d05097"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e94b036a-2e23-59e4-867d-397de23814b5", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "pattern_type": "stix", "pattern": "[domain-name:value = 'simplyrecipehub.com']", "valid_from": "2026-10-09T05:48:42.954921Z", "confidence": 90}, {"type": "report", "spec_version": "2.1", "id": "report--b7b14376-cbe3-5f3c-bb13-aacbbc8e0774", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "name": "OpenPhish Alert: simplyrecipehub.com", "description": "Active credential phishing infrastructure targeting global brands: http://simplyrecipehub.com/", "published": "2026-10-09T05:48:42.954921Z", "confidence": 90, "x_veritas_license": "OpenPhish Community Edition Terms", "external_references": [{"source_name": "OpenPhish Feed", "url": "https://openphish.com"}], "object_refs": ["identity--78b24d6e-c348-56e3-8318-77b6031e8c5f", "indicator--e94b036a-2e23-59e4-867d-397de23814b5"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4d1b9ea-1838-5e90-9b13-973e5142fd9c", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "pattern_type": "stix", "pattern": "[domain-name:value = 'progrillguide.com']", "valid_from": "2026-10-09T05:48:42.954921Z", "confidence": 90}, {"type": "report", "spec_version": "2.1", "id": "report--d7658657-ba8c-57cf-a022-6159f9cb17a4", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "name": "OpenPhish Alert: progrillguide.com", "description": "Active credential phishing infrastructure targeting global brands: http://progrillguide.com/", "published": "2026-10-09T05:48:42.954921Z", "confidence": 90, "x_veritas_license": "OpenPhish Community Edition Terms", "external_references": [{"source_name": "OpenPhish Feed", "url": "https://openphish.com"}], "object_refs": ["identity--78b24d6e-c348-56e3-8318-77b6031e8c5f", "indicator--c4d1b9ea-1838-5e90-9b13-973e5142fd9c"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25d1f675-037f-55e1-87e6-c3a04600544e", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "pattern_type": "stix", "pattern": "[domain-name:value = 'grillchefsecrets.com']", "valid_from": "2026-10-09T05:48:42.954921Z", "confidence": 90}, {"type": "report", "spec_version": "2.1", "id": "report--bee43b89-a5d2-5094-ac56-c52edfd63a9f", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "name": "OpenPhish Alert: grillchefsecrets.com", "description": "Active credential phishing infrastructure targeting global brands: http://grillchefsecrets.com/", "published": "2026-10-09T05:48:42.954921Z", "confidence": 90, "x_veritas_license": "OpenPhish Community Edition Terms", "external_references": [{"source_name": "OpenPhish Feed", "url": "https://openphish.com"}], "object_refs": ["identity--78b24d6e-c348-56e3-8318-77b6031e8c5f", "indicator--25d1f675-037f-55e1-87e6-c3a04600544e"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--884c05e4-dd2a-55a9-8f03-97cc455ab787", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "pattern_type": "stix", "pattern": "[domain-name:value = 'recipebistro.com']", "valid_from": "2026-10-09T05:48:42.954921Z", "confidence": 90}, {"type": "report", "spec_version": "2.1", "id": "report--c42d1a6c-b382-563e-a52e-1d9f1b5fecae", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "name": "OpenPhish Alert: recipebistro.com", "description": "Active credential phishing infrastructure targeting global brands: http://recipebistro.com/", "published": "2026-10-09T05:48:42.954921Z", "confidence": 90, "x_veritas_license": "OpenPhish Community Edition Terms", "external_references": [{"source_name": "OpenPhish Feed", "url": "https://openphish.com"}], "object_refs": ["identity--78b24d6e-c348-56e3-8318-77b6031e8c5f", "indicator--884c05e4-dd2a-55a9-8f03-97cc455ab787"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9507c04f-30dd-5cfc-8673-1080adfc3f76", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "pattern_type": "stix", "pattern": "[domain-name:value = 'grillmastersvault.com']", "valid_from": "2026-10-09T05:48:42.954921Z", "confidence": 90}, {"type": "report", "spec_version": "2.1", "id": "report--125920c5-22a8-53b5-81e6-77f117cbe3e6", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "name": "OpenPhish Alert: grillmastersvault.com", "description": "Active credential phishing infrastructure targeting global brands: http://grillmastersvault.com/", "published": "2026-10-09T05:48:42.954921Z", "confidence": 90, "x_veritas_license": "OpenPhish