{
    "type": "bundle",
    "id": "bundle--08fa1677-7e7c-4cb9-864a-e1111242a474",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--751343e3-05d7-5ee4-bcbb-9ced797da916",
            "created": "2026-11-05T20:21:50.000Z",
            "modified": "2026-11-05T20:21:50.000Z",
            "name": "ByteMantle",
            "identity_class": "organization"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--0ae46157-8cc2-5299-a068-40f2f53358c7",
            "created": "2026-11-05T20:21:50.000Z",
            "modified": "2026-11-05T20:21:50.000Z",
            "created_by_ref": "identity--751343e3-05d7-5ee4-bcbb-9ced797da916",
            "name": "Download: security-malware.com",
            "indicator_types": [
                "malicious-activity"
            ],
            "pattern_type": "stix",
            "pattern": "[domain-name:value = 'security-malware.com']",
            "valid_from": "2026-11-02T00:00:00.000Z"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--188db648-9bc7-5e07-b575-88601a38632c",
            "created": "2026-11-05T20:21:50.000Z",
            "modified": "2026-11-05T20:21:50.000Z",
            "created_by_ref": "identity--751343e3-05d7-5ee4-bcbb-9ced797da916",
            "name": "Download, lure server: codes.browse-cdn.beer",
            "indicator_types": [
                "malicious-activity"
            ],
            "pattern_type": "stix",
            "pattern": "[domain-name:value = 'codes.browse-cdn.beer']",
            "valid_from": "2026-11-02T00:00:00.000Z"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--4120edfe-b127-5e03-846e-efab60adc5c2",
            "created": "2026-11-05T20:21:50.000Z",
            "modified": "2026-11-05T20:21:50.000Z",
            "created_by_ref": "identity--751343e3-05d7-5ee4-bcbb-9ced797da916",
            "name": "Download: lepafonso.bz",
            "indicator_types": [
                "malicious-activity"
            ],
            "pattern_type": "stix",
            "pattern": "[domain-name:value = 'lepafonso.bz']",
            "valid_from": "2026-11-02T00:00:00.000Z"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--348bc0a5-ee30-5f87-bd9c-94b0ed62a81e",
            "created": "2026-11-05T20:21:50.000Z",
            "modified": "2026-11-05T20:21:50.000Z",
            "created_by_ref": "identity--751343e3-05d7-5ee4-bcbb-9ced797da916",
            "name": "Download: govrobczxc.cc",
            "indicator_types": [
                "malicious-activity"
            ],
            "pattern_type": "stix",
            "pattern": "[domain-name:value = 'govrobczxc.cc']",
            "valid_from": "2026-11-02T00:00:00.000Z"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--286df195-a8d1-5838-abbb-976661a9799c",
            "created": "2026-11-05T20:21:50.000Z",
            "modified": "2026-11-05T20:21:50.000Z",
            "created_by_ref": "identity--751343e3-05d7-5ee4-bcbb-9ced797da916",
            "name": "Download: frclau.com",
            "indicator_types": [
                "malicious-activity"
            ],
            "pattern_type": "stix",
            "pattern": "[domain-name:value = 'frclau.com']",
            "valid_from": "2026-11-02T00:00:00.000Z"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--6ae062b8-f574-5095-acf7-6eda41f5b123",
            "created": "2026-11-05T20:21:50.000Z",
            "modified": "2026-11-05T20:21:50.000Z",
            "created_by_ref": "identity--751343e3-05d7-5ee4-bcbb-9ced797da916",
            "name": "Download: alababababa.cloud",
            "indicator_types": [
                "malicious-activity"
            ],
            "pattern_type": "stix",
            "pattern": "[domain-name:value = 'alababababa.cloud']",
            "valid_from": "2026-11-02T00:00:00.000Z"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--b30aeeca-ac8b-5f09-938f-d64df025d313",
