{
  "Event": {
    "id": 0,
    "date": "2026-09-09",
    "threat_level_id": 1,
    "analysis": 0,
    "attribute_count": "44",
    "publish_distribution": 0,
    "proposal_email_lock": false,
    "info": "Cyber Daily Brief IOC Report - 2026-09-09 12:15 UTC",
    "published": false,
    "uuid": "misp-event-IOC-20260909-121523",
    "orgc_id": 0,
    "Orgc": {
      "name": "Cyber Daily Brief"
    },
    "distribution": 0,
    "tags": [
      "ioc-report::2026-09-09 12:15 UTC",
      "classification:text",
      "export:requires-approval::0"
    ],
    "sharing_group_id": 0,
    "disable_correlation": false,
    "expected_count": 44,
    "event_level": 1,
    "analysis_status": "1",
    "Attribute": [
      {
        "category": "Artefact on host",
        "type": "cve",
        "value": "CVE-2026-75650",
        "to_ids": true,
        "disable_correlation": false,
        "comment": "Severity: CRITICAL; Product: Commerce and Magento (Adobe); Source: CISA KEV Catalog; URL: https://www.cisa.gov/known-exploited-vulnerabilities-catalog; Date: 2026-09-08; Section: CISA KEV (KNOWN EXPLOITED VULNERABILITY); Description: Adobe Commerce and Magento Open Source contain an improper neutralization of special elements used in a template engine vulnerability that could allow an attacker to execute arbitrary code.",
        "distribution": 0,
        "sharing_group_id": 0,
        "Tag": [
          "severity:CRITICAL",
          "section:CISA KEV (KNOWN EXPLOITED VULNERABILITY)",
          "tag:kev",
          "tag:cisa",
          "tag:active-exploitation"
        ],
        "first_seen": "2026-09-08",
        "last_seen": "2026-09-08"
      },
      {
        "category": "Artefact on host",
        "type": "cve",
        "value": "CVE-2026-81963",
        "to_ids": true,
        "disable_correlation": false,
        "comment": "Severity: CRITICAL; Product: Windows (Microsoft); Source: CISA KEV Catalog; URL: https://www.cisa.gov/known-exploited-vulnerabilities-catalog; Date: 2026-09-08; Section: CISA KEV (KNOWN EXPLOITED VULNERABILITY); Description: Microsoft Windows Update Stack contains a link following vulnerability that allows a local attacker to escalate privileges locally up to SYSTEM.",
        "distribution": 0,
        "sharing_group_id": 0,
        "Tag": [
          "severity:CRITICAL",
          "section:CISA KEV (KNOWN EXPLOITED VULNERABILITY)",
          "tag:kev",
          "tag:cisa",
          "tag:active-exploitation"
        ],
        "first_seen": "2026-09-08",
        "last_seen": "2026-09-08"
      },
      {
        "category": "Artefact on host",
        "type": "cve",
        "value": "CVE-2026-86218",
        "to_ids": true,
        "disable_correlation": false,
        "comment": "Severity: CRITICAL; Product: N-central (N-able); Source: CISA KEV Catalog; URL: https://www.cisa.gov/known-exploited-vulnerabilities-catalog; Date: 2026-09-08; Section: CISA KEV (KNOWN EXPLOITED VULNERABILITY); Description: N-able N-central contains a static code injection vulnerability that could allow for pre-authentication remote code execution.",
        "distribution": 0,
        "sharing_group_id": 0,
        "Tag": [
          "severity:CRITICAL",
          "section:CISA KEV (KNOWN EXPLOITED VULNERABILITY)",
          "tag:kev",
          "tag:cisa",
          "tag:active-exploitation"
        ],
        "first_seen": "2026-09-08",
        "last_seen": "2026-09-08"
      },
      {
        "category": "Artefact on host",
        "type": "cve",
        "value": "CVE-2026-85880",
        "to_ids": true,
        "disable_correlation": false,
        "comment": "Severity: CRITICAL; Product: Windows (Microsoft); Source: CISA KEV Catalog; URL: https://www.cisa.gov/known-exploited-vulnerabilities-catalog; Date: 2026-09-08; Section: CISA KEV (KNOWN EXPLOITED VULNERABILITY); Description: Microsoft Windows Advanced Local Procedure Call contains a heap-based buffer overflow vulnerability that allows an attacker to elevate privileges locally.",
        "distribution": 0,
        "sharing_group_id": 0,
        "Tag": [
          "severity:CRITICAL",
          "section:CISA KEV (KNOWN EXPLOITED VULNERABILITY)",
          "tag:kev",
          "tag:cisa",
