{
    "type": "bundle",
    "id": "bundle--c412d119-6081-4973-8987-38e2262ca92b",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--751343e3-05d7-5ee4-bcbb-9ced797da916",
            "created": "2026-11-12T20:03:09.000Z",
            "modified": "2026-11-12T20:03:09.000Z",
            "name": "ByteMantle",
            "identity_class": "organization"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--348bc0a5-ee30-5f87-bd9c-94b0ed62a81e",
            "created": "2026-11-12T20:03:09.000Z",
            "modified": "2026-11-12T20:03:09.000Z",
            "created_by_ref": "identity--751343e3-05d7-5ee4-bcbb-9ced797da916",
            "name": "Download: govrobczxc.cc",
            "indicator_types": [
                "malicious-activity"
            ],
            "pattern_type": "stix",
            "pattern": "[domain-name:value = 'govrobczxc.cc']",
            "valid_from": "2026-11-05T00:00:00.000Z"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--6ae062b8-f574-5095-acf7-6eda41f5b123",
            "created": "2026-11-12T20:03:09.000Z",
            "modified": "2026-11-12T20:03:09.000Z",
            "created_by_ref": "identity--751343e3-05d7-5ee4-bcbb-9ced797da916",
            "name": "Download: alababababa.cloud",
            "indicator_types": [
                "malicious-activity"
            ],
            "pattern_type": "stix",
            "pattern": "[domain-name:value = 'alababababa.cloud']",
            "valid_from": "2026-11-05T00:00:00.000Z"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--5bcc79be-585f-5a26-b685-18708c1af09a",
            "created": "2026-11-12T20:03:09.000Z",
            "modified": "2026-11-12T20:03:09.000Z",
            "created_by_ref": "identity--751343e3-05d7-5ee4-bcbb-9ced797da916",
            "name": "Download, lure server: browse-nnccodes.beer",
            "indicator_types": [
                "malicious-activity"
            ],
            "pattern_type": "stix",
            "pattern": "[domain-name:value = 'browse-nnccodes.beer']",
            "valid_from": "2026-11-05T00:00:00.000Z"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--0ae46157-8cc2-5299-a068-40f2f53358c7",
            "created": "2026-11-12T20:03:09.000Z",
            "modified": "2026-11-12T20:03:09.000Z",
            "created_by_ref": "identity--751343e3-05d7-5ee4-bcbb-9ced797da916",
            "name": "Download: security-malware.com",
            "indicator_types": [
                "malicious-activity"
            ],
            "pattern_type": "stix",
            "pattern": "[domain-name:value = 'security-malware.com']",
            "valid_from": "2026-11-05T00:00:00.000Z"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--188db648-9bc7-5e07-b575-88601a38632c",
            "created": "2026-11-12T20:03:09.000Z",
            "modified": "2026-11-12T20:03:09.000Z",
            "created_by_ref": "identity--751343e3-05d7-5ee4-bcbb-9ced797da916",
            "name": "Download, lure server: codes.browse-cdn.beer",
            "indicator_types": [
                "malicious-activity"
            ],
            "pattern_type": "stix",
            "pattern": "[domain-name:value = 'codes.browse-cdn.beer']",
            "valid_from": "2026-11-05T00:00:00.000Z"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--6347aa28-8f22-5737-acc4-2e5e6b76abf7",
            "created": "2026-11-12T20:03:09.000Z",
            "modified": "2026-11-12T20:03:09.000Z",
            "created_by_ref": "identity--751343e3-05d7-5ee4-bcbb-9ced797da916",
            "name": "Download: update.neewsoo.com",
            "indicator_types": [
                "malicious-activity"
            ],
