{ "intelligence": { "actors": [], "counts": { "actors": 0, "associated_entity_contexts": 0, "deduplicated_iocs": 70, "direct_entities": 141, "direct_relationships": 70, "invalid_iocs": 0, "iocs": 70, "mentioned": 1, "mitre_associated": 0, "mitre_direct": 0, "targets": 0, "techniques": 0, "unsupported_indicators": 0, "vulnerabilities": 0 }, "coverage": { "associated_repertoire_is_incident_evidence": false, "attribution_policy": "explicit-public-relationships-only", "descriptions_publicly_exported": false, "excluded_context_objects": 0, "excluded_graph_objects": 0, "graph_complete": true, "graph_objects": 141, "graph_relationships": 70, "mitre_context_complete": true, "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "status_as_of": "2026-10-08T07:52:01+00:00", "table_preview_limit": 20 }, "direct_entities": [ { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:26:05.882Z", "updated_at": "2026-10-03T03:26:08.845Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "03524efb-ab4a-4182-b884-226ed4b590ee", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--3011cd0e-1f1a-538e-afa8-2f149d7f3a7a", "type": "DomainName" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.312Z", "created_at": "2026-10-03T03:26:50.595Z", "modified": "2026-10-03T08:11:09.765Z", "updated_at": "2026-10-03T08:11:09.765Z" }, "description_available": false, "entity_type": "Indicator", "id": "05bd3370-3cbe-4a77-8067-15d513e46c57", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--4b44d87b-103f-5249-b298-c220c2461900", "type": "Indicator" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:24:51.523Z", "updated_at": "2026-10-03T03:24:52.505Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "068ef3d3-488d-4cfc-868d-f3e4f9966d4a", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--58176d22-82e5-57d9-8b83-5613157e7a5f", "type": "DomainName" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:25:03.719Z", "updated_at": "2026-10-03T03:25:04.382Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "073dc327-8383-4579-8faf-b25f81d467b2", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--bea760e5-6a6b-52eb-b0d0-20f49f275170", "type": "DomainName" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:25:45.139Z", "updated_at": "2026-10-03T03:25:45.977Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "0851e435-8f42-419e-83d1-890f01adfb12", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--335eefb3-1747-59c1-815e-f995b572607b", "type": "DomainName" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:25:09.483Z", "updated_at": "2026-10-03T03:25:12.982Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "13002b82-07c2-4c61-9313-11fbde4d0a62", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--709ef1af-8e46-54bf-bfd7-7058f7b5870b", "type": "DomainName" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:26:10.988Z", "updated_at": "2026-10-03T03:26:11.660Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "15d3425e-f6e1-43fe-936f-7f4d9fb4ec0b", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--0145732d-e22d-5055-98b4-8408b4883414", "type": "DomainName" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.295Z", "created_at": "2026-10-03T03:26:46.766Z", "modified": "2026-10-03T08:11:03.807Z", "updated_at": "2026-10-03T08:11:03.807Z" }, "description_available": false, "entity_type": "Indicator", "id": "1a4c0239-2521-4cd4-a881-b37251e225a7", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--65929841-cef8-5145-9ae5-dfc97af54364", "type": "Indicator" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:24:44.861Z", "updated_at": "2026-10-03T03:24:46.728Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "1d6c6beb-f570-4d2b-a154-e99f7c296595", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--ae3f2784-6306-5bea-9fca-eaf44d7f0c11", "type": "DomainName" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:26:32.447Z", "updated_at": "2026-10-03T03:26:33.127Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "1fa0f9b1-b85f-42ab-9dca-6149d03af13b", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--2c748ac7-fde6-5285-bffc-ea3edc33d60d", "type": "DomainName" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:26:23.812Z", "updated_at": "2026-10-03T03:26:25.038Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "20feb0af-1d3c-4d64-9837-90d0f91a55a1", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--0af78869-c411-583a-bbdf-71f7a64abced", "type": "DomainName" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:25:57.364Z", "updated_at": "2026-10-03T03:25:58.609Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "2222bc30-8f5c-4a8e-8eff-c9f5c239288c", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--ecd73d2f-c94b-5a5a-8beb-61e5fa332e3a", "type": "DomainName" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.504Z", "created_at": "2026-10-03T03:28:42.539Z", "modified": "2026-10-03T08:15:09.930Z", "updated_at": "2026-10-03T08:15:09.930Z" }, "description_available": false, "entity_type": "Indicator", "id": "259621a7-614d-4c93-9ba2-1c95eb10f2ea", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--f50d3bf5-f477-5c68-8992-13368a7328ad", "type": "Indicator" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.411Z", "created_at": "2026-10-03T03:27:44.225Z", "modified": "2026-10-03T08:11:40.999Z", "updated_at": "2026-10-03T08:11:40.999Z" }, "description_available": false, "entity_type": "Indicator", "id": "29bb1397-47a3-410a-bb7b-ff5debc5d6ad", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--718d697a-8414-5136-aa9e-ae5e3da53a27", "type": "Indicator" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.368Z", "created_at": "2026-10-03T03:27:16.421Z", "modified": "2026-10-03T08:11:27.564Z", "updated_at": "2026-10-03T08:11:27.564Z" }, "description_available": false, "entity_type": "Indicator", "id": "2a0173b5-d40a-4352-824d-5f6443ab34a3", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--f117bff5-c0b4-5112-97f7-554f211d652d", "type": "Indicator" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.277Z", "created_at": "2026-10-03T03:26:41.910Z", "modified": "2026-10-03T08:10:45.122Z", "updated_at": "2026-10-03T08:10:45.122Z" }, "description_available": false, "entity_type": "Indicator", "id": "2f50b47f-ead3-4b67-a576-16a630b3a544", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--19f1b75c-426d-5da6-a5c1-c0073465de00", "type": "Indicator" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.299Z", "created_at": "2026-10-03T03:26:46.858Z", "modified": "2026-10-03T08:11:07.920Z", "updated_at": "2026-10-03T08:11:07.920Z" }, "description_available": false, "entity_type": "Indicator", "id": "30379efc-8c95-4bb0-bdab-fc12f46bc759", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--4ec3eed8-5bcb-567a-b9a7-22f89d680cda", "type": "Indicator" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.316Z", "created_at": "2026-10-03T03:26:51.915Z", "modified": "2026-10-03T08:11:10.234Z", "updated_at": "2026-10-03T08:11:10.234Z" }, "description_available": false, "entity_type": "Indicator", "id": "320213c8-b234-4233-82c3-bfa700049954", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--bf8a025f-f32c-5c07-ae60-bd4c52725243", "type": "Indicator" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.402Z", "created_at": "2026-10-03T03:27:38.476Z", "modified": "2026-10-03T08:11:39.041Z", "updated_at": "2026-10-03T08:11:39.041Z" }, "description_available": false, "entity_type": "Indicator", "id": "33e37228-df8b-4bdf-bd04-a0f8c267ef5e", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--5eb25544-530e-5c42-b4ee-f6300bf1e531", "type": "Indicator" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:24:32.442Z", "updated_at": "2026-10-03T03:24:35.657Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "3425995f-7378-443a-8b7b-9d28ce73705b", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--d1de6bed-0ad1-5077-8581-b0542ae34ab9", "type": "DomainName" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:25:09.479Z", "updated_at": "2026-10-03T03:25:12.981Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "346b81b5-ef8f-42a2-8e7d-622b65debaba", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--7d202d88-ba99-5271-ba7e-f3879063123a", "type": "DomainName" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.375Z", "created_at": "2026-10-03T03:27:21.283Z", "modified": "2026-10-03T08:11:30.609Z", "updated_at": "2026-10-03T08:11:30.609Z" }, "description_available": false, "entity_type": "Indicator", "id": "36b669f0-8c68-4ffb-9958-57343c315d6a", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--6ab027c5-f695-5f57-afc7-736e4264930c", "type": "Indicator" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.281Z", "created_at": "2026-10-03T03:26:41.918Z", "modified": "2026-10-03T08:10:46.907Z", "updated_at": "2026-10-03T08:10:46.907Z" }, "description_available": false, "entity_type": "Indicator", "id": "37e00eab-ea54-4e2c-882c-51a771e1d716", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--ede78262-2be3-5540-8721-0958fa88e89e", "type": "Indicator" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.489Z", "created_at": "2026-10-03T03:28:25.412Z", "modified": "2026-10-03T08:15:04.117Z", "updated_at": "2026-10-03T08:15:04.117Z" }, "description_available": false, "entity_type": "Indicator", "id": "39693732-3a83-4e41-b024-da66fcc970a3", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--1b452372-ccd0-5a73-81c2-244cfe64b2ab", "type": "Indicator" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.508Z", "created_at": "2026-10-03T03:28:42.617Z", "modified": "2026-10-03T08:15:10.529Z", "updated_at": "2026-10-03T08:15:10.529Z" }, "description_available": false, "entity_type": "Indicator", "id": "39f58877-8b78-41b9-80ca-f667033465bc", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--159995f8-6c4c-5e18-8eca-c3c51661438f", "type": "Indicator" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:24:57.836Z", "updated_at": "2026-10-03T03:24:59.146Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "3a69650f-7ad6-43d9-9b06-949fe8e0880b", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--1b21137f-e5c8-5cc0-865a-5bfe1cb116c7", "type": "DomainName" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:25:24.845Z", "updated_at": "2026-10-03T03:25:26.527Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "3ac8260b-1a0a-4894-8b10-2d0b2233e40a", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--8ecd6d37-85eb-5ed1-b3f1-16dfea2f0614", "type": "DomainName" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.266Z", "created_at": "2026-10-03T03:26:38.124Z", "modified": "2026-10-03T08:10:41.488Z", "updated_at": "2026-10-03T08:10:41.488Z" }, "description_available": false, "entity_type": "Indicator", "id": "3ad229cb-0605-4cb2-981e-6c604bd39b6d", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--de1c7846-7c0a-5fdb-abca-732d3a09a69a", "type": "Indicator" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.475Z", "created_at": "2026-10-03T03:28:16.485Z", "modified": "2026-10-03T08:14:53.602Z", "updated_at": "2026-10-03T08:14:53.602Z" }, "description_available": false, "entity_type": "Indicator", "id": "3af275aa-e289-4651-a556-9b877aec837b", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--c3f985d3-7160-53a1-9383-884902bda940", "type": "Indicator" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:26:23.836Z", "updated_at": "2026-10-03T03:26:25.039Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "3dc3f837-e496-4160-8af5-349e0700c6da", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--ea5cebaf-992e-5024-b644-ccebe505