          "tag:active-exploitation"
        ],
        "first_seen": "2026-09-08",
        "last_seen": "2026-09-08"
      },
      {
        "category": "Artefact on host",
        "type": "cve",
        "value": "CVE-2026-85046",
        "to_ids": true,
        "disable_correlation": false,
        "comment": "Severity: CRITICAL; Product: Chromium V8 (Google); Source: CISA KEV Catalog; URL: https://www.cisa.gov/known-exploited-vulnerabilities-catalog; Date: 2026-09-04; Section: CISA KEV (KNOWN EXPLOITED VULNERABILITY); Description: Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. This vulnerability could affect multiple ",
        "distribution": 0,
        "sharing_group_id": 0,
        "Tag": [
          "severity:CRITICAL",
          "section:CISA KEV (KNOWN EXPLOITED VULNERABILITY)",
          "tag:kev",
          "tag:cisa",
          "tag:active-exploitation"
        ],
        "first_seen": "2026-09-04",
        "last_seen": "2026-09-04"
      },
      {
        "category": "Artefact on host",
        "type": "cve",
        "value": "CVE-2026-59822",
        "to_ids": true,
        "disable_correlation": false,
        "comment": "Severity: CRITICAL; Product: LiteLLM (BerriAI); Source: CISA KEV Catalog; URL: https://www.cisa.gov/known-exploited-vulnerabilities-catalog; Date: 2026-09-02; Section: CISA KEV (KNOWN EXPLOITED VULNERABILITY); Description: BerriAI LiteLLM contains an improper authentication vulnerability in the MCP Streamable HTTP endpoint that could allow an unauthenticated attacker to establish an authenticated MCP session using an ar",
        "distribution": 0,
        "sharing_group_id": 0,
        "Tag": [
          "severity:CRITICAL",
          "section:CISA KEV (KNOWN EXPLOITED VULNERABILITY)",
          "tag:kev",
          "tag:cisa",
          "tag:active-exploitation"
        ],
        "first_seen": "2026-09-02",
        "last_seen": "2026-09-02"
      },
      {
        "category": "Artefact on host",
        "type": "cve",
        "value": "CVE-2026-48710",
        "to_ids": true,
        "disable_correlation": false,
        "comment": "Severity: CRITICAL; Product: Starlette (Kludex); Source: CISA KEV Catalog; URL: https://www.cisa.gov/known-exploited-vulnerabilities-catalog; Date: 2026-09-02; Section: CISA KEV (KNOWN EXPLOITED VULNERABILITY); Description: Kludex Starlette contains a HTTP request/response smuggling vulnerability that could allow attackers to inject paths into the host part, prepending the actual path leading to issues such as authentica",
        "distribution": 0,
        "sharing_group_id": 0,
        "Tag": [
          "severity:CRITICAL",
          "section:CISA KEV (KNOWN EXPLOITED VULNERABILITY)",
          "tag:kev",
          "tag:cisa",
          "tag:active-exploitation"
        ],
        "first_seen": "2026-09-02",
        "last_seen": "2026-09-02"
      },
      {
        "category": "Artefact on host",
        "type": "cve",
        "value": "CVE-2026-49869",
        "to_ids": true,
        "disable_correlation": false,
        "comment": "Severity: CRITICAL; Product: Kestra OSS (Kestra); Source: CISA KEV Catalog; URL: https://www.cisa.gov/known-exploited-vulnerabilities-catalog; Date: 2026-09-02; Section: CISA KEV (KNOWN EXPLOITED VULNERABILITY); Description: Kestra OSS contains an OS command injection vulnerability that could allow an unauthenticated remote attacker to create and execute arbitrary workflows without credentials.",
        "distribution": 0,
        "sharing_group_id": 0,
        "Tag": [
          "severity:CRITICAL",
          "section:CISA KEV (KNOWN EXPLOITED VULNERABILITY)",
          "tag:kev",
          "tag:cisa",
          "tag:active-exploitation"
        ],
        "first_seen": "2026-09-02",
        "last_seen": "2026-09-02"
      },
      {
        "category": "Artefact on host",
        "type": "cve",
        "value": "CVE-2026-82329",
        "to_ids": true,
        "disable_correlation": false,
        "comment": "Severity: CRITICAL; Product: Artifactory (JFrog); Source: CISA KEV Catalog; URL: https://www.cisa.gov/known-exploited-vulnerabilities-catalog; Date: 2026-09-02; Section: CISA KEV (KNOWN EXPLOITED VULNERABILITY); Description: JFrog Artifactory contains an improper authentication vulnerability that under default configuration can allow an unauthenticated attacker with network access to obtain administrative privileges.",