Community Edition Terms", "external_references": [{"source_name": "OpenPhish Feed", "url": "https://openphish.com"}], "object_refs": ["identity--78b24d6e-c348-56e3-8318-77b6031e8c5f", "indicator--9507c04f-30dd-5cfc-8673-1080adfc3f76"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac459b60-c91f-5c33-b67d-53a75f926cd3", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "pattern_type": "stix", "pattern": "[domain-name:value = 'mastergrillhub.com']", "valid_from": "2026-10-09T05:48:42.954921Z", "confidence": 90}, {"type": "report", "spec_version": "2.1", "id": "report--e7efe732-9abb-5107-879d-236b98dc8d44", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "name": "OpenPhish Alert: mastergrillhub.com", "description": "Active credential phishing infrastructure targeting global brands: http://mastergrillhub.com/", "published": "2026-10-09T05:48:42.954921Z", "confidence": 90, "x_veritas_license": "OpenPhish Community Edition Terms", "external_references": [{"source_name": "OpenPhish Feed", "url": "https://openphish.com"}], "object_refs": ["identity--78b24d6e-c348-56e3-8318-77b6031e8c5f", "indicator--ac459b60-c91f-5c33-b67d-53a75f926cd3"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f1a2b4a-7415-57e1-8865-7f36ddf9b2c7", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "pattern_type": "stix", "pattern": "[domain-name:value = 'dailygrillrecipes.com']", "valid_from": "2026-10-09T05:48:42.954921Z", "confidence": 90}, {"type": "report", "spec_version": "2.1", "id": "report--e2c1f6f7-6be3-576a-a203-f6b7a6c4c663", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "name": "OpenPhish Alert: dailygrillrecipes.com", "description": "Active credential phishing infrastructure targeting global brands: http://dailygrillrecipes.com/", "published": "2026-10-09T05:48:42.954921Z", "confidence": 90, "x_veritas_license": "OpenPhish Community Edition Terms", "external_references": [{"source_name": "OpenPhish Feed", "url": "https://openphish.com"}], "object_refs": ["identity--78b24d6e-c348-56e3-8318-77b6031e8c5f", "indicator--8f1a2b4a-7415-57e1-8865-7f36ddf9b2c7"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b6c4d72-f6fc-5d32-9447-64c8bad66e60", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "pattern_type": "stix", "pattern": "[domain-name:value = 'kitchensecretbook.com']", "valid_from": "2026-10-09T05:48:42.954921Z", "confidence": 90}, {"type": "report", "spec_version": "2.1", "id": "report--be1707c2-82b0-5033-888b-92a6e18ae8b2", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "name": "OpenPhish Alert: kitchensecretbook.com", "description": "Active credential phishing infrastructure targeting global brands: http://kitchensecretbook.com/", "published": "2026-10-09T05:48:42.954921Z", "confidence": 90, "x_veritas_license": "OpenPhish Community Edition Terms", "external_references": [{"source_name": "OpenPhish Feed", "url": "https://openphish.com"}], "object_refs": ["identity--78b24d6e-c348-56e3-8318-77b6031e8c5f", "indicator--1b6c4d72-f6fc-5d32-9447-64c8bad66e60"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71874e2a-8591-590f-a220-5d4220b17a20", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "pattern_type": "stix", "pattern": "[domain-name:value = 'grillcraftrecipes.com']", "valid_from": "2026-10-09T05:48:42.954921Z", "confidence": 90}, {"type": "report", "spec_version": "2.1", "id": "report--3a354f2a-020b-5f4e-9c6f-3829863f97d9", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "name": "OpenPhish Alert: grillcraftrecipes.com", "description": "Active credential phishing infrastructure targeting global brands: http://grillcraftrecipes.com/", "published": "2026-10-09T05:48:42.954921Z", "confidence": 90, "x_veritas_license": "OpenPhish Community Edition Terms", "external_references": [{"source_name": "OpenPhish Feed", "url": "https://openphish.com"}], "object_refs": ["identity--78b24d6e-c348-56e3-8318-77b6031e8c5f", "indicator--71874e2a-8591-590f-a220-5d4220b17a20"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6e9da4a-3099-5c8b-a1aa-76f36c44ad59", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "pattern_type": "stix", "pattern": "[domain-name:value = 'chefstablehub.com']", "valid_from": "2026-10-09T05:48:42.954921Z", "confidence": 90}, {"type": "report", "spec_version": "2.1", "id": "report--7c62b2a1-32a0-5f2c-af5a-63dc28b11e21", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "name": "OpenPhish