            "created": "2026-11-05T20:21:50.000Z",
            "modified": "2026-11-05T20:21:50.000Z",
            "created_by_ref": "identity--751343e3-05d7-5ee4-bcbb-9ced797da916",
            "name": "Download: 185.246.223.71",
            "indicator_types": [
                "malicious-activity"
            ],
            "pattern_type": "stix",
            "pattern": "[ipv4-addr:value = '185.246.223.71']",
            "valid_from": "2026-11-02T00:00:00.000Z"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--2a16538b-4977-5fe1-b98a-0823d3cd71f1",
            "created": "2026-11-05T20:21:50.000Z",
            "modified": "2026-11-05T20:21:50.000Z",
            "created_by_ref": "identity--751343e3-05d7-5ee4-bcbb-9ced797da916",
            "name": "Download: unlockorgdocv.com",
            "indicator_types": [
                "malicious-activity"
            ],
            "pattern_type": "stix",
            "pattern": "[domain-name:value = 'unlockorgdocv.com']",
            "valid_from": "2026-11-02T00:00:00.000Z"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--06972bda-2037-53ff-8b71-b00a17576a18",
            "created": "2026-11-05T20:21:50.000Z",
            "modified": "2026-11-05T20:21:50.000Z",
            "created_by_ref": "identity--751343e3-05d7-5ee4-bcbb-9ced797da916",
            "name": "Download: threejrev.com",
            "indicator_types": [
                "malicious-activity"
            ],
            "pattern_type": "stix",
            "pattern": "[domain-name:value = 'threejrev.com']",
            "valid_from": "2026-11-02T00:00:00.000Z"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--6347aa28-8f22-5737-acc4-2e5e6b76abf7",
            "created": "2026-11-05T20:21:50.000Z",
            "modified": "2026-11-05T20:21:50.000Z",
            "created_by_ref": "identity--751343e3-05d7-5ee4-bcbb-9ced797da916",
            "name": "Download: update.neewsoo.com",
            "indicator_types": [
                "malicious-activity"
            ],
            "pattern_type": "stix",
            "pattern": "[domain-name:value = 'update.neewsoo.com']",
            "valid_from": "2026-11-02T00:00:00.000Z"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--ad7386d7-e055-5e16-a167-3cac992309e7",
            "created": "2026-11-05T20:21:50.000Z",
            "modified": "2026-11-05T20:21:50.000Z",
            "created_by_ref": "identity--751343e3-05d7-5ee4-bcbb-9ced797da916",
            "name": "Download, lure server: ncheck-brows.beer",
            "indicator_types": [
                "malicious-activity"
            ],
            "pattern_type": "stix",
            "pattern": "[domain-name:value = 'ncheck-brows.beer']",
            "valid_from": "2026-11-02T00:00:00.000Z"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--2f50b66d-c3de-536c-9d04-a7fe7b36f66a",
            "created": "2026-11-05T20:21:50.000Z",
            "modified": "2026-11-05T20:21:50.000Z",
            "created_by_ref": "identity--751343e3-05d7-5ee4-bcbb-9ced797da916",
            "name": "Download: verifyidentrob01.cc",
            "indicator_types": [
                "malicious-activity"
            ],
            "pattern_type": "stix",
            "pattern": "[domain-name:value = 'verifyidentrob01.cc']",
            "valid_from": "2026-11-02T00:00:00.000Z"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--bcf38448-b878-5065-b1f9-e96bf1e98d0f",
            "created": "2026-11-05T20:21:50.000Z",
            "modified": "2026-11-05T20:21:50.000Z",
            "created_by_ref": "identity--751343e3-05d7-5ee4-bcbb-9ced797da916",
            "name": "Smart contract used as a ClickFix lure resolver: 0xf70730a4e5b89b6c6e02edaed582badf6465e9d9",
            "description": "lure resolver (polygon, 10 sites)",
            "indicator_types": [
                "malicious-activity"
            ],
            "pattern_type": "stix",