        "distribution": 0,
        "sharing_group_id": 0,
        "Tag": [
          "severity:CRITICAL",
          "section:CISA KEV (KNOWN EXPLOITED VULNERABILITY)",
          "tag:kev",
          "tag:cisa",
          "tag:active-exploitation"
        ],
        "first_seen": "2026-09-02",
        "last_seen": "2026-09-02"
      },
      {
        "category": "Artefact on host",
        "type": "cve",
        "value": "CVE-2026-9586",
        "to_ids": true,
        "disable_correlation": false,
        "comment": "Severity: CRITICAL; Product: Switchvox (Sangoma); Source: CISA KEV Catalog; URL: https://www.cisa.gov/known-exploited-vulnerabilities-catalog; Date: 2026-09-02; Section: IP ADDRESS; Description: Sangoma Switchvox contains a SQL injection vulnerability which allows an unauthenticated remote attacker to execute arbitrary SQL statements against the backend PostgreSQL database using a single craf",
        "distribution": 0,
        "sharing_group_id": 0,
        "Tag": [
          "severity:CRITICAL",
          "section:IP ADDRESS",
          "tag:kev",
          "tag:cisa",
          "tag:active-exploitation"
        ],
        "first_seen": "2026-09-02",
        "last_seen": "2026-09-02"
      },
      {
        "category": "IP address",
        "type": "ip-dst",
        "value": "127.0.0.1",
        "to_ids": true,
        "disable_correlation": false,
        "comment": "Severity: HIGH; Source: Article: Alby Hub Critical Flaw Could Let Attackers Take Over Internet-Exposed Bitcoin Wallets; URL: https://thehackernews.com/2026/09/alby-hub-critical-flaw-could-let.html; Section: IP ADDRESS; Description: C2/infrastructure in threat context: Alby Hub Critical Flaw Could Let Attackers Take Over Internet-Exposed Bitcoin Wa",
        "distribution": 0,
        "sharing_group_id": 0,
        "Tag": [
          "severity:HIGH",
          "section:IP ADDRESS",
          "tag:ip",
          "tag:infrastructure"
        ],
        "first_seen": "",
        "last_seen": ""
      },
      {
        "category": "IP address",
        "type": "ip-dst",
        "value": "127.0.0.1",
        "to_ids": true,
        "disable_correlation": false,
        "comment": "Severity: HIGH; Source: Article: Alby Hub Critical Flaw Could Let Attackers Take Over Internet-Exposed Bitcoin Wallets; URL: https://thehackernews.com/2026/09/alby-hub-critical-flaw-could-let.html; Section: IP ADDRESS; Description: C2/infrastructure in threat context: Alby Hub Critical Flaw Could Let Attackers Take Over Internet-Exposed Bitcoin Wa",
        "distribution": 0,
        "sharing_group_id": 0,
        "Tag": [
          "severity:HIGH",
          "section:IP ADDRESS",
          "tag:ip",
          "tag:infrastructure"
        ],
        "first_seen": "",
        "last_seen": ""
      },
      {
        "category": "IP address",
        "type": "ip-dst",
        "value": "127.0.0.1",
        "to_ids": true,
        "disable_correlation": false,
        "comment": "Severity: HIGH; Source: Article: Alby Hub Critical Flaw Could Let Attackers Take Over Internet-Exposed Bitcoin Wallets; URL: https://thehackernews.com/2026/09/alby-hub-critical-flaw-could-let.html; Section: IP ADDRESS; Description: C2/infrastructure in threat context: Alby Hub Critical Flaw Could Let Attackers Take Over Internet-Exposed Bitcoin Wa",
        "distribution": 0,
        "sharing_group_id": 0,
        "Tag": [
          "severity:HIGH",
          "section:IP ADDRESS",
          "tag:ip",
          "tag:infrastructure"
        ],
        "first_seen": "",
        "last_seen": ""
      },
      {
        "category": "IP address",
        "type": "ip-dst",
        "value": "127.0.0.1",
        "to_ids": true,
        "disable_correlation": false,
        "comment": "Severity: HIGH; Source: Article: Alby Hub Critical Flaw Could Let Attackers Take Over Internet-Exposed Bitcoin Wallets; URL: https://thehackernews.com/2026/09/alby-hub-critical-flaw-could-let.html; Section: IP ADDRESS; Description: C2/infrastructure in threat context: Alby Hub Critical Flaw Could Let Attackers Take Over Internet-Exposed Bitcoin Wa",