Alert: chefstablehub.com", "description": "Active credential phishing infrastructure targeting global brands: http://chefstablehub.com/", "published": "2026-10-09T05:48:42.954921Z", "confidence": 90, "x_veritas_license": "OpenPhish Community Edition Terms", "external_references": [{"source_name": "OpenPhish Feed", "url": "https://openphish.com"}], "object_refs": ["identity--78b24d6e-c348-56e3-8318-77b6031e8c5f", "indicator--e6e9da4a-3099-5c8b-a1aa-76f36c44ad59"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f60436fe-ac3a-5496-a5e5-4635797ceb3b", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "pattern_type": "stix", "pattern": "[domain-name:value = 'grillmastersrecipes.com']", "valid_from": "2026-10-09T05:48:42.954921Z", "confidence": 90}, {"type": "report", "spec_version": "2.1", "id": "report--7016eb0c-4db6-50ee-93e3-d649e6fe3e68", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "name": "OpenPhish Alert: grillmastersrecipes.com", "description": "Active credential phishing infrastructure targeting global brands: http://grillmastersrecipes.com/", "published": "2026-10-09T05:48:42.954921Z", "confidence": 90, "x_veritas_license": "OpenPhish Community Edition Terms", "external_references": [{"source_name": "OpenPhish Feed", "url": "https://openphish.com"}], "object_refs": ["identity--78b24d6e-c348-56e3-8318-77b6031e8c5f", "indicator--f60436fe-ac3a-5496-a5e5-4635797ceb3b"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--446c48c5-510d-560c-a407-6d3ee19bf56b", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "pattern_type": "stix", "pattern": "[domain-name:value = 'amazon922.netlify.app']", "valid_from": "2026-10-09T05:48:42.954921Z", "confidence": 90}, {"type": "report", "spec_version": "2.1", "id": "report--59971378-2f6e-515b-8ab1-faf03d58470f", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "name": "OpenPhish Alert: amazon922.netlify.app", "description": "Active credential phishing infrastructure targeting global brands: https://amazon922.netlify.app/", "published": "2026-10-09T05:48:42.954921Z", "confidence": 90, "x_veritas_license": "OpenPhish Community Edition Terms", "external_references": [{"source_name": "OpenPhish Feed", "url": "https://openphish.com"}], "object_refs": ["identity--78b24d6e-c348-56e3-8318-77b6031e8c5f", "indicator--446c48c5-510d-560c-a407-6d3ee19bf56b"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35a8d717-3431-51f2-95f1-c963d072e9c5", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "pattern_type": "stix", "pattern": "[domain-name:value = 'www.olhodesogra.com.br']", "valid_from": "2026-10-09T05:48:42.954921Z", "confidence": 90}, {"type": "report", "spec_version": "2.1", "id": "report--2641d3f9-e1b8-51f4-819b-d62dc26f5cb9", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "name": "OpenPhish Alert: www.olhodesogra.com.br", "description": "Active credential phishing infrastructure targeting global brands: http://www.olhodesogra.com.br/highlight-inc/highlight-inc.ht", "published": "2026-10-09T05:48:42.954921Z", "confidence": 90, "x_veritas_license": "OpenPhish Community Edition Terms", "external_references": [{"source_name": "OpenPhish Feed", "url": "https://openphish.com"}], "object_refs": ["identity--78b24d6e-c348-56e3-8318-77b6031e8c5f", "indicator--35a8d717-3431-51f2-95f1-c963d072e9c5"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66ce9245-101a-57f0-83a5-27eb48629069", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "pattern_type": "stix", "pattern": "[domain-name:value = 'www.careritacenters.com']", "valid_from": "2026-10-09T05:48:42.954921Z", "confidence": 90}, {"type": "report", "spec_version": "2.1", "id": "report--5cd6732d-a259-5868-a99e-6f14caae0371", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "name": "OpenPhish Alert: www.careritacenters.com", "description": "Active credential phishing infrastructure targeting global brands: http://www.careritacenters.com/online-newdocumentn8739793874", "published": "2026-10-09T05:48:42.954921Z", "confidence": 90, "x_veritas_license": "OpenPhish Community Edition Terms", "external_references": [{"source_name": "OpenPhish Feed", "url": "https://openphish.com"}], "object_refs": ["identity--78b24d6e-c348-56e3-8318-77b6031e8c5f", "indicator--66ce9245-101a-57f0-83a5-27eb48629069"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f09ecce-cab5-5fab-8077-7c0ed2d11a22", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "pattern_type": "stix", "pattern": "[domain-name:value = 'store.communityappaward.shop']", "valid_from": "2026-10-09T05:48:42.954921Z", "confidence": 90}, {"type": "report", "spec_version": "2.1", "id": "report--15fc52c4-6e43-5683-9ba5-068761f4257b", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "name": "OpenPhish Alert: store.communityappaward.shop", "description": "Active credential phishing infrastructure targeting global brands: http://store.communityappaward.shop/workshop/Brassbound-Fury", "published": "2026-10-09T05:48:42.954921Z", "confidence": 90, "x_veritas_license": "OpenPhish Community Edition Terms", "external_references": [{"source_name": "OpenPhish Feed", "url": "https://openphish.com"}], "object_refs": ["identity--78b24d6e-c348-56e3-8318-77b6031e8c5f", "indicator--5f09ecce-cab5-5fab-8077-7c0ed2d11a22"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df771697-53f1-5fb3-8329-adfb9c22b120", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "pattern_type": "stix", "pattern": "[domain-name:value = '9rnax.tenant-bio90427981.com']", "valid_from": "2026-10-09T05:48:42.954921Z", "confidence": 90}, {"type": "report", "spec_version": "2.1", "id": "report--4e84a51d-fa3e-582f-a09f-885c6eaedd1b", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "name": "OpenPhish Alert: 9rnax.tenant-bio90427981.com", "description": "Active credential phishing infrastructure targeting global brands: http://9rnax.tenant-bio90427981.com/", "published": "2026-10-09T05:48:42.954921Z", "confidence": 90, "x_veritas_license": "OpenPhish Community Edition Terms", "external_references": [{"source_name": "OpenPhish Feed", "url": "https://openphish.com"}], "object_refs": ["identity--78b24d6e-c348-56e3-8318-77b6031e8c5f", "indicator--df771697-53f1-5fb3-8329-adfb9c22b120"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2733920c-e506-5d18-afc8-d1e94fed4784", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "pattern_type": "stix", "pattern": "[domain-name:value = 'verify-networksolutions.info']", "valid_from": "2026-10-09T05:48:42.954921Z", "confidence": 90}, {"type": "report", "spec_version": "2.1", "id": "report--e2962ac8-a40d-5bca-9f0a-9eaa204e8c8c", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "name": "OpenPhish Alert: verify-networksolutions.info", "description": "Active credential phishing infrastructure targeting global brands: https://verify-networksolutions.info/appsuite/", "published": "2026-10-09T05:48:42.954921Z", "confidence": 90, "x_veritas_license": "OpenPhish Community Edition Terms", "external_references": [{"source_name": "OpenPhish Feed", "url": "https://openphish.com"}], "object_refs": ["identity--78b24d6e-c348-56e3-8318-77b6031e8c5f", "indicator--2733920c-e506-5d18-afc8-d1e94fed4784"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db98d203-5bfe-52ed-9f0a-278bc3de3701", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "pattern_type": "stix", "pattern": "[domain-name:value = 'azogue.org']", "valid_from": "2026-10-09T05:48:42.954921Z", "confidence": 90}, {"type": "report", "spec_version": "2.1", "id": "report--9176090e-a9bb-5494-a0c2-38f47d460d5b", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "name": "OpenPhish Alert: azogue.org", "description": "Active credential phishing infrastructure targeting global brands: http://azogue.org/index1.html", "published": "2026-10-09T05:48:42.954921Z", "confidence": 90, "x_veritas_license": "OpenPhish Community Edition Terms", "external_references": [{"source_name": "OpenPhish Feed", "url": "https://openphish.com"}], "object_refs": ["identity--78b24d6e-c348-56e3-8318-77b6031e8c5f", "indicator--db98d203-5bfe-52ed-9f0a-278bc3de3701"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88550db9-5bc8-5701-b5df-23380abefad5", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "pattern_type": "stix", "pattern": "[domain-name:value = 'www.roblox.com.mu']", "valid_from": "2026-10-09T05:48:42.954921Z", "confidence": 90}, {"type": "report", "spec_version": "2.1", "id": "report--1a05f75f-3b1b-5152-a1c6-6e9c252aa4b2", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "name": "OpenPhish Alert: www.roblox.com.mu", "description": "Active credential phishing infrastructure targeting global brands: https://www.roblox.com.mu/users/6960432138/profile", "published": "2026-10-09T05:48:42.954921Z", "confidence": 