            "pattern_type": "stix",
            "pattern": "[domain-name:value = 'update.neewsoo.com']",
            "valid_from": "2026-11-05T00:00:00.000Z"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--15eb9a72-a482-5ce9-9ef0-3b32e9e02909",
            "created": "2026-11-12T20:03:09.000Z",
            "modified": "2026-11-12T20:03:09.000Z",
            "created_by_ref": "identity--751343e3-05d7-5ee4-bcbb-9ced797da916",
            "name": "Download: pumpadmin.fun",
            "indicator_types": [
                "malicious-activity"
            ],
            "pattern_type": "stix",
            "pattern": "[domain-name:value = 'pumpadmin.fun']",
            "valid_from": "2026-11-05T00:00:00.000Z"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--b30aeeca-ac8b-5f09-938f-d64df025d313",
            "created": "2026-11-12T20:03:09.000Z",
            "modified": "2026-11-12T20:03:09.000Z",
            "created_by_ref": "identity--751343e3-05d7-5ee4-bcbb-9ced797da916",
            "name": "Download: 185.246.223.71",
            "indicator_types": [
                "malicious-activity"
            ],
            "pattern_type": "stix",
            "pattern": "[ipv4-addr:value = '185.246.223.71']",
            "valid_from": "2026-11-05T00:00:00.000Z"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--f7cb2724-2839-58e1-9c88-d0e337704b6a",
            "created": "2026-11-12T20:03:09.000Z",
            "modified": "2026-11-12T20:03:09.000Z",
            "created_by_ref": "identity--751343e3-05d7-5ee4-bcbb-9ced797da916",
            "name": "Download: cloudflareconfirm.com",
            "indicator_types": [
                "malicious-activity"
            ],
            "pattern_type": "stix",
            "pattern": "[domain-name:value = 'cloudflareconfirm.com']",
            "valid_from": "2026-11-05T00:00:00.000Z"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--06972bda-2037-53ff-8b71-b00a17576a18",
            "created": "2026-11-12T20:03:09.000Z",
            "modified": "2026-11-12T20:03:09.000Z",
            "created_by_ref": "identity--751343e3-05d7-5ee4-bcbb-9ced797da916",
            "name": "Download: threejrev.com",
            "indicator_types": [
                "malicious-activity"
            ],
            "pattern_type": "stix",
            "pattern": "[domain-name:value = 'threejrev.com']",
            "valid_from": "2026-11-05T00:00:00.000Z"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--4120edfe-b127-5e03-846e-efab60adc5c2",
            "created": "2026-11-12T20:03:09.000Z",
            "modified": "2026-11-12T20:03:09.000Z",
            "created_by_ref": "identity--751343e3-05d7-5ee4-bcbb-9ced797da916",
            "name": "Download: lepafonso.bz",
            "indicator_types": [
                "malicious-activity"
            ],
            "pattern_type": "stix",
            "pattern": "[domain-name:value = 'lepafonso.bz']",
            "valid_from": "2026-11-05T00:00:00.000Z"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--2237d75d-d998-52e8-b190-6b1e768ceaeb",
            "created": "2026-11-12T20:03:09.000Z",
            "modified": "2026-11-12T20:03:09.000Z",
            "created_by_ref": "identity--751343e3-05d7-5ee4-bcbb-9ced797da916",
            "name": "Lure server: makeverizyjar.info",
            "indicator_types": [
                "malicious-activity"
            ],
            "pattern_type": "stix",
            "pattern": "[domain-name:value = 'makeverizyjar.info']",
            "valid_from": "2026-11-05T00:00:00.000Z"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--1dffbb38-df21-5407-9f03-6b08efc0b90a",