        "distribution": 0,
        "sharing_group_id": 0,
        "Tag": [
          "severity:HIGH",
          "section:IP ADDRESS",
          "tag:ip",
          "tag:infrastructure"
        ],
        "first_seen": "",
        "last_seen": ""
      },
      {
        "category": "IP address",
        "type": "ip-dst",
        "value": "12.10.0.0",
        "to_ids": true,
        "disable_correlation": false,
        "comment": "Severity: HIGH; Source: Article: Ivanti Patches Critical Flaws Across Enterprise Security Products; URL: https://www.securityweek.com/ivanti-patches-critical-flaws-across-enterprise-security-products/; Section: IP ADDRESS; Description: C2/infrastructure in threat context: Ivanti Patches Critical Flaws Across Enterprise Security Products",
        "distribution": 0,
        "sharing_group_id": 0,
        "Tag": [
          "severity:HIGH",
          "section:IP ADDRESS",
          "tag:ip",
          "tag:infrastructure"
        ],
        "first_seen": "",
        "last_seen": ""
      },
      {
        "category": "IP address",
        "type": "ip-dst",
        "value": "12.9.0.2",
        "to_ids": true,
        "disable_correlation": false,
        "comment": "Severity: HIGH; Source: Article: Ivanti Patches Critical Flaws Across Enterprise Security Products; URL: https://www.securityweek.com/ivanti-patches-critical-flaws-across-enterprise-security-products/; Section: IP ADDRESS; Description: C2/infrastructure in threat context: Ivanti Patches Critical Flaws Across Enterprise Security Products",
        "distribution": 0,
        "sharing_group_id": 0,
        "Tag": [
          "severity:HIGH",
          "section:IP ADDRESS",
          "tag:ip",
          "tag:infrastructure"
        ],
        "first_seen": "",
        "last_seen": ""
      },
      {
        "category": "IP address",
        "type": "ip-dst",
        "value": "12.8.0.4",
        "to_ids": true,
        "disable_correlation": false,
        "comment": "Severity: HIGH; Source: Article: Ivanti Patches Critical Flaws Across Enterprise Security Products; URL: https://www.securityweek.com/ivanti-patches-critical-flaws-across-enterprise-security-products/; Section: IP ADDRESS; Description: C2/infrastructure in threat context: Ivanti Patches Critical Flaws Across Enterprise Security Products",
        "distribution": 0,
        "sharing_group_id": 0,
        "Tag": [
          "severity:HIGH",
          "section:IP ADDRESS",
          "tag:ip",
          "tag:infrastructure"
        ],
        "first_seen": "",
        "last_seen": ""
      },
      {
        "category": "IP address",
        "type": "ip-dst",
        "value": "12.10.0.0",
        "to_ids": true,
        "disable_correlation": false,
        "comment": "Severity: HIGH; Source: Article: Ivanti Patches Critical Flaws Across Enterprise Security Products; URL: https://www.securityweek.com/ivanti-patches-critical-flaws-across-enterprise-security-products/; Section: IP ADDRESS; Description: C2/infrastructure in threat context: Ivanti Patches Critical Flaws Across Enterprise Security Products",
        "distribution": 0,
        "sharing_group_id": 0,
        "Tag": [
          "severity:HIGH",
          "section:IP ADDRESS",
          "tag:ip",
          "tag:infrastructure"
        ],
        "first_seen": "",
        "last_seen": ""
      },
      {
        "category": "IP address",
        "type": "ip-dst",
        "value": "12.9.0.2",
        "to_ids": true,
        "disable_correlation": false,
        "comment": "Severity: HIGH; Source: Article: Ivanti Patches Critical Flaws Across Enterprise Security Products; URL: https://www.securityweek.com/ivanti-patches-critical-flaws-across-enterprise-security-products/; Section: IP ADDRESS; Description: C2/infrastructure in threat context: Ivanti Patches Critical Flaws Across Enterprise Security Products",
        "distribution": 0,
        "sharing_group_id": 0,
        "Tag": [
          "severity:HIGH",
          "section:IP ADDRESS",
          "tag:ip",
          "tag:infrastructure"
        ],
        "first_seen": "",
        "last_seen": ""