90, "x_veritas_license": "OpenPhish Community Edition Terms", "external_references": [{"source_name": "OpenPhish Feed", "url": "https://openphish.com"}], "object_refs": ["identity--78b24d6e-c348-56e3-8318-77b6031e8c5f", "indicator--88550db9-5bc8-5701-b5df-23380abefad5"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9071c7b9-4af2-5169-95b0-049f411694d9", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "pattern_type": "stix", "pattern": "[domain-name:value = 'mfopasdm.pages.dev']", "valid_from": "2026-10-09T05:48:42.954921Z", "confidence": 90}, {"type": "report", "spec_version": "2.1", "id": "report--bce581f2-3798-5c68-8d37-0e99b193a36c", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "name": "OpenPhish Alert: mfopasdm.pages.dev", "description": "Active credential phishing infrastructure targeting global brands: https://mfopasdm.pages.dev/HydroJug-Traveler-Resistant-Tumbl", "published": "2026-10-09T05:48:42.954921Z", "confidence": 90, "x_veritas_license": "OpenPhish Community Edition Terms", "external_references": [{"source_name": "OpenPhish Feed", "url": "https://openphish.com"}], "object_refs": ["identity--78b24d6e-c348-56e3-8318-77b6031e8c5f", "indicator--9071c7b9-4af2-5169-95b0-049f411694d9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8ac3f50-4a65-5883-ae2a-6bd1be88f831", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "pattern_type": "stix", "pattern": "[domain-name:value = 'www.documee.vercel.app']", "valid_from": "2026-10-09T05:48:42.954921Z", "confidence": 90}, {"type": "report", "spec_version": "2.1", "id": "report--749956cc-290d-5cb6-b13b-076e11133065", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "name": "OpenPhish Alert: www.documee.vercel.app", "description": "Active credential phishing infrastructure targeting global brands: https://www.documee.vercel.app/", "published": "2026-10-09T05:48:42.954921Z", "confidence": 90, "x_veritas_license": "OpenPhish Community Edition Terms", "external_references": [{"source_name": "OpenPhish Feed", "url": "https://openphish.com"}], "object_refs": ["identity--78b24d6e-c348-56e3-8318-77b6031e8c5f", "indicator--f8ac3f50-4a65-5883-ae2a-6bd1be88f831"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e895a13-b007-5874-a1a9-8d702334d18b", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "pattern_type": "stix", "pattern": "[domain-name:value = 'c1s.c2d.mytemp.website']", "valid_from": "2026-10-09T05:48:42.954921Z", "confidence": 90}, {"type": "report", "spec_version": "2.1", "id": "report--f26c078b-3409-5e96-8fa7-9175912750c0", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "name": "OpenPhish Alert: c1s.c2d.mytemp.website", "description": "Active credential phishing infrastructure targeting global brands: https://c1s.c2d.mytemp.website/dev/index.php", "published": "2026-10-09T05:48:42.954921Z", "confidence": 90, "x_veritas_license": "OpenPhish Community Edition Terms", "external_references": [{"source_name": "OpenPhish Feed", "url": "https://openphish.com"}], "object_refs": ["identity--78b24d6e-c348-56e3-8318-77b6031e8c5f", "indicator--0e895a13-b007-5874-a1a9-8d702334d18b"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a65b2a5-2923-58bc-8074-39911fa50eb3", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "pattern_type": "stix", "pattern": "[domain-name:value = 'fbadsmenager.com']", "valid_from": "2026-10-09T05:48:42.954921Z", "confidence": 90}, {"type": "report", "spec_version": "2.1", "id": "report--3fa3262d-1ad4-5aa2-b3e9-8faf10995426", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "name": "OpenPhish Alert: fbadsmenager.com", "description": "Active credential phishing infrastructure targeting global brands: https://fbadsmenager.com/", "published": "2026-10-09T05:48:42.954921Z", "confidence": 90, "x_veritas_license": "OpenPhish Community Edition Terms", "external_references": [{"source_name": "OpenPhish Feed", "url": "https://openphish.com"}], "object_refs": ["identity--78b24d6e-c348-56e3-8318-77b6031e8c5f", "indicator--2a65b2a5-2923-58bc-8074-39911fa50eb3"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6509507d-f163-532a-afef-0d315e881ebd", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "pattern_type": "stix", "pattern": "[domain-name:value = 'soares16nascimento17-star.github.io']", "valid_from": "2026-10-09T05:48:42.954921Z", "confidence": 