            "created": "2026-11-12T20:03:09.000Z",
            "modified": "2026-11-12T20:03:09.000Z",
            "created_by_ref": "identity--751343e3-05d7-5ee4-bcbb-9ced797da916",
            "name": "Smart contract used as a ClickFix lure resolver: 0xa1decfb75c8c0ca28c10517ce56b710baf727d2e",
            "description": "lure resolver (bsc-testnet, 1 sites)",
            "indicator_types": [
                "malicious-activity"
            ],
            "pattern_type": "stix",
            "pattern": "[x-bytemantle-smart-contract:address = '0xa1decfb75c8c0ca28c10517ce56b710baf727d2e']",
            "valid_from": "2026-11-05T00:00:00.000Z",
            "x_bytemantle_role": "lure resolver (bsc-testnet, 1 sites)"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--ea6206d4-5904-5fba-94d8-b009823969b8",
            "created": "2026-11-12T20:03:09.000Z",
            "modified": "2026-11-12T20:03:09.000Z",
            "created_by_ref": "identity--751343e3-05d7-5ee4-bcbb-9ced797da916",
            "name": "Smart contract used as a ClickFix lure resolver: 0xb29927b7d854b232d5e58cfc201866376e68c676",
            "description": "lure resolver (polygon, 5 sites)",
            "indicator_types": [
                "malicious-activity"
            ],
            "pattern_type": "stix",
            "pattern": "[x-bytemantle-smart-contract:address = '0xb29927b7d854b232d5e58cfc201866376e68c676']",
            "valid_from": "2026-11-05T00:00:00.000Z",
            "x_bytemantle_role": "lure resolver (polygon, 5 sites)"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--bcf38448-b878-5065-b1f9-e96bf1e98d0f",
            "created": "2026-11-12T20:03:09.000Z",
            "modified": "2026-11-12T20:03:09.000Z",
            "created_by_ref": "identity--751343e3-05d7-5ee4-bcbb-9ced797da916",
            "name": "Smart contract used as a ClickFix lure resolver: 0xf70730a4e5b89b6c6e02edaed582badf6465e9d9",
            "description": "lure resolver (polygon, 5 sites)",
            "indicator_types": [
                "malicious-activity"
            ],
            "pattern_type": "stix",
            "pattern": "[x-bytemantle-smart-contract:address = '0xf70730a4e5b89b6c6e02edaed582badf6465e9d9']",
            "valid_from": "2026-11-05T00:00:00.000Z",
            "x_bytemantle_role": "lure resolver (polygon, 5 sites)"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--321a053f-60b6-59fe-b714-23d799975e91",
            "created": "2026-11-12T20:03:09.000Z",
            "modified": "2026-11-12T20:03:09.000Z",
            "created_by_ref": "identity--751343e3-05d7-5ee4-bcbb-9ced797da916",
            "name": "Smart contract used as a ClickFix lure resolver: 0xb6bc9e1d0b2fb96ab7c47e04cb0be477410bc1f2",
            "description": "lure resolver (polygon, 6 sites)",
            "indicator_types": [
                "malicious-activity"
            ],
            "pattern_type": "stix",
            "pattern": "[x-bytemantle-smart-contract:address = '0xb6bc9e1d0b2fb96ab7c47e04cb0be477410bc1f2']",
            "valid_from": "2026-11-05T00:00:00.000Z",
            "x_bytemantle_role": "lure resolver (polygon, 6 sites)"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--7e1437df-b47a-57c6-a2ac-1f988dca6509",
            "created": "2026-11-12T20:03:09.000Z",
            "modified": "2026-11-12T20:03:09.000Z",
            "created_by_ref": "identity--751343e3-05d7-5ee4-bcbb-9ced797da916",
            "name": "Smart contract used as a ClickFix lure resolver: 0x46790e2ac7f3ca5a7d1bfce312d11e91d23383ff",
            "description": "lure resolver (bsc-testnet, 1 sites)",
            "indicator_types": [