      },
      {
        "category": "IP address",
        "type": "ip-dst",
        "value": "12.8.0.4",
        "to_ids": true,
        "disable_correlation": false,
        "comment": "Severity: HIGH; Source: Article: Ivanti Patches Critical Flaws Across Enterprise Security Products; URL: https://www.securityweek.com/ivanti-patches-critical-flaws-across-enterprise-security-products/; Section: IP ADDRESS; Description: C2/infrastructure in threat context: Ivanti Patches Critical Flaws Across Enterprise Security Products",
        "distribution": 0,
        "sharing_group_id": 0,
        "Tag": [
          "severity:HIGH",
          "section:IP ADDRESS",
          "tag:ip",
          "tag:infrastructure"
        ],
        "first_seen": "",
        "last_seen": ""
      },
      {
        "category": "IP address",
        "type": "ip-dst",
        "value": "12.10.0.0",
        "to_ids": true,
        "disable_correlation": false,
        "comment": "Severity: HIGH; Source: Article: Ivanti Patches Critical Flaws Across Enterprise Security Products; URL: https://www.securityweek.com/ivanti-patches-critical-flaws-across-enterprise-security-products/; Section: IP ADDRESS; Description: C2/infrastructure in threat context: Ivanti Patches Critical Flaws Across Enterprise Security Products",
        "distribution": 0,
        "sharing_group_id": 0,
        "Tag": [
          "severity:HIGH",
          "section:IP ADDRESS",
          "tag:ip",
          "tag:infrastructure"
        ],
        "first_seen": "",
        "last_seen": ""
      },
      {
        "category": "IP address",
        "type": "ip-dst",
        "value": "12.9.0.2",
        "to_ids": true,
        "disable_correlation": false,
        "comment": "Severity: HIGH; Source: Article: Ivanti Patches Critical Flaws Across Enterprise Security Products; URL: https://www.securityweek.com/ivanti-patches-critical-flaws-across-enterprise-security-products/; Section: IP ADDRESS; Description: C2/infrastructure in threat context: Ivanti Patches Critical Flaws Across Enterprise Security Products",
        "distribution": 0,
        "sharing_group_id": 0,
        "Tag": [
          "severity:HIGH",
          "section:IP ADDRESS",
          "tag:ip",
          "tag:infrastructure"
        ],
        "first_seen": "",
        "last_seen": ""
      },
      {
        "category": "IP address",
        "type": "ip-dst",
        "value": "12.8.0.4",
        "to_ids": true,
        "disable_correlation": false,
        "comment": "Severity: HIGH; Source: Article: Ivanti Patches Critical Flaws Across Enterprise Security Products; URL: https://www.securityweek.com/ivanti-patches-critical-flaws-across-enterprise-security-products/; Section: IP ADDRESS; Description: C2/infrastructure in threat context: Ivanti Patches Critical Flaws Across Enterprise Security Products",
        "distribution": 0,
        "sharing_group_id": 0,
        "Tag": [
          "severity:HIGH",
          "section:IP ADDRESS",
          "tag:ip",
          "tag:infrastructure"
        ],
        "first_seen": "",
        "last_seen": ""
      },
      {
        "category": "IP address",
        "type": "ip-dst",
        "value": "12.10.0.0",
        "to_ids": true,
        "disable_correlation": false,
        "comment": "Severity: HIGH; Source: Article: Ivanti Patches Critical Flaws Across Enterprise Security Products; URL: https://www.securityweek.com/ivanti-patches-critical-flaws-across-enterprise-security-products/; Section: IP ADDRESS; Description: C2/infrastructure in threat context: Ivanti Patches Critical Flaws Across Enterprise Security Products",
        "distribution": 0,
        "sharing_group_id": 0,
        "Tag": [
          "severity:HIGH",
          "section:IP ADDRESS",
          "tag:ip",
          "tag:infrastructure"
        ],
        "first_seen": "",
        "last_seen": ""
      },
      {
        "category": "IP address",
        "type": "ip-dst",
        "value": "12.9.0.2",
        "to_ids": true,
        "disable_correlation": false,