            "pattern": "[x-bytemantle-smart-contract:address = '0xf70730a4e5b89b6c6e02edaed582badf6465e9d9']",
            "valid_from": "2026-11-02T00:00:00.000Z",
            "x_bytemantle_role": "lure resolver (polygon, 10 sites)"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--321a053f-60b6-59fe-b714-23d799975e91",
            "created": "2026-11-05T20:21:50.000Z",
            "modified": "2026-11-05T20:21:50.000Z",
            "created_by_ref": "identity--751343e3-05d7-5ee4-bcbb-9ced797da916",
            "name": "Smart contract used as a ClickFix lure resolver: 0xb6bc9e1d0b2fb96ab7c47e04cb0be477410bc1f2",
            "description": "lure resolver (polygon, 6 sites)",
            "indicator_types": [
                "malicious-activity"
            ],
            "pattern_type": "stix",
            "pattern": "[x-bytemantle-smart-contract:address = '0xb6bc9e1d0b2fb96ab7c47e04cb0be477410bc1f2']",
            "valid_from": "2026-11-02T00:00:00.000Z",
            "x_bytemantle_role": "lure resolver (polygon, 6 sites)"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--ea6206d4-5904-5fba-94d8-b009823969b8",
            "created": "2026-11-05T20:21:50.000Z",
            "modified": "2026-11-05T20:21:50.000Z",
            "created_by_ref": "identity--751343e3-05d7-5ee4-bcbb-9ced797da916",
            "name": "Smart contract used as a ClickFix lure resolver: 0xb29927b7d854b232d5e58cfc201866376e68c676",
            "description": "lure resolver (polygon, 4 sites)",
            "indicator_types": [
                "malicious-activity"
            ],
            "pattern_type": "stix",
            "pattern": "[x-bytemantle-smart-contract:address = '0xb29927b7d854b232d5e58cfc201866376e68c676']",
            "valid_from": "2026-11-05T00:00:00.000Z",
            "x_bytemantle_role": "lure resolver (polygon, 4 sites)"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--1eb7f3f8-28f0-5e52-9ba9-5404c51669b0",
            "created": "2026-11-05T20:21:50.000Z",
            "modified": "2026-11-05T20:21:50.000Z",
            "created_by_ref": "identity--751343e3-05d7-5ee4-bcbb-9ced797da916",
            "name": "Smart contract used as a ClickFix lure resolver: 0xdf132e2893824e26ec8ae8014b4f4facd54ed67f",
            "description": "lure resolver (bsc, 3 sites)",
            "indicator_types": [
                "malicious-activity"
            ],
            "pattern_type": "stix",
            "pattern": "[x-bytemantle-smart-contract:address = '0xdf132e2893824e26ec8ae8014b4f4facd54ed67f']",
            "valid_from": "2026-11-02T00:00:00.000Z",
            "x_bytemantle_role": "lure resolver (bsc, 3 sites)"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--7e1437df-b47a-57c6-a2ac-1f988dca6509",
            "created": "2026-11-05T20:21:50.000Z",
            "modified": "2026-11-05T20:21:50.000Z",
            "created_by_ref": "identity--751343e3-05d7-5ee4-bcbb-9ced797da916",
            "name": "Smart contract used as a ClickFix lure resolver: 0x46790e2ac7f3ca5a7d1bfce312d11e91d23383ff",
            "description": "lure resolver (bsc, 3 sites)",
            "indicator_types": [
                "malicious-activity"
            ],
            "pattern_type": "stix",
            "pattern": "[x-bytemantle-smart-contract:address = '0x46790e2ac7f3ca5a7d1bfce312d11e91d23383ff']",
            "valid_from": "2026-11-02T00:00:00.000Z",
            "x_bytemantle_role": "lure resolver (bsc, 3 sites)"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--e847e3f5-39c9-5a68-8977-9e198701b960",
            "created": "2026-11-05T20:21:50.000Z",
            "modified": "2026-11-05T20:21:50.000Z",
            "created_by_ref": "identity--751343e3-05d7-5ee4-bcbb-9ced797da916",
            "name": "Smart contract used as a ClickFix lure resolver: 0xf4a32588b50a59a82fba148d436081a48d80832a",