                "malicious-activity"
            ],
            "pattern_type": "stix",
            "pattern": "[x-bytemantle-smart-contract:address = '0x46790e2ac7f3ca5a7d1bfce312d11e91d23383ff']",
            "valid_from": "2026-11-05T00:00:00.000Z",
            "x_bytemantle_role": "lure resolver (bsc-testnet, 1 sites)"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--1eb7f3f8-28f0-5e52-9ba9-5404c51669b0",
            "created": "2026-11-12T20:03:09.000Z",
            "modified": "2026-11-12T20:03:09.000Z",
            "created_by_ref": "identity--751343e3-05d7-5ee4-bcbb-9ced797da916",
            "name": "Smart contract used as a ClickFix lure resolver: 0xdf132e2893824e26ec8ae8014b4f4facd54ed67f",
            "description": "lure resolver (bsc-testnet, 2 sites)",
            "indicator_types": [
                "malicious-activity"
            ],
            "pattern_type": "stix",
            "pattern": "[x-bytemantle-smart-contract:address = '0xdf132e2893824e26ec8ae8014b4f4facd54ed67f']",
            "valid_from": "2026-11-05T00:00:00.000Z",
            "x_bytemantle_role": "lure resolver (bsc-testnet, 2 sites)"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--e847e3f5-39c9-5a68-8977-9e198701b960",
            "created": "2026-11-12T20:03:09.000Z",
            "modified": "2026-11-12T20:03:09.000Z",
            "created_by_ref": "identity--751343e3-05d7-5ee4-bcbb-9ced797da916",
            "name": "Smart contract used as a ClickFix lure resolver: 0xf4a32588b50a59a82fba148d436081a48d80832a",
            "description": "lure resolver (bsc-testnet, 1 sites)",
            "indicator_types": [
                "malicious-activity"
            ],
            "pattern_type": "stix",
            "pattern": "[x-bytemantle-smart-contract:address = '0xf4a32588b50a59a82fba148d436081a48d80832a']",
            "valid_from": "2026-11-05T00:00:00.000Z",
            "x_bytemantle_role": "lure resolver (bsc-testnet, 1 sites)"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--7d66e582-47f1-565e-a096-84a6c3b64fc7",
            "created": "2026-11-12T20:03:09.000Z",
            "modified": "2026-11-12T20:03:09.000Z",
            "created_by_ref": "identity--751343e3-05d7-5ee4-bcbb-9ced797da916",
            "name": "Smart contract used as a ClickFix lure resolver: 0x58460d0b3d4d6b03761c89120393c0c676676496",
            "description": "lure resolver (base, 1 sites)",
            "indicator_types": [
                "malicious-activity"
            ],
            "pattern_type": "stix",
            "pattern": "[x-bytemantle-smart-contract:address = '0x58460d0b3d4d6b03761c89120393c0c676676496']",
            "valid_from": "2026-11-06T00:00:00.000Z",
            "x_bytemantle_role": "lure resolver (base, 1 sites)"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--4d2fe365-69ab-5445-aa5f-196534604a8f",
            "created": "2026-11-12T20:03:09.000Z",
            "modified": "2026-11-12T20:03:09.000Z",
            "created_by_ref": "identity--751343e3-05d7-5ee4-bcbb-9ced797da916",
            "name": "Smart contract used as a ClickFix lure resolver: 0xff9e792a3015a79340cdec1847ab0aa10560422a",
            "description": "lure resolver (polygon, 2 sites)",
            "indicator_types": [
                "malicious-activity"
            ],
            "pattern_type": "stix",
            "pattern": "[x-bytemantle-smart-contract:address = '0xff9e792a3015a79340cdec1847ab0aa10560422a']",
            "valid_from": "2026-11-09T00:00:00.000Z",
            "x_bytemantle_role": "lure resolver (polygon, 2 sites)"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--30f22b60-1dbe-5dff-b4d2-b15f63ba9e58",