        "comment": "Severity: HIGH; Source: Article: Ivanti Patches Critical Flaws Across Enterprise Security Products; URL: https://www.securityweek.com/ivanti-patches-critical-flaws-across-enterprise-security-products/; Section: IP ADDRESS; Description: C2/infrastructure in threat context: Ivanti Patches Critical Flaws Across Enterprise Security Products",
        "distribution": 0,
        "sharing_group_id": 0,
        "Tag": [
          "severity:HIGH",
          "section:IP ADDRESS",
          "tag:ip",
          "tag:infrastructure"
        ],
        "first_seen": "",
        "last_seen": ""
      },
      {
        "category": "IP address",
        "type": "ip-dst",
        "value": "12.8.0.4",
        "to_ids": true,
        "disable_correlation": false,
        "comment": "Severity: HIGH; Source: Article: Ivanti Patches Critical Flaws Across Enterprise Security Products; URL: https://www.securityweek.com/ivanti-patches-critical-flaws-across-enterprise-security-products/; Section: PHISHING URL; Description: C2/infrastructure in threat context: Ivanti Patches Critical Flaws Across Enterprise Security Products",
        "distribution": 0,
        "sharing_group_id": 0,
        "Tag": [
          "severity:HIGH",
          "section:PHISHING URL",
          "tag:ip",
          "tag:infrastructure"
        ],
        "first_seen": "",
        "last_seen": ""
      },
      {
        "category": "Other",
        "type": "other",
        "value": "https://www.facebooklogin21.blogspot.com/",
        "to_ids": true,
        "disable_correlation": false,
        "comment": "Severity: CRITICAL; Source: OpenPhish; URL: https://www.facebooklogin21.blogspot.com/; Section: PHISHING URL; Description: Active phishing URL: https://www.facebooklogin21.blogspot.com/",
        "distribution": 0,
        "sharing_group_id": 0,
        "Tag": [
          "severity:CRITICAL",
          "section:PHISHING URL",
          "tag:phishing",
          "tag:openphish"
        ],
        "first_seen": "",
        "last_seen": ""
      },
      {
        "category": "Other",
        "type": "other",
        "value": "https://ledgrr-live-io-faq.pages.dev/",
        "to_ids": true,
        "disable_correlation": false,
        "comment": "Severity: CRITICAL; Source: OpenPhish; URL: https://ledgrr-live-io-faq.pages.dev/; Section: PHISHING URL; Description: Active phishing URL: https://ledgrr-live-io-faq.pages.dev/",
        "distribution": 0,
        "sharing_group_id": 0,
        "Tag": [
          "severity:CRITICAL",
          "section:PHISHING URL",
          "tag:phishing",
          "tag:openphish"
        ],
        "first_seen": "",
        "last_seen": ""
      },
      {
        "category": "Other",
        "type": "other",
        "value": "http://ledgrr--live.pages.dev/",
        "to_ids": true,
        "disable_correlation": false,
        "comment": "Severity: CRITICAL; Source: OpenPhish; URL: http://ledgrr--live.pages.dev/; Section: PHISHING URL; Description: Active phishing URL: http://ledgrr--live.pages.dev/",
        "distribution": 0,
        "sharing_group_id": 0,
        "Tag": [
          "severity:CRITICAL",
          "section:PHISHING URL",
          "tag:phishing",
          "tag:openphish"
        ],
        "first_seen": "",
        "last_seen": ""
      },
      {
        "category": "Other",
        "type": "other",
        "value": "http://ledgrr-livv-app.pages.dev/",
        "to_ids": true,
        "disable_correlation": false,
        "comment": "Severity: CRITICAL; Source: OpenPhish; URL: http://ledgrr-livv-app.pages.dev/; Section: PHISHING URL; Description: Active phishing URL: http://ledgrr-livv-app.pages.dev/",
        "distribution": 0,
        "sharing_group_id": 0,
        "Tag": [
          "severity:CRITICAL",
          "section:PHISHING URL",
          "tag:phishing",
          "tag:openphish"
        ],
        "first_seen": "",
        "last_seen": ""
      },
      {
        "category": "Other",
        "type": "other",
        "value": "https://ledgrr-iolive.pages.dev/",
        "to_ids": true,
        "disable_correlation": false,
        "comment": "Severity: CRITICAL; Source: OpenPhish; URL: https://ledgrr-iolive.pages.dev/; Section: PHISHING URL; Description: Active phishing URL: https://ledgrr-iolive.pages.dev/",
        "distribution": 0,
        "sharing_group_id": 0,