432e", "type": "DomainName" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:24:51.537Z", "updated_at": "2026-10-03T03:24:52.505Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "3ee2de33-c8b9-4d81-8387-1692100b04d2", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--2f314524-0b29-5e15-8503-4b966f721079", "type": "DomainName" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:26:32.173Z", "updated_at": "2026-10-03T03:26:33.124Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "4030732c-8306-4feb-be0f-09c6a7165ebc", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--2934010e-85df-54c6-baaa-cecb4d2bc980", "type": "DomainName" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:26:16.593Z", "updated_at": "2026-10-03T03:26:21.419Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "404797a0-18da-4559-a617-cacec5927dc4", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--c4e362a4-d16f-5c21-9e86-37190f9e04d8", "type": "DomainName" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:25:48.854Z", "updated_at": "2026-10-03T03:25:50.921Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "42e5bb2a-33d0-45c8-88cf-fdf52c9ab457", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--bef1d2f3-9cd8-519f-a3f5-a6efb4815f9b", "type": "DomainName" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.438Z", "created_at": "2026-10-03T03:27:58.446Z", "modified": "2026-10-03T08:14:01.810Z", "updated_at": "2026-10-03T08:14:01.810Z" }, "description_available": false, "entity_type": "Indicator", "id": "44164fd9-7fd6-43f3-a16b-72e9813ade1b", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--4d95db67-d7c2-5f8f-8c40-5379164d1d93", "type": "Indicator" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:26:17.704Z", "updated_at": "2026-10-03T03:26:22.082Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "447e090d-c2ee-4bac-b1c2-49173f21d2de", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--5934bb43-c692-5b9a-a978-2d4096a1e44c", "type": "DomainName" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.339Z", "created_at": "2026-10-03T03:27:01.079Z", "modified": "2026-10-03T08:11:16.134Z", "updated_at": "2026-10-03T08:11:16.134Z" }, "description_available": false, "entity_type": "Indicator", "id": "460bccae-4650-4bdc-901d-77587502ad04", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--a97d915f-6286-5991-81c5-c87fb49ff56f", "type": "Indicator" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.433Z", "created_at": "2026-10-03T03:27:58.446Z", "modified": "2026-10-03T08:14:00.877Z", "updated_at": "2026-10-03T08:14:00.877Z" }, "description_available": false, "entity_type": "Indicator", "id": "4672b0b0-92f4-4b43-9d76-20fe767cd7b3", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--2dc88eff-00b5-5cb1-bc9f-7de19410c336", "type": "Indicator" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:25:03.708Z", "updated_at": "2026-10-03T03:25:04.380Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "48138184-f940-4692-b35d-d79dcfbd61f9", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--4b372145-220d-522b-874e-4186018e58bc", "type": "DomainName" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.506Z", "created_at": "2026-10-03T03:28:42.592Z", "modified": "2026-10-03T08:15:09.986Z", "updated_at": "2026-10-03T08:15:09.986Z" }, "description_available": false, "entity_type": "Indicator", "id": "4826f088-d475-4651-9500-03936444f2ce", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--cb6d3d05-49a7-5bfe-a3e5-208d06bc8046", "type": "Indicator" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.388Z", "created_at": "2026-10-03T03:27:31.302Z", "modified": "2026-10-03T08:11:37.274Z", "updated_at": "2026-10-03T08:11:37.274Z" }, "description_available": false, "entity_type": "Indicator", "id": "48a0c2a5-f1b8-4506-adee-45fb22261706", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--7967110d-47ed-53ed-81bc-988f2e17def3", "type": "Indicator" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.349Z", "created_at": "2026-10-03T03:27:05.032Z", "modified": "2026-10-03T08:11:20.906Z", "updated_at": "2026-10-03T08:11:20.906Z" }, "description_available": false, "entity_type": "Indicator", "id": "48a0eb2d-1811-4cca-b986-830b7087cff0", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--3bb4b1aa-1e6b-5292-9232-c440aad0efd0", "type": "Indicator" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:24:45.391Z", "updated_at": "2026-10-03T03:24:46.720Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "4b056dce-9803-4e77-bc66-dbd1e724f8f5", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--818f919e-faa0-508d-a631-f95b17a0aa87", "type": "DomainName" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.429Z", "created_at": "2026-10-03T03:27:50.756Z", "modified": "2026-10-03T03:27:56.060Z", "updated_at": "2026-10-03T03:27:56.060Z" }, "description_available": false, "entity_type": "Indicator", "id": "4b877bea-4d48-4e7e-9350-448a500b0446", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--8d62e6c7-ce4d-5f2d-9a4d-e2a31cfc22c9", "type": "Indicator" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.358Z", "created_at": "2026-10-03T03:27:10.954Z", "modified": "2026-10-03T08:11:24.761Z", "updated_at": "2026-10-03T08:11:24.761Z" }, "description_available": false, "entity_type": "Indicator", "id": "4c931945-9091-46de-8db9-04c9a6c4ed29", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--5f49ef76-69a9-5876-ae57-f9ef8daacc6e", "type": "Indicator" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.354Z", "created_at": "2026-10-03T03:27:07.070Z", "modified": "2026-10-03T08:11:21.737Z", "updated_at": "2026-10-03T08:11:21.737Z" }, "description_available": false, "entity_type": "Indicator", "id": "4ce6366e-cb93-43cd-b4b7-26547923553b", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--55c18f99-65ca-5350-a229-8036ec10964c", "type": "Indicator" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:26:28.303Z", "updated_at": "2026-10-03T03:26:29.391Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "4d8a1940-c452-49e8-9f59-909bdec677a9", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--ad78f8d1-1fba-57e7-9cd3-d4385a6939fe", "type": "DomainName" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:25:53.040Z", "updated_at": "2026-10-03T03:25:54.298Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "5067f256-5692-4701-b670-9b2eaf654685", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--65624288-0252-578e-ab51-d30afbd6a693", "type": "DomainName" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.479Z", "created_at": "2026-10-03T03:28:17.892Z", "modified": "2026-10-03T08:14:54.218Z", "updated_at": "2026-10-03T08:14:54.218Z" }, "description_available": false, "entity_type": "Indicator", "id": "532946b6-08d9-4c34-b8d2-775076cc5c79", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--328d50f9-9203-5946-b877-9fab23069a1a", "type": "Indicator" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:25:39.003Z", "updated_at": "2026-10-03T03:25:41.147Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "54896639-55a3-4111-886e-ba8def475b1b", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--d2b6c424-cbee-5fc6-a8fa-afc3cbe4ca6a", "type": "DomainName" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.491Z", "created_at": "2026-10-03T03:28:26.121Z", "modified": "2026-10-03T08:15:04.938Z", "updated_at": "2026-10-03T08:15:04.938Z" }, "description_available": false, "entity_type": "Indicator", "id": "59825d45-5f02-4f2d-96b9-c519e94792ae", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--2b08102d-8dd1-54a5-b2d2-12596646fe83", "type": "Indicator" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.465Z", "created_at": "2026-10-03T03:28:10.376Z", "modified": "2026-10-03T08:14:49.442Z", "updated_at": "2026-10-03T08:14:49.442Z" }, "description_available": false, "entity_type": "Indicator", "id": "5a0a6544-22d6-45d2-8b8f-4b975f377bf7", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--dfe5d90c-3f87-5c46-b513-c43bc8225ab8", "type": "Indicator" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:26:28.299Z", "updated_at": "2026-10-03T03:26:29.396Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "5aaa3bf0-a27f-4fef-a34a-4ba040b4c394", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--f2bfa20e-1faf-517c-9588-112dec3fa04d", "type": "DomainName" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.487Z", "created_at": "2026-10-03T03:28:22.004Z", "modified": "2026-10-03T08:14:59.460Z", "updated_at": "2026-10-03T08:14:59.460Z" }, "description_available": false, "entity_type": "Indicator", "id": "5b16f4a6-2a67-4f43-82f7-22ee736bda01", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--a277462a-9abe-5ff6-9201-bd15c4671278", "type": "Indicator" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.342Z", "created_at": "2026-10-03T03:27:02.492Z", "modified": "2026-10-03T08:11:18.886Z", "updated_at": "2026-10-03T08:11:18.886Z" }, "description_available": false, "entity_type": "Indicator", "id": "5f259031-ab5a-45b1-9959-210a2784edf7", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--4b2f63af-c905-5d8a-934a-1ab109dca1a5", "type": "Indicator" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.496Z", "created_at": "2026-10-03T03:28:33.799Z", "modified": "2026-10-03T08:15:07.992Z", "updated_at": "2026-10-03T08:15:07.992Z" }, "description_available": false, "entity_type": "Indicator", "id": "5f9b8f9c-92c3-44fe-8e5c-9c29ac064685", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--80769f64-7e06-5120-ae65-97fc0e862186", "type": "Indicator" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:25:17.437Z", "updated_at": "2026-10-03T03:25:19.667Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "6194d4bb-57fe-4729-82f1-b1830543e4d9", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--146311ac-eeba-5200-87b7-3518b4bf1ed2", "type": "DomainName" }, { "__typename": "Sector", "aliases": [ "Financial", "Financial Industry (FI)", "Financial Services", "Financial-Services" ], "attributes": {}, "authorized_members": [], "confidence": 