90}, {"type": "report", "spec_version": "2.1", "id": "report--22da59d7-c51c-5db3-8b0a-688bc1b9de40", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "name": "OpenPhish Alert: soares16nascimento17-star.github.io", "description": "Active credential phishing infrastructure targeting global brands: https://soares16nascimento17-star.github.io/Nubank/", "published": "2026-10-09T05:48:42.954921Z", "confidence": 90, "x_veritas_license": "OpenPhish Community Edition Terms", "external_references": [{"source_name": "OpenPhish Feed", "url": "https://openphish.com"}], "object_refs": ["identity--78b24d6e-c348-56e3-8318-77b6031e8c5f", "indicator--6509507d-f163-532a-afef-0d315e881ebd"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aea2b5f-da60-55e4-8436-9d01f0722b9a", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "pattern_type": "stix", "pattern": "[domain-name:value = 'www.bio.now']", "valid_from": "2026-10-09T05:48:42.954921Z", "confidence": 90}, {"type": "report", "spec_version": "2.1", "id": "report--c78afcca-1540-5c8e-bd79-d1e12af5bf95", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "name": "OpenPhish Alert: www.bio.now", "description": "Active credential phishing infrastructure targeting global brands: http://www.bio.now/robuxy/", "published": "2026-10-09T05:48:42.954921Z", "confidence": 90, "x_veritas_license": "OpenPhish Community Edition Terms", "external_references": [{"source_name": "OpenPhish Feed", "url": "https://openphish.com"}], "object_refs": ["identity--78b24d6e-c348-56e3-8318-77b6031e8c5f", "indicator--5aea2b5f-da60-55e4-8436-9d01f0722b9a"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4acb6ad7-9df2-52d4-aa4e-a228dc514b41", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "pattern_type": "stix", "pattern": "[domain-name:value = 'ur-exods.pages.dev']", "valid_from": "2026-10-09T05:48:42.954921Z", "confidence": 90}, {"type": "report", "spec_version": "2.1", "id": "report--221f78cb-6f61-51a9-8606-83fa762b72ad", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "name": "OpenPhish Alert: ur-exods.pages.dev", "description": "Active credential phishing infrastructure targeting global brands: http://ur-exods.pages.dev/]Exodus/", "published": "2026-10-09T05:48:42.954921Z", "confidence": 90, "x_veritas_license": "OpenPhish Community Edition Terms", "external_references": [{"source_name": "OpenPhish Feed", "url": "https://openphish.com"}], "object_refs": ["identity--78b24d6e-c348-56e3-8318-77b6031e8c5f", "indicator--4acb6ad7-9df2-52d4-aa4e-a228dc514b41"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--337ef298-663e-5d09-a3a4-363cc0e5b66e", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "pattern_type": "stix", "pattern": "[domain-name:value = 'lb-bayern-sys.github.io']", "valid_from": "2026-10-09T05:48:42.954921Z", "confidence": 90}, {"type": "report", "spec_version": "2.1", "id": "report--38ad643b-229d-530f-b80b-808ffcd264f4", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "name": "OpenPhish Alert: lb-bayern-sys.github.io", "description": "Active credential phishing infrastructure targeting global brands: https://lb-bayern-sys.github.io/7842341/", "published": "2026-10-09T05:48:42.954921Z", "confidence": 90, "x_veritas_license": "OpenPhish Community Edition Terms", "external_references": [{"source_name": "OpenPhish Feed", "url": "https://openphish.com"}], "object_refs": ["identity--78b24d6e-c348-56e3-8318-77b6031e8c5f", "indicator--337ef298-663e-5d09-a3a4-363cc0e5b66e"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae60631a-0872-51e4-9dc1-30a680f181ff", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "pattern_type": "stix", "pattern": "[domain-name:value = 'bitdep.github.io']", "valid_from": "2026-10-09T05:48:42.954921Z", "confidence": 90}, {"type": "report", "spec_version": "2.1", "id": "report--de013135-2bcb-573d-bfa7-b714de3119f5", "created": "2026-10-09T05:48:42.954921Z", "modified": "2026-10-09T05:48:42.954921Z", "name": "OpenPhish Alert: bitdep.github.io", "description": "Active credential phishing infrastructure targeting global brands: https://bitdep.github.io/lb-bayern/", "published": "2026-10-09T05:48:42.954921Z", "confidence": 90, "x_veritas_license": "OpenPhish Community Edition Terms", "external_references": [{"source_name": "OpenPhish Feed", "url": "https://openphish.com"}], "object_refs": ["identity--78b24d6e-c348-56e3-8318-77b6031e8c5f", "indicator--ae60631a-0872-51e4-9dc1-30a680f181ff"]}]}