            "description": "lure resolver (bsc, 1 sites)",
            "indicator_types": [
                "malicious-activity"
            ],
            "pattern_type": "stix",
            "pattern": "[x-bytemantle-smart-contract:address = '0xf4a32588b50a59a82fba148d436081a48d80832a']",
            "valid_from": "2026-11-05T00:00:00.000Z",
            "x_bytemantle_role": "lure resolver (bsc, 1 sites)"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--1dffbb38-df21-5407-9f03-6b08efc0b90a",
            "created": "2026-11-05T20:21:50.000Z",
            "modified": "2026-11-05T20:21:50.000Z",
            "created_by_ref": "identity--751343e3-05d7-5ee4-bcbb-9ced797da916",
            "name": "Smart contract used as a ClickFix lure resolver: 0xa1decfb75c8c0ca28c10517ce56b710baf727d2e",
            "description": "lure resolver (bsc, 1 sites)",
            "indicator_types": [
                "malicious-activity"
            ],
            "pattern_type": "stix",
            "pattern": "[x-bytemantle-smart-contract:address = '0xa1decfb75c8c0ca28c10517ce56b710baf727d2e']",
            "valid_from": "2026-11-05T00:00:00.000Z",
            "x_bytemantle_role": "lure resolver (bsc, 1 sites)"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--f0d55a64-c762-590b-9abb-4e1cfa0d7ae7",
            "created": "2026-11-05T20:21:50.000Z",
            "modified": "2026-11-05T20:21:50.000Z",
            "created_by_ref": "identity--751343e3-05d7-5ee4-bcbb-9ced797da916",
            "name": "Smart contract used as a ClickFix lure resolver: 0xb909956b9d716ddfdf6935115a8d6f6cb2e655c6",
            "description": "lure resolver (polygon, 1 sites)",
            "indicator_types": [
                "malicious-activity"
            ],
            "pattern_type": "stix",
            "pattern": "[x-bytemantle-smart-contract:address = '0xb909956b9d716ddfdf6935115a8d6f6cb2e655c6']",
            "valid_from": "2026-11-02T00:00:00.000Z",
            "x_bytemantle_role": "lure resolver (polygon, 1 sites)"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--0fdfe90b-5f5d-5123-810a-dc914d425a5e",
            "created": "2026-11-05T20:21:50.000Z",
            "modified": "2026-11-05T20:21:50.000Z",
            "created_by_ref": "identity--751343e3-05d7-5ee4-bcbb-9ced797da916",
            "name": "ClickFix report 2026-11-02 \u2013 2026-11-05",
            "report_types": [
                "threat-report"
            ],
            "published": "2026-11-05T20:21:50.000Z",
            "object_refs": [
                "indicator--0ae46157-8cc2-5299-a068-40f2f53358c7",
                "indicator--188db648-9bc7-5e07-b575-88601a38632c",
                "indicator--4120edfe-b127-5e03-846e-efab60adc5c2",
                "indicator--348bc0a5-ee30-5f87-bd9c-94b0ed62a81e",
                "indicator--286df195-a8d1-5838-abbb-976661a9799c",
                "indicator--6ae062b8-f574-5095-acf7-6eda41f5b123",
                "indicator--b30aeeca-ac8b-5f09-938f-d64df025d313",
                "indicator--2a16538b-4977-5fe1-b98a-0823d3cd71f1",
                "indicator--06972bda-2037-53ff-8b71-b00a17576a18",
                "indicator--6347aa28-8f22-5737-acc4-2e5e6b76abf7",
                "indicator--ad7386d7-e055-5e16-a167-3cac992309e7",
                "indicator--2f50b66d-c3de-536c-9d04-a7fe7b36f66a",
                "indicator--bcf38448-b878-5065-b1f9-e96bf1e98d0f",
                "indicator--321a053f-60b6-59fe-b714-23d799975e91",
                "indicator--ea6206d4-5904-5fba-94d8-b009823969b8",
                "indicator--1eb7f3f8-28f0-5e52-9ba9-5404c51669b0",
                "indicator--7e1437df-b47a-57c6-a2ac-1f988dca6509",
                "indicator--e847e3f5-39c9-5a68-8977-9e198701b960",
                "indicator--1dffbb38-df21-5407-9f03-6b08efc0b90a",
                "indicator--f0d55a64-c762-590b-9abb-4e1cfa0d7ae7"
            ]
        }
    ]
}