100, "created_by": { "authorized_members": [], "id": "efbfcf33-f10e-4a90-9ed4-e4de602fb038", "is_inferred": false, "name": "Filigran", "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "restrict_access": false, "type": "Organization" }, "dates": { "created": "2023-11-19T00:56:33.391Z", "created_at": "2026-01-18T14:35:07.063Z", "modified": "2026-01-22T20:49:24.280Z", "updated_at": "2026-01-22T20:49:24.280Z" }, "description_available": true, "entity_type": "Sector", "id": "6839ec2a-a1ec-4851-b89f-8923c0d36135", "is_inferred": false, "labels": [], "lang": "en", "name": "Finance", "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "identity--283d4ea0-b6f1-5421-bdab-117a33fdb2b7", "type": "Sector" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:26:32.365Z", "updated_at": "2026-10-03T03:26:33.125Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "6f21215f-ccb9-4997-bdcc-fe23b36f17bd", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--1d9e4366-1433-5136-ba1b-ba99b120e241", "type": "DomainName" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.501Z", "created_at": "2026-10-03T03:28:33.869Z", "modified": "2026-10-03T08:15:05.618Z", "updated_at": "2026-10-03T08:15:05.618Z" }, "description_available": false, "entity_type": "Indicator", "id": "6f37e0fd-18fa-4f52-aa92-2628c3c20397", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--8ada858f-f36c-5b6c-aa3f-e6632bce55d8", "type": "Indicator" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:25:51.379Z", "updated_at": "2026-10-03T03:25:52.622Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "714a5d86-0f98-4add-89c1-5a408f995bf1", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--3217d7ab-e04c-547e-9f10-ded70f9697c3", "type": "DomainName" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:25:17.412Z", "updated_at": "2026-10-03T03:25:19.669Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "71a1f438-8b08-4ad7-9a21-753630ef8791", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--29c8e398-e8d8-577d-a2e0-75b9977a8ee2", "type": "DomainName" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:25:58.911Z", "updated_at": "2026-10-03T03:26:00.045Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "72899ed8-23b7-4180-9093-f6c5ec7ec025", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--b6713b74-0068-56ea-932f-abcd3d0a93cc", "type": "DomainName" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.273Z", "created_at": "2026-10-03T03:26:38.156Z", "modified": "2026-10-03T08:10:44.437Z", "updated_at": "2026-10-03T08:10:44.437Z" }, "description_available": false, "entity_type": "Indicator", "id": "77efc144-29ec-4029-9a24-9bb6b24e2a2e", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--8833f101-ff8d-5807-93f6-47166300e1a7", "type": "Indicator" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:26:16.593Z", "updated_at": "2026-10-03T03:26:20.007Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "7891b84d-af8f-4095-92c5-289117a02b09", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--e43f4c4a-810c-541c-a94d-4dbb126fccf7", "type": "DomainName" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.361Z", "created_at": "2026-10-03T03:27:10.955Z", "modified": "2026-10-03T08:11:23.418Z", "updated_at": "2026-10-03T08:11:23.418Z" }, "description_available": false, "entity_type": "Indicator", "id": "7be97e4b-d09d-48bf-a786-f422af0bf55a", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--f6e2a7b5-86fe-535b-a254-ec5e4d848b69", "type": "Indicator" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:25:09.482Z", "updated_at": "2026-10-03T03:25:12.983Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "7cf42db2-0198-4032-aee9-90d0c46f118e", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--d267b03f-0b0a-56ef-9820-2a4e304d9d9f", "type": "DomainName" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.381Z", "created_at": "2026-10-03T03:27:22.768Z", "modified": "2026-10-03T08:11:32.298Z", "updated_at": "2026-10-03T08:11:32.298Z" }, "description_available": false, "entity_type": "Indicator", "id": "7d700a67-0db5-4db8-8b0b-dba6fbb924b9", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--9aead583-8825-5cac-ac36-329cee072018", "type": "Indicator" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.494Z", "created_at": "2026-10-03T03:28:26.145Z", "modified": "2026-10-03T08:15:02.512Z", "updated_at": "2026-10-03T08:15:02.512Z" }, "description_available": false, "entity_type": "Indicator", "id": "7f131bd6-880b-48a9-8f59-e7b69fbc5f7d", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--df9ced3b-cd5e-5a61-a052-bd7f156886ab", "type": "Indicator" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.372Z", "created_at": "2026-10-03T03:27:16.446Z", "modified": "2026-10-03T08:11:29.675Z", "updated_at": "2026-10-03T08:11:29.675Z" }, "description_available": false, "entity_type": "Indicator", "id": "7faf3ef2-4b72-4c32-85a7-f0afe6c9f672", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--8ee319cc-90c8-5fa8-9ea3-d6a26b820815", "type": "Indicator" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:25:24.885Z", "updated_at": "2026-10-03T03:25:26.532Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "82811954-0eba-4c05-a7e6-0fb2e4b4a9f4", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--11ef9a60-53f9-56ba-85da-1e61b8988b94", "type": "DomainName" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.344Z", "created_at": "2026-10-03T03:27:04.726Z", "modified": "2026-10-03T08:11:19.765Z", "updated_at": "2026-10-03T08:11:19.765Z" }, "description_available": false, "entity_type": "Indicator", "id": "82ee7b85-195b-414b-bde2-5db2c446aabc", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--3e07c1aa-48cd-5b0b-bd4a-bd70bdbfee76", "type": "Indicator" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:25:45.130Z", "updated_at": "2026-10-03T03:25:45.976Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "83d3edda-9a1b-4f75-86c5-a166aac4b298", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--11296a43-2026-51f3-86d4-40009e1da756", "type": "DomainName" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.303Z", "created_at": "2026-10-03T03:26:49.288Z", "modified": "2026-10-03T08:11:08.530Z", "updated_at": "2026-10-03T08:11:08.530Z" }, "description_available": false, "entity_type": "Indicator", "id": "853b59b9-8312-4f6f-9f4e-a2c0e6deb86a", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--268109f5-1f66-564c-8a2b-88660f613c40", "type": "Indicator" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:25:17.412Z", "updated_at": "2026-10-03T03:25:19.666Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "8558f492-9c6a-4a03-86e6-758119c483cf", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--327d5433-841b-53fe-bf0f-26089fd4d6e7", "type": "DomainName" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.333Z", "created_at": "2026-10-03T03:26:57.297Z", "modified": "2026-10-03T08:11:14.713Z", "updated_at": "2026-10-03T08:11:14.713Z" }, "description_available": false, "entity_type": "Indicator", "id": "857a04ed-1f6c-4d16-8229-22f64ef8e036", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--7b370708-d97b-5956-831c-7573ad26a5fe", "type": "Indicator" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.363Z", "created_at": "2026-10-03T03:27:11.342Z", "modified": "2026-10-03T08:11:25.659Z", "updated_at": "2026-10-03T08:11:25.659Z" }, "description_available": false, "entity_type": "Indicator", "id": "85deeea6-da0e-456e-8ca9-f433dadb73c2", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--72e177ec-70bd-5323-a5be-7097127f2f99", "type": "Indicator" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.451Z", "created_at": "2026-10-03T03:28:02.419Z", "modified": "2026-10-03T08:14:04.269Z", "updated_at": "2026-10-03T08:14:04.269Z" }, "description_available": false, "entity_type": "Indicator", "id": "8831740e-51c8-429d-9a94-91279ccf170f", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--22fcb029-5679-5f7e-8518-b803eae984d2", "type": "Indicator" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.471Z", "created_at": "2026-10-03T03:28:12.745Z", "modified": "2026-10-03T08:14:51.709Z", "updated_at": "2026-10-03T08:14:51.709Z" }, "description_available": false, "entity_type": "Indicator", "id": "8a9db52c-6728-4b21-80a1-d25e414a786a", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--cc708c6e-e6e0-5fa2-b9be-455d81576ead", "type": "Indicator" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:24:26.475Z", "updated_at": "2026-10-03T03:24:27.348Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "8c0286b2-f712-4ac3-ad98-babe1426032a", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--a24d8f21-6004-5f26-8461-493e032615d3", "type": "DomainName" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:25:39.007Z", "updated_at": "2026-10-03T03:25:41.149Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "8e4e2a51-6140-48fd-93a5-5f5ac776d076", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--ae1f4627-8741-57a2-b66f-a22ada85a80d", "type": "DomainName" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.378Z", "created_at": "2026-10-03T03:27:22.731Z", "modified": "2026-10-03T08:11:32.883Z", "updated_at": "2026-10-03T08:11:32.883Z" }, "description_available": false, "entity_type": "Indicator", "id": "8ed1332f-365a-46e1-9684-b76c39a7c514", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--45660be2-ae40-569f-afb3-76e817f5356a", "type": "Indicator" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:24:44.860Z", "updated_at": "2026-10-03T03:24:46.722Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "944cc497-65a6-42eb-be7b-1c3693a2613a", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--16f77e19-4363-51bc-b7e7-b9233e175fb3", "type": "DomainName" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:25:24.869Z", "updated_at": "2026-10-03T03:25:26.529Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "956fc18e-a6b9-4d6b-acf4-b0649d4cd014", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--f520af1b-6a18-5f7c-9e34-e07e8cd79692", "type": "DomainName" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:24:40.388Z", "updated_at": "2026-10-03T03:24:40.961Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "957dbc54-2830-41f3-afca-cd1a219f6cc4", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--7f790278-0642-518f-84dc-4b0eef5bc37d", "type": "DomainName" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:26:25.017Z", "updated_at": "2026-10-03T03:26:26.628Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "977c5945-effd-4960-82e4-9b744c6073fb", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--44d6d85e-aada-5103-9a28-6804315b353c", "type": "DomainName" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.447Z", "created_at": "2026-10-03T03:28:01.624Z", "modified": "2026-10-03T08:14:02.934Z", "updated_at": "2026-10-03T08:14:02.934Z" }, "description_available": false, "entity_type": "Indicator", "id": "9b231e95-4b33-4b5b-85a2-f4271e401157", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--b4e572e3-d383-560d-b6c1-19a33b202110", "type": "Indicator" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.499Z", "created_at": "2026-10-03T03:28:33.798Z", "modified": "2026-10-03T08:15:06.913Z", "updated_at": "2026-10-03T08:15:06.913Z" }, "description_available": false, "entity_type": "Indicator", "id": "a1a3a0ec-0edc-430e-9419-c84eac8f24ad", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--59bf4c71-e1a7-539e-9dc9-10f8c46f4867", "type": "Indicator" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.477Z", "created_at": "2026-10-03T03:28:17.893Z", "modified": "2026-10-03T08:14:56.704Z", "updated_at": "2026-10-03T08:14:56.704Z" }, "description_available": false, "entity_type": "Indicator", "id": "a76e86ee-95cc-4885-9153-0290f869c93a", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--756e6bc4-8cb6-5c02-9152-be1a11a62973", "type": "Indicator" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.285Z", "created_at": "2026-10-03T03:26:41.918Z", "modified": "2026-10-03T08:10:46.538Z", "updated_at": "2026-10-03T08:10:46.538Z" }, "description_available": false, "entity_type": "Indicator", "id": "a95a9391-bf64-4cb0-9560-034450478f9b", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--55a34363-8ba1-5f70-81fa-dc907b980bab", "type": "Indicator" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:24:34.798Z", "updated_at": "2026-10-03T03:24:37.798Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "abb8ee98-f4e9-48c9-b960-ab4510be4c2d", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--79e93c82-105b-597c-aa2f-9405bb200ab4", "type": "DomainName" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:25:51.394Z", "updated_at": "2026-10-03T03:25:52.624Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "abbf6bc9-ef05-4dac-a6f3-4aa5afd15df0", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--b48b0ac2-1d1c-5307-9484-408693846bac", "type": "DomainName" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:25:03.693Z", "updated_at": "2026-10-03T03:25:04.383Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "b093b470-0dc6-