        "Tag": [
          "severity:CRITICAL",
          "section:PHISHING URL",
          "tag:phishing",
          "tag:openphish"
        ],
        "first_seen": "",
        "last_seen": ""
      },
      {
        "category": "Other",
        "type": "other",
        "value": "https://ledgrlive-app-guide.pages.dev/",
        "to_ids": true,
        "disable_correlation": false,
        "comment": "Severity: CRITICAL; Source: OpenPhish; URL: https://ledgrlive-app-guide.pages.dev/; Section: PHISHING URL; Description: Active phishing URL: https://ledgrlive-app-guide.pages.dev/",
        "distribution": 0,
        "sharing_group_id": 0,
        "Tag": [
          "severity:CRITICAL",
          "section:PHISHING URL",
          "tag:phishing",
          "tag:openphish"
        ],
        "first_seen": "",
        "last_seen": ""
      },
      {
        "category": "Other",
        "type": "other",
        "value": "http://ledgrr-live-run.pages.dev/",
        "to_ids": true,
        "disable_correlation": false,
        "comment": "Severity: CRITICAL; Source: OpenPhish; URL: http://ledgrr-live-run.pages.dev/; Section: PHISHING URL; Description: Active phishing URL: http://ledgrr-live-run.pages.dev/",
        "distribution": 0,
        "sharing_group_id": 0,
        "Tag": [
          "severity:CRITICAL",
          "section:PHISHING URL",
          "tag:phishing",
          "tag:openphish"
        ],
        "first_seen": "",
        "last_seen": ""
      },
      {
        "category": "Other",
        "type": "other",
        "value": "http://ledgr-livdesktp.pages.dev/",
        "to_ids": true,
        "disable_correlation": false,
        "comment": "Severity: CRITICAL; Source: OpenPhish; URL: http://ledgr-livdesktp.pages.dev/; Section: PHISHING URL; Description: Active phishing URL: http://ledgr-livdesktp.pages.dev/",
        "distribution": 0,
        "sharing_group_id": 0,
        "Tag": [
          "severity:CRITICAL",
          "section:PHISHING URL",
          "tag:phishing",
          "tag:openphish"
        ],
        "first_seen": "",
        "last_seen": ""
      },
      {
        "category": "Other",
        "type": "other",
        "value": "https://sso-uphold--en-cdn.webflow.io/",
        "to_ids": true,
        "disable_correlation": false,
        "comment": "Severity: CRITICAL; Source: OpenPhish; URL: https://sso-uphold--en-cdn.webflow.io/; Section: DOMAIN; Description: Active phishing URL: https://sso-uphold--en-cdn.webflow.io/",
        "distribution": 0,
        "sharing_group_id": 0,
        "Tag": [
          "severity:CRITICAL",
          "section:DOMAIN",
          "tag:phishing",
          "tag:openphish"
        ],
        "first_seen": "",
        "last_seen": ""
      },
      {
        "category": "Domain and name",
        "type": "domain",
        "value": "facebooklogin21.blogspot",
        "to_ids": true,
        "disable_correlation": false,
        "comment": "Severity: CRITICAL; Source: OpenPhish; URL: https://www.facebooklogin21.blogspot.com/; Section: DOMAIN; Description: Phishing domain: facebooklogin21.blogspot",
        "distribution": 0,
        "sharing_group_id": 0,
        "Tag": [
          "severity:CRITICAL",
          "section:DOMAIN",
          "tag:phishing",
          "tag:openphish",
          "tag:domain"
        ],
        "first_seen": "",
        "last_seen": ""
      },
      {
        "category": "Domain and name",
        "type": "domain",
        "value": "ledgrr-live-io-faq.pages",
        "to_ids": true,
        "disable_correlation": false,
        "comment": "Severity: CRITICAL; Source: OpenPhish; URL: https://ledgrr-live-io-faq.pages.dev/; Section: DOMAIN; Description: Phishing domain: ledgrr-live-io-faq.pages",
        "distribution": 0,
        "sharing_group_id": 0,
        "Tag": [
          "severity:CRITICAL",
          "section:DOMAIN",
          "tag:phishing",
          "tag:openphish",
          "tag:domain"
        ],
        "first_seen": "",
        "last_seen": ""
      },
      {
        "category": "Domain and name",
        "type": "domain",
        "value": "ledgrr--live.pages",
        "to_ids": true,
        "disable_correlation": false,