            "created": "2026-11-12T20:03:09.000Z",
            "modified": "2026-11-12T20:03:09.000Z",
            "created_by_ref": "identity--751343e3-05d7-5ee4-bcbb-9ced797da916",
            "name": "Smart contract used as a ClickFix lure resolver: 0x83833c5d676ca06e941a32310ae67d0890f657ee",
            "description": "lure resolver (polygon, 1 sites)",
            "indicator_types": [
                "malicious-activity"
            ],
            "pattern_type": "stix",
            "pattern": "[x-bytemantle-smart-contract:address = '0x83833c5d676ca06e941a32310ae67d0890f657ee']",
            "valid_from": "2026-11-09T00:00:00.000Z",
            "x_bytemantle_role": "lure resolver (polygon, 1 sites)"
        },
        {
            "type": "indicator",
            "spec_version": "2.1",
            "id": "indicator--c61c47a9-bdc0-59e3-b4cf-87b585a852a4",
            "created": "2026-11-12T20:03:09.000Z",
            "modified": "2026-11-12T20:03:09.000Z",
            "created_by_ref": "identity--751343e3-05d7-5ee4-bcbb-9ced797da916",
            "name": "Smart contract used as a ClickFix lure resolver: 0xbab25ced421128c427ad19914473566633894dd5",
            "description": "lure resolver (polygon, 1 sites)",
            "indicator_types": [
                "malicious-activity"
            ],
            "pattern_type": "stix",
            "pattern": "[x-bytemantle-smart-contract:address = '0xbab25ced421128c427ad19914473566633894dd5']",
            "valid_from": "2026-11-09T00:00:00.000Z",
            "x_bytemantle_role": "lure resolver (polygon, 1 sites)"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--b5fc4917-c1ec-5d83-b00a-ed401488b506",
            "created": "2026-11-12T20:03:09.000Z",
            "modified": "2026-11-12T20:03:09.000Z",
            "created_by_ref": "identity--751343e3-05d7-5ee4-bcbb-9ced797da916",
            "name": "ClickFix report 2026-11-05 – 2026-11-11",
            "report_types": [
                "threat-report"
            ],
            "published": "2026-11-12T20:03:09.000Z",
            "object_refs": [
                "indicator--348bc0a5-ee30-5f87-bd9c-94b0ed62a81e",
                "indicator--6ae062b8-f574-5095-acf7-6eda41f5b123",
                "indicator--5bcc79be-585f-5a26-b685-18708c1af09a",
                "indicator--0ae46157-8cc2-5299-a068-40f2f53358c7",
                "indicator--188db648-9bc7-5e07-b575-88601a38632c",
                "indicator--6347aa28-8f22-5737-acc4-2e5e6b76abf7",
                "indicator--15eb9a72-a482-5ce9-9ef0-3b32e9e02909",
                "indicator--b30aeeca-ac8b-5f09-938f-d64df025d313",
                "indicator--f7cb2724-2839-58e1-9c88-d0e337704b6a",
                "indicator--06972bda-2037-53ff-8b71-b00a17576a18",
                "indicator--4120edfe-b127-5e03-846e-efab60adc5c2",
                "indicator--2237d75d-d998-52e8-b190-6b1e768ceaeb",
                "indicator--1dffbb38-df21-5407-9f03-6b08efc0b90a",
                "indicator--ea6206d4-5904-5fba-94d8-b009823969b8",
                "indicator--bcf38448-b878-5065-b1f9-e96bf1e98d0f",
                "indicator--321a053f-60b6-59fe-b714-23d799975e91",
                "indicator--7e1437df-b47a-57c6-a2ac-1f988dca6509",
                "indicator--1eb7f3f8-28f0-5e52-9ba9-5404c51669b0",
                "indicator--e847e3f5-39c9-5a68-8977-9e198701b960",
                "indicator--7d66e582-47f1-565e-a096-84a6c3b64fc7",
                "indicator--4d2fe365-69ab-5445-aa5f-196534604a8f",
                "indicator--30f22b60-1dbe-5dff-b4d2-b15f63ba9e58",
                "indicator--c61c47a9-bdc0-59e3-b4cf-87b585a852a4"
            ]
        }
    ]
}