4644-a6e9-d6e8a8c24de4", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--99c994f5-7417-56c6-b04e-7e9d0219e316", "type": "DomainName" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.290Z", "created_at": "2026-10-03T03:26:46.357Z", "modified": "2026-10-03T08:11:01.620Z", "updated_at": "2026-10-03T08:11:01.620Z" }, "description_available": false, "entity_type": "Indicator", "id": "b47b7c0a-f138-4273-8b5b-7dc8d87a1a2b", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--328490f3-928d-586c-bd75-e06701b62dbf", "type": "Indicator" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.443Z", "created_at": "2026-10-03T03:27:58.426Z", "modified": "2026-10-03T08:14:00.198Z", "updated_at": "2026-10-03T08:14:00.198Z" }, "description_available": false, "entity_type": "Indicator", "id": "b4e6da0e-d5a8-48ec-8088-4a5a4c9e687a", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--921de73c-49a6-539f-8d94-882616cc7092", "type": "Indicator" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:26:10.989Z", "updated_at": "2026-10-03T03:26:11.661Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "b51bf621-f13e-48fa-b14e-ab22b61dc8dc", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--c718fc19-a0de-5162-895a-b249abdd7f42", "type": "DomainName" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.459Z", "created_at": "2026-10-03T03:28:08.269Z", "modified": "2026-10-03T08:14:47.002Z", "updated_at": "2026-10-03T08:14:47.002Z" }, "description_available": false, "entity_type": "Indicator", "id": "b5dd0207-0ab1-485d-995a-2eb79c9fe0e5", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--b8520691-6e8b-5df9-99cc-378a2d69423c", "type": "Indicator" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:26:28.289Z", "updated_at": "2026-10-03T03:26:29.120Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "b937543f-e00f-46f0-8b0f-5f5f02f5c7aa", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--71434636-3366-59f2-8449-fedf94736ffe", "type": "DomainName" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:24:15.500Z", "updated_at": "2026-10-03T03:24:18.862Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "c27c1774-1042-49e1-8f2e-9442d43a05c4", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--3d033e95-c5a1-5b8c-b3ff-60042b7a7672", "type": "DomainName" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:25:32.344Z", "updated_at": "2026-10-03T03:25:33.399Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "c317299f-f552-4a0c-b468-6f00dde1ddcd", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--7fe31050-9f24-50e6-a599-d278b2b61494", "type": "DomainName" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:24:57.832Z", "updated_at": "2026-10-03T03:24:59.144Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "c405ba8e-22d7-44b4-80a9-caad59643217", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--14db3f7f-e1cf-5b46-8612-a05f154299fb", "type": "DomainName" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.425Z", "created_at": "2026-10-03T03:27:50.769Z", "modified": "2026-10-03T08:11:42.726Z", "updated_at": "2026-10-03T08:11:42.726Z" }, "description_available": false, "entity_type": "Indicator", "id": "c6f0ceb1-b1f0-4ece-9041-c00299196af8", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--9a7a94a2-344a-5442-9bf3-c83742498590", "type": "Indicator" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.398Z", "created_at": "2026-10-03T03:27:38.436Z", "modified": "2026-10-03T08:11:38.218Z", "updated_at": "2026-10-03T08:11:38.218Z" }, "description_available": false, "entity_type": "Indicator", "id": "c7629a1b-ba14-4e0e-9b72-fd9202003566", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--0ab94f3f-77dd-5e6a-9aa6-0d4a7af7c30c", "type": "Indicator" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:25:32.329Z", "updated_at": "2026-10-03T03:25:33.400Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "caf2b211-1217-44da-9faa-1eddc03a2d63", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--d596c871-4006-5a0c-be4a-c531b4ab0426", "type": "DomainName" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.308Z", "created_at": "2026-10-03T03:26:50.309Z", "modified": "2026-10-03T08:11:08.754Z", "updated_at": "2026-10-03T08:11:08.754Z" }, "description_available": false, "entity_type": "Indicator", "id": "cb161fbc-ec27-420d-bead-10bb66ee0377", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--e2b32ee0-8e11-5abc-901e-7a078d1d0f41", "type": "Indicator" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:25:43.320Z", "updated_at": "2026-10-03T03:25:45.038Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "cc0ae819-750f-4310-b878-406db6ef225e", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--dda121b3-5fe7-50f7-9403-1c084f482336", "type": "DomainName" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.482Z", "created_at": "2026-10-03T03:28:20.679Z", "modified": "2026-10-03T08:14:57.373Z", "updated_at": "2026-10-03T08:14:57.373Z" }, "description_available": false, "entity_type": "Indicator", "id": "cc59f958-1ed2-400d-bc37-6c8c6dd9c92a", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--0b6dd43d-ff5b-529e-af02-0dff25e85e3f", "type": "Indicator" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:26:13.344Z", "updated_at": "2026-10-03T03:26:15.128Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "cdec3d61-83f9-4ae9-a9b9-42c58ab1d666", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--021776fb-6409-5cc5-8ebc-4a2e2bb52b4c", "type": "DomainName" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:25:39.025Z", "updated_at": "2026-10-03T03:25:40.949Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "ce0eb065-3dad-4148-ad7c-03219c471164", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--c92fdb37-0e7a-5074-a961-7f449c915ee9", "type": "DomainName" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:24:57.841Z", "updated_at": "2026-10-03T03:24:59.143Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "cf0ba14a-7b13-44fd-a9dd-bcc404228e7c", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--07fb6373-fd9d-54d4-9df9-245c4a9d1482", "type": "DomainName" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.468Z", "created_at": "2026-10-03T03:28:12.745Z", "modified": "2026-10-03T08:14:52.122Z", "updated_at": "2026-10-03T08:14:52.122Z" }, "description_available": false, "entity_type": "Indicator", "id": "cf33d6b4-24fa-4c1b-8ab4-6e088581d707", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--2f73b7bf-9dca-56ff-af9f-c120c48c29d5", "type": "Indicator" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.384Z", "created_at": "2026-10-03T03:27:25.449Z", "modified": "2026-10-03T08:11:36.498Z", "updated_at": "2026-10-03T08:11:36.498Z" }, "description_available": false, "entity_type": "Indicator", "id": "cf93f018-aa54-4893-a461-689f98d697e2", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--6a571213-74ec-53ee-ba65-0c9203821ec4", "type": "Indicator" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.457Z", "created_at": "2026-10-03T03:28:07.958Z", "modified": "2026-10-03T08:14:44.663Z", "updated_at": "2026-10-03T08:14:44.663Z" }, "description_available": false, "entity_type": "Indicator", "id": "d0b05918-209b-473c-bff4-0589efae058e", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--9c7f0a4e-dc8e-5790-9cbb-4ab6f5402ee3", "type": "Indicator" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.336Z", "created_at": "2026-10-03T03:26:58.640Z", "modified": "2026-10-03T08:11:15.464Z", "updated_at": "2026-10-03T08:11:15.464Z" }, "description_available": false, "entity_type": "Indicator", "id": "d0c29edc-e50d-4dd2-a1b9-f295e41bb50f", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--68fc18e6-c23f-578f-b3db-ef04a9cdcd3a", "type": "Indicator" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:26:02.753Z", "updated_at": "2026-10-03T03:26:03.676Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "d27bd845-5878-4f5a-99af-a0f78b296771", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--6968d24f-5004-5c7e-9028-8b83b3760bbd", "type": "DomainName" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:24:51.501Z", "updated_at": "2026-10-03T03:24:52.503Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "d472ea37-d74a-48a4-bfa0-2e4ec2aca630", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--a89611bc-7f9f-5f1e-9435-4aeee6ff03cd", "type": "DomainName" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:26:09.214Z", "updated_at": "2026-10-03T03:26:09.826Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "d54e6658-6af1-4c43-86ee-547b6f4f148c", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--c747ed9a-57ee-5e60-a67d-ac770cc27635", "type": "DomainName" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:24:32.451Z", "updated_at": "2026-10-03T03:24:35.655Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "d7f76d09-4596-4c90-9243-f696602e2518", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--ac0f6173-fd89-59da-a5ae-f9e3006f438e", "type": "DomainName" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:26:02.747Z", "updated_at": "2026-10-03T03:26:03.465Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "d85bdd62-a3d3-4033-aec8-fe28a0c698a6", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--8e03a735-9cb3-578c-8039-74a91eaca5ef", "type": "DomainName" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:26:03.670Z", "updated_at": "2026-10-03T03:26:04.356Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "d8b402b5-2d8a-4de0-adbd-124008a744d1", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--43c51a38-673e-5132-b8b6-e7a8d070d773", "type": "DomainName" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:24:40.912Z", "updated_at": "2026-10-03T03:24:42.483Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "da8e8e39-6716-4ded-a5f9-8fecb34df0b7", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--47ce01de-a3ca-5c43-b663-a88a6c8ff34b", "type": "DomainName" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:24:26.484Z", "updated_at": "2026-10-03T03:24:27.343Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "dec882eb-d1df-4090-b4ac-874148672379", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--05e2daf9-e7db-579c-950e-4ac611c73313", "type": "DomainName" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:25:32.328Z", "updated_at": "2026-10-03T03:25:33.402Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "df335467-10f8-4cb5-ab3b-60c2e56ad3e3", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--cb0ffc44-62b2-5a9c-8cce-cce607c2d0ae", "type": "DomainName" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.418Z", "created_at": "2026-10-03T03:27:44.293Z", "modified": "2026-10-03T08:11:42.295Z", "updated_at": "2026-10-03T08:11:42.295Z" }, "description_available": false, "entity_type": "Indicator", "id": "df7da9c8-4dce-4b15-926c-de26d7b9ede4", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--d39d71c0-96f2-5c2b-b455-8d609b773239", "type": "Indicator" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:24:15.511Z", "updated_at": "2026-10-03T03:24:18.865Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "e35884ad-c59a-4357-9fad-7c9165144c9f", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--48d8aacc-0e4b-5de1-a7d7-400abcadef6c", "type": "DomainName" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:26:05.879Z", "updated_at": "2026-10-03T03:26:08.846Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "ea3fce72-4025-4558-a31a-8e34eaf48f00", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--834eb7ae-a504-5932-8c1d-2ccbffb269dc", "type": "DomainName" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.462Z", "created_at": "2026-10-03T03:28:08.268Z", "modified": "2026-10-03T08:14:48.683Z", "updated_at": "2026-10-03T08:14:48.683Z" }, "description_available": false, "entity_type": "Indicator", "id": "ea931519-c22d-449a-aa79-b763e82d3b89", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--4a158291-5602-5fde-bd72-08215e8d0681", "type": "Indicator" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:25:57.370Z", "updated_at": "2026-10-03T03:25:58.612Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "eb84b1d1-6328-4200-9522-217c15d7fbd0", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--c2a83e46-ae77-53d3-a24a-8552f29b4960", "type": "DomainName" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.407Z", "created_at": "2026-10-03T03:27:38.666Z", "modified": "2026-10-03T08:11:39.603Z", "updated_at": "2026-10-03T08:11:39.603Z" }, "description_available": false, "entity_type": "Indicator", "id": "eebd4630-e8fd-4e63-af0b-4a958e2f29ab", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--84955f3f-7e87-5510-8766-78f787256123", "type": "Indicator" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.393Z", "created_at": "2026-10-03T03:27:31.296Z", "modified": "2026-10-03T08:11:35.184Z", "updated_at": "2026-10-03T08:11:35.184Z" }, "description_available": false, "entity_type": "Indicator", "id": "f0a29f96-3d65-497f-b796-5b25e22b88fe", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--b05b45a9-5293-57a5-9c4c-36a6cc1481f6", "type": "Indicator" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.453Z", "created_at": "2026-10-03T03:28:02.419Z", "modified": "2026-10-03T08:14:04.716Z", "updated_at": "2026-10-03T08:14:04.716Z" }, "description_available": false, "entity_type": "Indicator", "id": "f3b9f9c5-25bd-4304-9a7d-a2c5b3672c0a", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--f518c0f2-943e-53f0-a85e-a488ae841d7a", "type": "Indicator" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.416Z", "created_at": "2026-10-03T03:27:44.249Z", "modified": "2026-10-03T08:11:40.373Z", "updated_at": "2026-10-03T08:11:40.373Z" }, "description_available": false, "entity_type": "Indicator", "id": "f41937b0-1100-44a1-9f53-bbc42cb21a9d", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--e5b14dc3-4af7-56a6-aa92-74d725603e94", "type": "Indicator" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:24:27.838Z", "updated_at": "2026-10-03T03:24:30.442Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "f4e37867-1367-4f3d-8fc0-8975bb634caa", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--aa763f20-e8cc-57f1-b79a-9562f11d46f9", "type": "DomainName" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:24:40.383Z", "updated_at": "2026-10-03T03:24:40.963Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "f7c9f84a-e179-428c-ba97-3cd12c043a9b", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--045f6e24-fb24-5442-8484-be37a757d101", "type": "DomainName" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.484Z", "created_at": "2026-10-03T03:28:22.005Z", "modified": "2026-10-03T08:14:58.038Z", "updated_at": "2026-10-03T08:14:58.038Z" }, "description_available": false, "entity_type": "Indicator", "id": "fa6ceeb1-abc7-446b-8dc7-4327c731aac0", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--11e88a95-fcee-5c10-820f-a427db9d78d7", "type": "Indicator" }, { "__typename": "DomainName", "aliases": [], "attributes": {}, "authorized_members": [], "confidence": null, "created_by": null, "dates": { "created_at": "2026-10-03T03:24:22.716Z", "updated_at": "2026-10-03T03:24:25.699Z" }, "description_available": false, "entity_type": "Domain-Name", "id": "fc6ff934-43be-4e2f-8af7-f722643a67ba", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": null, "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "domain-name--15431159-9ef9-54a2-98a1-2215247a4768", "type": "DomainName" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.329Z", "created_at": "2026-10-03T03:26:55.934Z", "modified": "2026-10-03T08:11:11.861Z", "updated_at": "2026-10-03T08:11:11.861Z" }, "description_available": false, "entity_type": "Indicator", "id": "fca95720-5285-48ca-9df1-ab894b93819d", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--c6d934e9-59c8-5020-8645-9c8459f91503", "type": "Indicator" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.365Z", "created_at": "2026-10-03T03:27:16.422Z", "modified": "2026-10-03T08:11:28.158Z", "updated_at": "2026-10-03T08:11:28.158Z" }, "description_available": false, "entity_type": "Indicator", "id": "fccfe04d-44ca-46e3-b14a-57a6efe24346", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--d016f054-a3f6-50d9-8138-5d363ec0fa8d", "type": "Indicator" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.322Z", "created_at": "2026-10-03T03:26:54.822Z", "modified": "2026-10-03T08:11:11.613Z", "updated_at": "2026-10-03T08:11:11.613Z" }, "description_available": false, "entity_type": "Indicator", "id": "fd1e2044-7276-49ed-9522-8d542502d6b1", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--a26447b4-cc31-5dac-b62e-a69a64de4c53", "type": "Indicator" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.270Z", "created_at": "2026-10-03T03:26:38.142Z", "modified": "2026-10-03T08:10:41.087Z", "updated_at": "2026-10-03T08:10:41.087Z" }, "description_available": false, "entity_type": "Indicator", "id": "ffa21391-0979-4e3c-8ac6-62cdac39a4c2", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--8d7dc4c5-697f-5404-bbc4-47b7f85d1753", "type": "Indicator" }, { "__typename": "Indicator", "aliases": [], "attributes": { "pattern_type": "stix", "pattern_version": "2.1", "x_opencti_detection": false, "x_opencti_main_observable_type": "Domain-Name", "x_opencti_score": 50 }, "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.422Z", "created_at": "2026-10-03T03:27:50.756Z", "modified": "2026-10-03T08:11:43.354Z", "updated_at": "2026-10-03T08:11:43.354Z" }, "description_available": false, "entity_type": "Indicator", "id": "ffcdb5ad-f65f-4119-87dd-95c82b6e3a3f", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": null, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "indicator--e385f1f8-87d3-589a-a5d4-a0230e22e06e", "type": "Indicator" } ], "direct_relationships": [ { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.382Z", "created_at": "2026-10-03T03:30:18.395Z", "modified": "2026-10-03T03:30:21.652Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:30:21.652Z" }, "description_available": false, "entity_type": "based-on", "fromId": "7d700a67-0db5-4db8-8b0b-dba6fbb924b9", "from_id": "7d700a67-0db5-4db8-8b0b-dba6fbb924b9", "from_name": null, "from_type": "Indicator", "id": "0cdad8ba-464e-4190-8034-7f47c9878eff", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--84e7ae86-4598-5e46-a1d5-160f75367e58", "toId": "3ac8260b-1a0a-4894-8b10-2d0b2233e40a", "to_id": "3ac8260b-1a0a-4894-8b10-2d0b2233e40a", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.356Z", "created_at": "2026-10-03T03:29:57.399Z", "modified": "2026-10-03T03:30:02.466Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:30:02.466Z" }, "description_available": false, "entity_type": "based-on", "fromId": "4ce6366e-cb93-43cd-b4b7-26547923553b", "from_id": "4ce6366e-cb93-43cd-b4b7-26547923553b", "from_name": null, "from_type": "Indicator", "id": "1100d760-e245-4f06-accd-3ca2e4633240", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--2045a6c6-b855-56a4-a6b5-75e91296e9d0", "toId": "48138184-f940-4692-b35d-d79dcfbd61f9", "to_id": "48138184-f940-4692-b35d-d79dcfbd61f9", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.367Z", "created_at": "2026-10-03T03:30:07.692Z", "modified": "2026-10-03T03:30:12.118Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:30:12.118Z" }, "description_available": false, "entity_type": "based-on", "fromId": "fccfe04d-44ca-46e3-b14a-57a6efe24346", "from_id": "fccfe04d-44ca-46e3-b14a-57a6efe24346", "from_name": null, "from_type": "Indicator", "id": "13c72da4-2e9b-4b18-9b22-204386e8c1e7", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--3fe7770b-b151-5c2c-8247-b430fd552bc2", "toId": "7cf42db2-0198-4032-aee9-90d0c46f118e", "to_id": "7cf42db2-0198-4032-aee9-90d0c46f118e", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.509Z", "created_at": "2026-10-03T03:31:11.452Z", "modified": "2026-10-03T03:31:11.963Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:31:11.963Z" }, "description_available": false, "entity_type": "based-on", "fromId": "39f58877-8b78-41b9-80ca-f667033465bc", "from_id": "39f58877-8b78-41b9-80ca-f667033465bc", "from_name": null, "from_type": "Indicator", "id": "1465eef3-2c8b-4c1b-bedf-37e40cccd5ac", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--819609cb-67e2-52df-aca7-b10e2a98e90a", "toId": "1fa0f9b1-b85f-42ab-9dca-6149d03af13b", "to_id": "1fa0f9b1-b85f-42ab-9dca-6149d03af13b", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.269Z", "created_at": "2026-10-03T03:28:48.666Z", "modified": "2026-10-03T03:28:50.273Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:28:50.273Z" }, "description_available": false, "entity_type": "based-on", "fromId": "3ad229cb-0605-4cb2-981e-6c604bd39b6d", "from_id": "3ad229cb-0605-4cb2-981e-6c604bd39b6d", "from_name": null, "from_type": "Indicator", "id": "15b27e7a-0399-40f3-a820-d8bde847fd8d", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--1cf62b75-e9a2-546d-9379-64239d6f409c", "toId": "c27c1774-1042-49e1-8f2e-9442d43a05c4", "to_id": "c27c1774-1042-49e1-8f2e-9442d43a05c4", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.319Z", "created_at": "2026-10-03T03:29:26.007Z", "modified": "2026-10-03T03:29:29.303Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:29:29.303Z" }, "description_available": false, "entity_type": "based-on", "fromId": "320213c8-b234-4233-82c3-bfa700049954", "from_id": "320213c8-b234-4233-82c3-bfa700049954", "from_name": null, "from_type": "Indicator", "id": "16d1b37f-68eb-4c79-bd94-33ea826af4b5", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--7be5d639-4bc1-50fe-bcc8-ae6f644ad71d", "toId": "1d6c6beb-f570-4d2b-a154-e99f7c296595", "to_id": "1d6c6beb-f570-4d2b-a154-e99f7c296595", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.306Z", "created_at": "2026-10-03T03:29:18.266Z", "modified": "2026-10-03T03:29:22.462Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:29:22.462Z" }, "description_available": false, "entity_type": "based-on", "fromId": "853b59b9-8312-4f6f-9f4e-a2c0e6deb86a", "from_id": "853b59b9-8312-4f6f-9f4e-a2c0e6deb86a", "from_name": null, "from_type": "Indicator", "id": "17647214-6995-4347-a8e6-703524031ced", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--f4ab4e56-82f6-5762-a13e-d0b20dd5137a", "toId": "957dbc54-2830-41f3-afca-cd1a219f6cc4", "to_id": "957dbc54-2830-41f3-afca-cd1a219f6cc4", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.352Z", "created_at": "2026-10-03T03:29:54.809Z", "modified": "2026-10-03T03:29:57.182Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:29:57.182Z" }, "description_available": false, "entity_type": "based-on", "fromId": "48a0eb2d-1811-4cca-b986-830b7087cff0", "from_id": "48a0eb2d-1811-4cca-b986-830b7087cff0", "from_name": null, "from_type": "Indicator", "id": "17ddf5c8-b221-40b3-8842-f37f82d72842", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--c211cb81-f980-5d59-bf62-d413899e32ca", "toId": "cf0ba14a-7b13-44fd-a9dd-bcc404228e7c", "to_id": "cf0ba14a-7b13-44fd-a9dd-bcc404228e7c", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.420Z", "created_at": "2026-10-03T03:30:30.512Z", "modified": "2026-10-