        "comment": "Severity: CRITICAL; Source: OpenPhish; URL: http://ledgrr--live.pages.dev/; Section: DOMAIN; Description: Phishing domain: ledgrr--live.pages",
        "distribution": 0,
        "sharing_group_id": 0,
        "Tag": [
          "severity:CRITICAL",
          "section:DOMAIN",
          "tag:phishing",
          "tag:openphish",
          "tag:domain"
        ],
        "first_seen": "",
        "last_seen": ""
      },
      {
        "category": "Domain and name",
        "type": "domain",
        "value": "ledgrr-livv-app.pages",
        "to_ids": true,
        "disable_correlation": false,
        "comment": "Severity: CRITICAL; Source: OpenPhish; URL: http://ledgrr-livv-app.pages.dev/; Section: DOMAIN; Description: Phishing domain: ledgrr-livv-app.pages",
        "distribution": 0,
        "sharing_group_id": 0,
        "Tag": [
          "severity:CRITICAL",
          "section:DOMAIN",
          "tag:phishing",
          "tag:openphish",
          "tag:domain"
        ],
        "first_seen": "",
        "last_seen": ""
      },
      {
        "category": "Domain and name",
        "type": "domain",
        "value": "ledgrr-iolive.pages",
        "to_ids": true,
        "disable_correlation": false,
        "comment": "Severity: CRITICAL; Source: OpenPhish; URL: https://ledgrr-iolive.pages.dev/; Section: DOMAIN; Description: Phishing domain: ledgrr-iolive.pages",
        "distribution": 0,
        "sharing_group_id": 0,
        "Tag": [
          "severity:CRITICAL",
          "section:DOMAIN",
          "tag:phishing",
          "tag:openphish",
          "tag:domain"
        ],
        "first_seen": "",
        "last_seen": ""
      },
      {
        "category": "Domain and name",
        "type": "domain",
        "value": "ledgrlive-app-guide.pages",
        "to_ids": true,
        "disable_correlation": false,
        "comment": "Severity: CRITICAL; Source: OpenPhish; URL: https://ledgrlive-app-guide.pages.dev/; Section: DOMAIN; Description: Phishing domain: ledgrlive-app-guide.pages",
        "distribution": 0,
        "sharing_group_id": 0,
        "Tag": [
          "severity:CRITICAL",
          "section:DOMAIN",
          "tag:phishing",
          "tag:openphish",
          "tag:domain"
        ],
        "first_seen": "",
        "last_seen": ""
      },
      {
        "category": "Domain and name",
        "type": "domain",
        "value": "ledgrr-live-run.pages",
        "to_ids": true,
        "disable_correlation": false,
        "comment": "Severity: CRITICAL; Source: OpenPhish; URL: http://ledgrr-live-run.pages.dev/; Section: DOMAIN; Description: Phishing domain: ledgrr-live-run.pages",
        "distribution": 0,
        "sharing_group_id": 0,
        "Tag": [
          "severity:CRITICAL",
          "section:DOMAIN",
          "tag:phishing",
          "tag:openphish",
          "tag:domain"
        ],
        "first_seen": "",
        "last_seen": ""
      },
      {
        "category": "Domain and name",
        "type": "domain",
        "value": "ledgr-livdesktp.pages",
        "to_ids": true,
        "disable_correlation": false,
        "comment": "Severity: CRITICAL; Source: OpenPhish; URL: http://ledgr-livdesktp.pages.dev/; Section: DOMAIN; Description: Phishing domain: ledgr-livdesktp.pages",
        "distribution": 0,
        "sharing_group_id": 0,
        "Tag": [
          "severity:CRITICAL",
          "section:DOMAIN",
          "tag:phishing",
          "tag:openphish",
          "tag:domain"
        ],
        "first_seen": "",
        "last_seen": ""
      },
      {
        "category": "Domain and name",
        "type": "domain",
        "value": "sso-uphold--en-cdn.webflow",
        "to_ids": true,
        "disable_correlation": false,
        "comment": "Severity: CRITICAL; Source: OpenPhish; URL: https://sso-uphold--en-cdn.webflow.io/; Section: DOMAIN; Description: Phishing domain: sso-uphold--en-cdn.webflow",
        "distribution": 0,
        "sharing_group_id": 0,
        "Tag": [
          "severity:CRITICAL",
          "section:DOMAIN",
          "tag:phishing",
          "tag:openphish",
          "tag:domain"
        ],
        "first_seen": "",
        "last_seen": ""
      }
    ]
  }
}