03T03:30:32.963Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:30:32.963Z" }, "description_available": false, "entity_type": "based-on", "fromId": "df7da9c8-4dce-4b15-926c-de26d7b9ede4", "from_id": "df7da9c8-4dce-4b15-926c-de26d7b9ede4", "from_name": null, "from_type": "Indicator", "id": "19256f0c-af69-4021-96b8-6888f402c67b", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--ecdc890e-7f69-5b3c-93fd-d06abdd33241", "toId": "cc0ae819-750f-4310-b878-406db6ef225e", "to_id": "cc0ae819-750f-4310-b878-406db6ef225e", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.360Z", "created_at": "2026-10-03T03:30:02.567Z", "modified": "2026-10-03T03:30:06.291Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:30:06.291Z" }, "description_available": false, "entity_type": "based-on", "fromId": "4c931945-9091-46de-8db9-04c9a6c4ed29", "from_id": "4c931945-9091-46de-8db9-04c9a6c4ed29", "from_name": null, "from_type": "Indicator", "id": "1cdee7e4-9b67-4068-ae61-c4c63723b598", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--33fd2865-f25d-5698-8f77-31ba61aa3aae", "toId": "b093b470-0dc6-4644-a6e9-d6e8a8c24de4", "to_id": "b093b470-0dc6-4644-a6e9-d6e8a8c24de4", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.301Z", "created_at": "2026-10-03T03:29:13.536Z", "modified": "2026-10-03T03:29:18.131Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:29:18.131Z" }, "description_available": false, "entity_type": "based-on", "fromId": "30379efc-8c95-4bb0-bdab-fc12f46bc759", "from_id": "30379efc-8c95-4bb0-bdab-fc12f46bc759", "from_name": null, "from_type": "Indicator", "id": "297c9b81-4201-4e85-b4df-160fb80a934d", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--621694ae-4ce8-5b82-b8b7-2df14a7f06ce", "toId": "abb8ee98-f4e9-48c9-b960-ab4510be4c2d", "to_id": "abb8ee98-f4e9-48c9-b960-ab4510be4c2d", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.458Z", "created_at": "2026-10-03T03:30:46.566Z", "modified": "2026-10-03T03:30:48.477Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:30:48.477Z" }, "description_available": false, "entity_type": "based-on", "fromId": "d0b05918-209b-473c-bff4-0589efae058e", "from_id": "d0b05918-209b-473c-bff4-0589efae058e", "from_name": null, "from_type": "Indicator", "id": "322bfb0d-fb1a-422f-8e8c-86cfa07a0873", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--eac83021-0c1f-5ad8-8fe3-f83517c33024", "toId": "d27bd845-5878-4f5a-99af-a0f78b296771", "to_id": "d27bd845-5878-4f5a-99af-a0f78b296771", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.297Z", "created_at": "2026-10-03T03:29:13.541Z", "modified": "2026-10-03T03:29:18.125Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:29:18.125Z" }, "description_available": false, "entity_type": "based-on", "fromId": "1a4c0239-2521-4cd4-a881-b37251e225a7", "from_id": "1a4c0239-2521-4cd4-a881-b37251e225a7", "from_name": null, "from_type": "Indicator", "id": "37460d41-165d-43d7-8752-216ce957e576", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--8f340117-90a9-503d-8f6a-464424e61903", "toId": "d7f76d09-4596-4c90-9243-f696602e2518", "to_id": "d7f76d09-4596-4c90-9243-f696602e2518", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.332Z", "created_at": "2026-10-03T03:29:29.422Z", "modified": "2026-10-03T03:29:35.724Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:29:35.724Z" }, "description_available": false, "entity_type": "based-on", "fromId": "fca95720-5285-48ca-9df1-ab894b93819d", "from_id": "fca95720-5285-48ca-9df1-ab894b93819d", "from_name": null, "from_type": "Indicator", "id": "39dcf98e-4dd5-42a7-a27a-7f908bf4d48c", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--5f9ddf6a-7256-5947-8cdc-ab35434843a8", "toId": "4b056dce-9803-4e77-bc66-dbd1e724f8f5", "to_id": "4b056dce-9803-4e77-bc66-dbd1e724f8f5", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.284Z", "created_at": "2026-10-03T03:29:00.302Z", "modified": "2026-10-03T03:29:07.072Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:29:07.072Z" }, "description_available": false, "entity_type": "based-on", "fromId": "37e00eab-ea54-4e2c-882c-51a771e1d716", "from_id": "37e00eab-ea54-4e2c-882c-51a771e1d716", "from_name": null, "from_type": "Indicator", "id": "3bf8599c-6027-4fcd-81f3-caf4eb98893c", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--a6ff7766-61e3-51d1-90ad-c382fb698ef2", "toId": "dec882eb-d1df-4090-b4ac-874148672379", "to_id": "dec882eb-d1df-4090-b4ac-874148672379", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.405Z", "created_at": "2026-10-03T03:30:23.210Z", "modified": "2026-10-03T03:30:24.535Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:30:24.535Z" }, "description_available": false, "entity_type": "based-on", "fromId": "33e37228-df8b-4bdf-bd04-a0f8c267ef5e", "from_id": "33e37228-df8b-4bdf-bd04-a0f8c267ef5e", "from_name": null, "from_type": "Indicator", "id": "3fac9b29-48e1-4165-850c-c4dcdf8e0438", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--84f5f9d6-05cb-5085-a740-a7374dd05e2b", "toId": "c317299f-f552-4a0c-b468-6f00dde1ddcd", "to_id": "c317299f-f552-4a0c-b468-6f00dde1ddcd", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.493Z", "created_at": "2026-10-03T03:31:03.694Z", "modified": "2026-10-03T03:31:04.204Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:31:04.204Z" }, "description_available": false, "entity_type": "based-on", "fromId": "59825d45-5f02-4f2d-96b9-c519e94792ae", "from_id": "59825d45-5f02-4f2d-96b9-c519e94792ae", "from_name": null, "from_type": "Indicator", "id": "41dee506-26b4-4e23-884c-3ea0fef60685", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--f37620ed-dd53-569f-be4e-3e0b6ca1e18c", "toId": "3dc3f837-e496-4160-8af5-349e0700c6da", "to_id": "3dc3f837-e496-4160-8af5-349e0700c6da", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.478Z", "created_at": "2026-10-03T03:30:57.886Z", "modified": "2026-10-03T03:30:58.943Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:30:58.943Z" }, "description_available": false, "entity_type": "based-on", "fromId": "a76e86ee-95cc-4885-9153-0290f869c93a", "from_id": "a76e86ee-95cc-4885-9153-0290f869c93a", "from_name": null, "from_type": "Indicator", "id": "4907856d-0efc-4eb5-919c-ed5dba0721b5", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--c42b38ae-4dfa-5f42-9116-484bcc91421a", "toId": "15d3425e-f6e1-43fe-936f-7f4d9fb4ec0b", "to_id": "15d3425e-f6e1-43fe-936f-7f4d9fb4ec0b", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.427Z", "created_at": "2026-10-03T03:30:30.505Z", "modified": "2026-10-03T03:30:32.214Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:30:32.214Z" }, "description_available": false, "entity_type": "based-on", "fromId": "c6f0ceb1-b1f0-4ece-9041-c00299196af8", "from_id": "c6f0ceb1-b1f0-4ece-9041-c00299196af8", "from_name": null, "from_type": "Indicator", "id": "4ab88c8c-7b91-4e9a-9aa7-60958cd20fb3", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--83fca3f0-d846-5666-8225-4383b546c5e2", "toId": "0851e435-8f42-419e-83d1-890f01adfb12", "to_id": "0851e435-8f42-419e-83d1-890f01adfb12", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.445Z", "created_at": "2026-10-03T03:30:38.462Z", "modified": "2026-10-03T03:30:40.764Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:30:40.764Z" }, "description_available": false, "entity_type": "based-on", "fromId": "b4e6da0e-d5a8-48ec-8088-4a5a4c9e687a", "from_id": "b4e6da0e-d5a8-48ec-8088-4a5a4c9e687a", "from_name": null, "from_type": "Indicator", "id": "4e3bb6c5-cffd-4f82-9b34-cb1ef935c92d", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--4cd8bfc3-aa20-59f1-bc76-985b0433ad57", "toId": "5067f256-5692-4701-b670-9b2eaf654685", "to_id": "5067f256-5692-4701-b670-9b2eaf654685", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.473Z", "created_at": "2026-10-03T03:30:50.782Z", "modified": "2026-10-03T03:30:51.887Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:30:51.887Z" }, "description_available": false, "entity_type": "based-on", "fromId": "8a9db52c-6728-4b21-80a1-d25e414a786a", "from_id": "8a9db52c-6728-4b21-80a1-d25e414a786a", "from_name": null, "from_type": "Indicator", "id": "518f42cb-ae39-4963-8277-c4abc5ddfcf6", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--dc9a12a9-b8dd-5542-9135-e459b332b735", "toId": "d54e6658-6af1-4c43-86ee-547b6f4f148c", "to_id": "d54e6658-6af1-4c43-86ee-547b6f4f148c", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.483Z", "created_at": "2026-10-03T03:30:59.699Z", "modified": "2026-10-03T03:31:01.818Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:31:01.818Z" }, "description_available": false, "entity_type": "based-on", "fromId": "cc59f958-1ed2-400d-bc37-6c8c6dd9c92a", "from_id": "cc59f958-1ed2-400d-bc37-6c8c6dd9c92a", "from_name": null, "from_type": "Indicator", "id": "522675cd-2fd3-4e1a-ab36-2b3e5c8885e5", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--7ab341f7-8352-54d3-be83-50b157d7693f", "toId": "7891b84d-af8f-4095-92c5-289117a02b09", "to_id": "7891b84d-af8f-4095-92c5-289117a02b09", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.431Z", "created_at": "2026-10-03T03:30:33.514Z", "modified": "2026-10-03T03:30:35.897Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:30:35.897Z" }, "description_available": false, "entity_type": "based-on", "fromId": "4b877bea-4d48-4e7e-9350-448a500b0446", "from_id": "4b877bea-4d48-4e7e-9350-448a500b0446", "from_name": null, "from_type": "Indicator", "id": "53f2d9b1-b29e-46eb-9f08-cb2fe2fad1fa", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--c6f136b3-0d1c-58f5-ba5a-2ec5235af43d", "toId": "42e5bb2a-33d0-45c8-88cf-fdf52c9ab457", "to_id": "42e5bb2a-33d0-45c8-88cf-fdf52c9ab457", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.374Z", "created_at": "2026-10-03T03:30:14.871Z", "modified": "2026-10-03T03:30:15.700Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:30:15.700Z" }, "description_available": false, "entity_type": "based-on", "fromId": "7faf3ef2-4b72-4c32-85a7-f0afe6c9f672", "from_id": "7faf3ef2-4b72-4c32-85a7-f0afe6c9f672", "from_name": null, "from_type": "Indicator", "id": "5af1e46f-d207-4809-876e-33a24b925185", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--d3b2817d-29cc-5f0e-b1bf-926a131501a3", "toId": "71a1f438-8b08-4ad7-9a21-753630ef8791", "to_id": "71a1f438-8b08-4ad7-9a21-753630ef8791", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.449Z", "created_at": "2026-10-03T03:30:40.945Z", "modified": "2026-10-03T03:30:44.878Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:30:44.878Z" }, "description_available": false, "entity_type": "based-on", "fromId": "9b231e95-4b33-4b5b-85a2-f4271e401157", "from_id": "9b231e95-4b33-4b5b-85a2-f4271e401157", "from_name": null, "from_type": "Indicator", "id": "6255ecaa-08c6-4adc-a609-ad431c93e200", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--d9d0e182-2691-5a6a-8777-bf54355f0362", "toId": "2222bc30-8f5c-4a8e-8eff-c9f5c239288c", "to_id": "2222bc30-8f5c-4a8e-8eff-c9f5c239288c", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.391Z", "created_at": "2026-10-03T03:30:18.401Z", "modified": "2026-10-03T03:30:21.653Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:30:21.653Z" }, "description_available": false, "entity_type": "based-on", "fromId": "48a0c2a5-f1b8-4506-adee-45fb22261706", "from_id": "48a0c2a5-f1b8-4506-adee-45fb22261706", "from_name": null, "from_type": "Indicator", "id": "6725d602-60a2-4ed2-ba48-6987dba4c9b1", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--d56ffe20-6665-57c6-a58e-d2300df689ef", "toId": "82811954-0eba-4c05-a7e6-0fb2e4b4a9f4", "to_id": "82811954-0eba-4c05-a7e6-0fb2e4b4a9f4", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.481Z", "created_at": "2026-10-03T03:30:57.881Z", "modified": "2026-10-03T03:30:58.940Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:30:58.940Z" }, "description_available": false, "entity_type": "based-on", "fromId": "532946b6-08d9-4c34-b8d2-775076cc5c79", "from_id": "532946b6-08d9-4c34-b8d2-775076cc5c79", "from_name": null, "from_type": "Indicator", "id": "678f12a2-7ee3-473f-a279-c38d2de2a0e2", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--2192a1b5-3bfa-5995-9ca2-d169eb2775f4", "toId": "cdec3d61-83f9-4ae9-a9b9-42c58ab1d666", "to_id": "cdec3d61-83f9-4ae9-a9b9-42c58ab1d666", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.476Z", "created_at": "2026-10-03T03:30:57.577Z", "modified": "2026-10-03T03:30:58.374Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:30:58.374Z" }, "description_available": false, "entity_type": "based-on", "fromId": "3af275aa-e289-4651-a556-9b877aec837b", "from_id": "3af275aa-e289-4651-a556-9b877aec837b", "from_name": null, "from_type": "Indicator", "id": "6a11a4e2-1458-49c8-80fe-80b8738dcd88", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--7607f5d9-2dda-550b-ae86-bc26c29d69b5", "toId": "b51bf621-f13e-48fa-b14e-ab22b61dc8dc", "to_id": "b51bf621-f13e-48fa-b14e-ab22b61dc8dc", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.467Z", "created_at": "2026-10-03T03:30:50.323Z", "modified": "2026-10-03T03:30:51.000Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:30:51.000Z" }, "description_available": false, "entity_type": "based-on", "fromId": "5a0a6544-22d6-45d2-8b8f-4b975f377bf7", "from_id": "5a0a6544-22d6-45d2-8b8f-4b975f377bf7", "from_name": null, "from_type": "Indicator", "id": "6b4d033b-03f3-4341-8d91-1670fcd9059d", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--f4f95955-9a8d-5eb1-8586-3838d0f2faec", "toId": "ea3fce72-4025-4558-a31a-8e34eaf48f00", "to_id": "ea3fce72-4025-4558-a31a-8e34eaf48f00", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.338Z", "created_at": "2026-10-03T03:29:44.135Z", "modified": "2026-10-03T03:29:49.642Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:29:49.642Z" }, "description_available": false, "entity_type": "based-on", "fromId": "d0c29edc-e50d-4dd2-a1b9-f295e41bb50f", "from_id": "d0c29edc-e50d-4dd2-a1b9-f295e41bb50f", "from_name": null, "from_type": "Indicator", "id": "6c68d589-7421-4fc3-82d7-12d56265c451", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--87cca7ca-4332-5eef-9bce-e2bb3e5c0142", "toId": "068ef3d3-488d-4cfc-868d-f3e4f9966d4a", "to_id": "068ef3d3-488d-4cfc-868d-f3e4f9966d4a", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.505Z", "created_at": "2026-10-03T03:31:09.627Z", "modified": "2026-10-03T03:31:11.159Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:31:11.159Z" }, "description_available": false, "entity_type": "based-on", "fromId": "259621a7-614d-4c93-9ba2-1c95eb10f2ea", "from_id": "259621a7-614d-4c93-9ba2-1c95eb10f2ea", "from_name": null, "from_type": "Indicator", "id": "6dea2fa1-40af-4c15-a2fb-8180572b4942", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--a5cba6a8-ab33-5848-900f-ad28569788db", "toId": "4030732c-8306-4feb-be0f-09c6a7165ebc", "to_id": "4030732c-8306-4feb-be0f-09c6a7165ebc", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.347Z", "created_at": "2026-10-03T03:29:54.157Z", "modified": "2026-10-03T03:29:57.189Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:29:57.189Z" }, "description_available": false, "entity_type": "based-on", "fromId": "82ee7b85-195b-414b-bde2-5db2c446aabc", "from_id": "82ee7b85-195b-414b-bde2-5db2c446aabc", "from_name": null, "from_type": "Indicator", "id": "70a4e4d1-daa0-4aca-91fa-78084b872e4b", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--9c0db988-1594-570e-ab3d-5d5d79648a96", "toId": "c405ba8e-22d7-44b4-80a9-caad59643217", "to_id": "c405ba8e-22d7-44b4-80a9-caad59643217", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.500Z", "created_at": "2026-10-03T03:31:05.407Z", "modified": "2026-10-03T03:31:08.067Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:31:08.067Z" }, "description_available": false, "entity_type": "based-on", "fromId": "a1a3a0ec-0edc-430e-9419-c84eac8f24ad", "from_id": "a1a3a0ec-0edc-430e-9419-c84eac8f24ad", "from_name": null, "from_type": "Indicator", "id": "775baa61-7fff-4b47-81ba-3038814ce26e", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--28a52fbc-619c-539c-a277-9fae90873ec6", "toId": "5aaa3bf0-a27f-4fef-a34a-4ba040b4c394", "to_id": "5aaa3bf0-a27f-4fef-a34a-4ba040b4c394", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.386Z", "created_at": "2026-10-03T03:30:18.395Z", "modified": "2026-10-03T03:30:21.649Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:30:21.649Z" }, "description_available": false, "entity_type": "based-on", "fromId": "cf93f018-aa54-4893-a461-689f98d697e2", "from_id": "cf93f018-aa54-4893-a461-689f98d697e2", "from_name": null, "from_type": "Indicator", "id": "7a9c64dd-1739-499f-b82b-95aa82b8827c", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--f4f9b3e9-586f-5b52-bb4b-ea5581582469", "toId": "956fc18e-a6b9-4d6b-acf4-b0649d4cd014", "to_id": "956fc18e-a6b9-4d6b-acf4-b0649d4cd014", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.279Z", "created_at": "2026-10-03T03:28:55.175Z", "modified": "2026-10-03T03:28:58.368Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:28:58.368Z" }, "description_available": false, "entity_type": "based-on", "fromId": "2f50b47f-ead3-4b67-a576-16a630b3a544", "from_id": "2f50b47f-ead3-4b67-a576-16a630b3a544", "from_name": null, "from_type": "Indicator", "id": "7b34c0ec-0563-4ccd-a26c-ff1cbf50cd22", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--d4c0f044-319c-5bb6-914b-04deeb1f6537", "toId": "8c0286b2-f712-4ac3-ad98-babe1426032a", "to_id": "8c0286b2-f712-4ac3-ad98-babe1426032a", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.455Z", "created_at": "2026-10-03T03:30:44.560Z", "modified": "2026-10-03T03:30:45.913Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:30:45.913Z" }, "description_available": false, "entity_type": "based-on", "fromId": "f3b9f9c5-25bd-4304-9a7d-a2c5b3672c0a", "from_id": "f3b9f9c5-25bd-4304-9a7d-a2c5b3672c0a", "from_name": null, "from_type": "Indicator", "id": "80a1edfb-0907-46ea-a164-2407691363d8", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--2b4f7a83-05ef-5403-8ed1-c48f26559e30", "toId": "72899ed8-23b7-4180-9093-f6c5ec7ec025", "to_id": "72899ed8-23b7-4180-9093-f6c5ec7ec025", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.414Z", "created_at": "2026-10-03T03:30:26.565Z", "modified": "2026-10-03T03:30:29.187Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:30:29.187Z" }, "description_available": false, "entity_type": "based-on", "fromId": "29bb1397-47a3-410a-bb7b-ff5debc5d6ad", "from_id": "29bb1397-47a3-410a-bb7b-ff5debc5d6ad", "from_name": null, "from_type": "Indicator", "id": "82c8c54d-768d-4fe2-be30-5857c40529b3", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--10805ed8-b33b-5ae3-beea-00ab30314ee7", "toId": "ce0eb065-3dad-4148-ad7c-03219c471164", "to_id": "ce0eb065-3dad-4148-ad7c-03219c471164", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.293Z", "created_at": "2026-10-03T03:29:07.169Z", "modified": "2026-10-03T03:29:13.416Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:29:13.416Z" }, "description_available": false, "entity_type": "based-on", "fromId": "b47b7c0a-f138-4273-8b5b-7dc8d87a1a2b", "from_id": "b47b7c0a-f138-4273-8b5b-7dc8d87a1a2b", "from_name": null, "from_type": "Indicator", "id": "836e0079-2322-45de-a8fd-9eb63e22a898", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--6bccd04f-a381-5307-af1e-6b9d07f4123a", "toId": "3425995f-7378-443a-8b7b-9d28ce73705b", "to_id": "3425995f-7378-443a-8b7b-9d28ce73705b", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.335Z", "created_at": "2026-10-03T03:29:36.252Z", "modified": "2026-10-03T03:29:39.618Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:29:39.618Z" }, "description_available": false, "entity_type": "based-on", "fromId": "857a04ed-1f6c-4d16-8229-22f64ef8e036", "from_id": "857a04ed-1f6c-4d16-8229-22f64ef8e036", "from_name": null, "from_type": "Indicator", "id": "84befd15-b0e9-4f18-aeea-dc0b46f86b81", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--02809cfa-e730-5a04-95b3-2f1f78c064fc", "toId": "d472ea37-d74a-48a4-bfa0-2e4ec2aca630", "to_id": "d472ea37-d74a-48a4-bfa0-2e4ec2aca630", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.495Z", "created_at": "2026-10-03T03:31:03.943Z", "modified": "2026-10-03T03:31:04.971Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:31:04.971Z" }, "description_available": false, "entity_type": "based-on", "fromId": "7f131bd6-880b-48a9-8f59-e7b69fbc5f7d", "from_id": "7f131bd6-880b-48a9-8f59-e7b69fbc5f7d", "from_name": null, "from_type": "Indicator", "id": "89358c51-64a9-4b6e-b1e8-63f0f565249f", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--677cb8d0-6d13-5678-9cd4-ce4155bd7c8b", "toId": "977c5945-effd-4960-82e4-9b744c6073fb", "to_id": "977c5945-effd-4960-82e4-9b744c6073fb", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.364Z", "created_at": "2026-10-03T03:30:06.516Z", "modified": "2026-10-03T03:30:09.041Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:30:09.041Z" }, "description_available": false, "entity_type": "based-on", "fromId": "85deeea6-da0e-456e-8ca9-f433dadb73c2", "from_id": "85deeea6-da0e-456e-8ca9-f433dadb73c2", "from_name": null, "from_type": "Indicator", "id": "8f494940-d612-4a1f-ac4d-c4328ce320dc", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--437d04a6-108b-52f1-aa03-0ff2fd7b5309", "toId": "346b81b5-ef8f-42a2-8e7d-622b65debaba", "to_id": "346b81b5-ef8f-42a2-8e7d-622b65debaba", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.507Z", "created_at": "2026-10-03T03:31:10.901Z", "modified": "2026-10-03T03:31:11.538Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:31:11.538Z" }, "description_available": false, "entity_type": "based-on", "fromId": "4826f088-d475-4651-9500-03936444f2ce", "from_id": "4826f088-d475-4651-9500-03936444f2ce", "from_name": null, "from_type": "Indicator", "id": "8f68d20e-a43d-4613-978b-4e2453a61ce5", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--bb8f40eb-4198-5a9a-a26f-9318fe7351dc", "toId": "6f21215f-ccb9-4997-bdcc-fe23b36f17bd", "to_id": "6f21215f-ccb9-4997-bdcc-fe23b36f17bd", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.488Z", "created_at": "2026-10-03T03:31:02.012Z", "modified": "2026-10-03T03:31:02.663Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:31:02.663Z" }, "description_available": false, "entity_type": "based-on", "fromId": "5b16f4a6-2a67-4f43-82f7-22ee736bda01", "from_id": "5b16f4a6-2a67-4f43-82f7-22ee736bda01", "from_name": null, "from_type": "Indicator", "id": "92487179-1d97-4798-b075-09ddf9307440", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--79fac8c1-01b9-5ec6-bbcb-1b4ff7e05dab", "toId": "447e090d-c2ee-4bac-b1c2-49173f21d2de", "to_id": "447e090d-c2ee-4bac-b1c2-49173f21d2de", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.490Z", "created_at": "2026-10-03T03:31:02.772Z", "modified": "2026-10-03T03:31:03.767Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:31:03.767Z" }, "description_available": false, "entity_type": "based-on", "fromId": "39693732-3a83-4e41-b024-da66fcc970a3", "from_id": "39693732-3a83-4e41-b024-da66fcc970a3", "from_name": null, "from_type": "Indicator", "id": "94e2adc2-d7d4-4ef4-84e6-46cfc536890f", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--78e35122-2bd4-56f8-a9b5-d10c22e530c9", "toId": "20feb0af-1d3c-4d64-9837-90d0f91a55a1", "to_id": "20feb0af-1d3c-4d64-9837-90d0f91a55a1", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.498Z", "created_at": "2026-10-03T03:31:05.013Z", "modified": "2026-10-03T03:31:06.025Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:31:06.025Z" }, "description_available": false, "entity_type": "based-on", "fromId": "5f9b8f9c-92c3-44fe-8e5c-9c29ac064685", "from_id": "5f9b8f9c-92c3-44fe-8e5c-9c29ac064685", "from_name": null, "from_type": "Indicator", "id": "96a254c7-0040-4b4a-b4ed-83790c3f8668", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--936bd4f1-3e38-516c-aa10-8f32a573e904", "toId": "b937543f-e00f-46f0-8b0f-5f5f02f5c7aa", "to_id": "b937543f-e00f-46f0-8b0f-5f5f02f5c7aa", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.325Z", "created_at": "2026-10-03T03:29:29.430Z", "modified": "2026-10-03T03:29:35.726Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:29:35.726Z" }, "description_available": false, "entity_type": "based-on", "fromId": "fd1e2044-7276-49ed-9522-8d542502d6b1", "from_id": "fd1e2044-7276-49ed-9522-8d542502d6b1", "from_name": null, "from_type": "Indicator", "id": "9a4642bf-ef33-4db1-9e26-09c4b0651b96", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--d4946e43-d113-5b99-8ce0-c55e288edc63", "toId": "944cc497-65a6-42eb-be7b-1c3693a2613a", "to_id": "944cc497-65a6-42eb-be7b-1c3693a2613a", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.288Z", "created_at": "2026-10-03T03:29:00.311Z", "modified": "2026-10-03T03:29:07.072Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:29:07.072Z" }, "description_available": false, "entity_type": "based-on", "fromId": "a95a9391-bf64-4cb0-9560-034450478f9b", "from_id": "a95a9391-bf64-4cb0-9560-034450478f9b", "from_name": null, "from_type": "Indicator", "id": "9f044a34-573a-4019-ac91-c603ef393e95", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--0443b771-0363-599e-8519-6a0b6202de3f", "toId": "f4e37867-1367-4f3d-8fc0-8975bb634caa", "to_id": "f4e37867-1367-4f3d-8fc0-8975bb634caa", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.436Z", "created_at": "2026-10-03T03:30:36.037Z", "modified": "2026-10-03T03:30:39.681Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:30:39.681Z" }, "description_available": false, "entity_type": "based-on", "fromId": "4672b0b0-92f4-4b43-9d76-20fe767cd7b3", "from_id": "4672b0b0-92f4-4b43-9d76-20fe767cd7b3", "from_name": null, "from_type": "Indicator", "id": "a4c6f2c4-3a90-4d63-82a9-7b0bd8a55d60", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--9d0dd6a5-c4d8-5882-986c-d351d0f5cab4", "toId": "714a5d86-0f98-4add-89c1-5a408f995bf1", "to_id": "714a5d86-0f98-4add-89c1-5a408f995bf1", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.461Z", "created_at": "2026-10-03T03:30:46.802Z", "modified": "2026-10-03T03:30:48.495Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:30:48.495Z" }, "description_available": false, "entity_type": "based-on", "fromId": "b5dd0207-0ab1-485d-995a-2eb79c9fe0e5", "from_id": "b5dd0207-0ab1-485d-995a-2eb79c9fe0e5", "from_name": null, "from_type": "Indicator", "id": "a592ccf3-b15e-494c-8d0e-6ee733f5a51e", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--c35fad4f-6266-59b8-b096-10513af7f181", "toId": "d85bdd62-a3d3-4033-aec8-fe28a0c698a6", "to_id": "d85bdd62-a3d3-4033-aec8-fe28a0c698a6", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.376Z", "created_at": "2026-10-03T03:30:14.865Z", "modified": "2026-10-03T03:30:15.699Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:30:15.699Z" }, "description_available": false, "entity_type": "based-on", "fromId": "36b669f0-8c68-4ffb-9958-57343c315d6a", "from_id": "36b669f0-8c68-4ffb-9958-57343c315d6a", "from_name": null, "from_type": "Indicator", "id": "ab8b10da-d0b6-418c-b40a-88b45a096d25", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--574786ea-1938-5a80-88ad-d962aa4eec4b", "toId": "8558f492-9c6a-4a03-86e6-758119c483cf", "to_id": "8558f492-9c6a-4a03-86e6-758119c483cf", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.310Z", "created_at": "2026-10-03T03:29:22.539Z", "modified": "2026-10-03T03:29:25.932Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:29:25.932Z" }, "description_available": false, "entity_type": "based-on", "fromId": "cb161fbc-ec27-420d-bead-10bb66ee0377", "from_id": "cb161fbc-ec27-420d-bead-10bb66ee0377", "from_name": null, "from_type": "Indicator", "id": "b217b086-f5f6-4007-a994-2f2151601225", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--c3047721-7ecc-5b1b-ac26-40eb6ff49900", "toId": "f7c9f84a-e179-428c-ba97-3cd12c043a9b", "to_id": "f7c9f84a-e179-428c-ba97-3cd12c043a9b", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.417Z", "created_at": "2026-10-03T03:30:26.565Z", "modified": "2026-10-03T03:30:29.188Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:30:29.188Z" }, "description_available": false, "entity_type": "based-on", "fromId": "f41937b0-1100-44a1-9f53-bbc42cb21a9d", "from_id": "f41937b0-1100-44a1-9f53-bbc42cb21a9d", "from_name": null, "from_type": "Indicator", "id": "b66375f5-7f0c-474a-a7cb-32519bdeca81", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--6c988b07-045e-52f5-adf3-89eee2750759", "toId": "54896639-55a3-4111-886e-ba8def475b1b", "to_id": "54896639-55a3-4111-886e-ba8def475b1b", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.470Z", "created_at": "2026-10-03T03:30:50.327Z", "modified": "2026-10-03T03:30:51.001Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:30:51.001Z" }, "description_available": false, "entity_type": "based-on", "fromId": "cf33d6b4-24fa-4c1b-8ab4-6e088581d707", "from_id": "cf33d6b4-24fa-4c1b-8ab4-6e088581d707", "from_name": null, "from_type": "Indicator", "id": "b75273a0-0bc5-416d-aded-40405977d9b1", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--6c8cea59-3691-5389-a562-609bd7ae387e", "toId": "03524efb-ab4a-4182-b884-226ed4b590ee", "to_id": "03524efb-ab4a-4182-b884-226ed4b590ee", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.371Z", "created_at": "2026-10-03T03:30:08.561Z", "modified": "2026-10-03T03:30:12.119Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:30:12.119Z" }, "description_available": false, "entity_type": "based-on", "fromId": "2a0173b5-d40a-4352-824d-5f6443ab34a3", "from_id": "2a0173b5-d40a-4352-824d-5f6443ab34a3", "from_name": null, "from_type": "Indicator", "id": "bc4b4fdd-1893-4327-9089-b72e4fbe150b", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--cc989771-ac9e-594c-92ed-4ffec64862e2", "toId": "13002b82-07c2-4c61-9313-11fbde4d0a62", "to_id": "13002b82-07c2-4c61-9313-11fbde4d0a62", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.379Z", "created_at": "2026-10-03T03:30:14.858Z", "modified": "2026-10-03T03:30:15.697Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:30:15.697Z" }, "description_available": false, "entity_type": "based-on", "fromId": "8ed1332f-365a-46e1-9684-b76c39a7c514", "from_id": "8ed1332f-365a-46e1-9684-b76c39a7c514", "from_name": null, "from_type": "Indicator", "id": "bd8abd31-c096-435b-a6f6-fd0f5ca287b8", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--ea71df6b-bc12-5cec-860b-203fc0f3d569", "toId": "6194d4bb-57fe-4729-82f1-b1830543e4d9", "to_id": "6194d4bb-57fe-4729-82f1-b1830543e4d9", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.503Z", "created_at": "2026-10-03T03:31:07.271Z", "modified": "2026-10-03T03:31:09.933Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:31:09.933Z" }, "description_available": false, "entity_type": "based-on", "fromId": "6f37e0fd-18fa-4f52-aa92-2628c3c20397", "from_id": "6f37e0fd-18fa-4f52-aa92-2628c3c20397", "from_name": null, "from_type": "Indicator", "id": "be830520-0e56-4cd7-acd8-4ae087ce6bd4", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--e5521010-81f3-5334-9c2d-9acb1b92a86f", "toId": "4d8a1940-c452-49e8-9f59-909bdec677a9", "to_id": "4d8a1940-c452-49e8-9f59-909bdec677a9", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.452Z", "created_at": "2026-10-03T03:30:40.952Z", "modified": "2026-10-03T03:30:44.875Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:30:44.875Z" }, "description_available": false, "entity_type": "based-on", "fromId": "8831740e-51c8-429d-9a94-91279ccf170f", "from_id": "8831740e-51c8-429d-9a94-91279ccf170f", "from_name": null, "from_type": "Indicator", "id": "bebc3ee4-cd46-4b8f-bbcc-5f6a76c490c7", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--8fdf33bc-458d-5ce2-921b-766425fa0f9f", "toId": "eb84b1d1-6328-4200-9522-217c15d7fbd0", "to_id": "eb84b1d1-6328-4200-9522-217c15d7fbd0", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.362Z", "created_at": "2026-10-03T03:30:02.567Z", "modified": "2026-10-03T03:30:06.287Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:30:06.287Z" }, "description_available": false, "entity_type": "based-on", "fromId": "7be97e4b-d09d-48bf-a786-f422af0bf55a", "from_id": "7be97e4b-d09d-48bf-a786-f422af0bf55a", "from_name": null, "from_type": "Indicator", "id": "c523a4ca-e8e7-4f20-9356-3218b6c4bf11", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--55358333-3e04-5630-ac84-f70df850eaee", "toId": "073dc327-8383-4579-8faf-b25f81d467b2", "to_id": "073dc327-8383-4579-8faf-b25f81d467b2", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.486Z", "created_at": "2026-10-03T03:31:02.018Z", "modified": "2026-10-03T03:31:02.664Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:31:02.664Z" }, "description_available": false, "entity_type": "based-on", "fromId": "fa6ceeb1-abc7-446b-8dc7-4327c731aac0", "from_id": "fa6ceeb1-abc7-446b-8dc7-4327c731aac0", "from_name": null, "from_type": "Indicator", "id": "ca994409-182b-49c8-99da-d16cfcf220e3", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--78be52a7-ef88-5617-8cb0-7d6c7b8faa47", "toId": "404797a0-18da-4559-a617-cacec5927dc4", "to_id": "404797a0-18da-4559-a617-cacec5927dc4", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.341Z", "created_at": "2026-10-03T03:29:44.148Z", "modified": "2026-10-03T03:29:49.644Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:29:49.644Z" }, "description_available": false, "entity_type": "based-on", "fromId": "460bccae-4650-4bdc-901d-77587502ad04", "from_id": "460bccae-4650-4bdc-901d-77587502ad04", "from_name": null, "from_type": "Indicator", "id": "cb323b9f-33c5-4bb7-9325-824747948419", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--c5e69ab9-335a-57c8-a2e8-17a9bcfa0c91", "toId": "3ee2de33-c8b9-4d81-8387-1692100b04d2", "to_id": "3ee2de33-c8b9-4d81-8387-1692100b04d2", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.275Z", "created_at": "2026-10-03T03:28:53.772Z", "modified": "2026-10-03T03:28:56.765Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:28:56.765Z" }, "description_available": false, "entity_type": "based-on", "fromId": "77efc144-29ec-4029-9a24-9bb6b24e2a2e", "from_id": "77efc144-29ec-4029-9a24-9bb6b24e2a2e", "from_name": null, "from_type": "Indicator", "id": "cbe7aace-4de7-4ab7-9ea4-a17bb22b4e31", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--565dd9f1-9130-5310-b1a4-66ba7b55ffe7", "toId": "fc6ff934-43be-4e2f-8af7-f722643a67ba", "to_id": "fc6ff934-43be-4e2f-8af7-f722643a67ba", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.315Z", "created_at": "2026-10-03T03:29:22.697Z", "modified": "2026-10-03T03:29:25.933Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:29:25.933Z" }, "description_available": false, "entity_type": "based-on", "fromId": "05bd3370-3cbe-4a77-8067-15d513e46c57", "from_id": "05bd3370-3cbe-4a77-8067-15d513e46c57", "from_name": null, "from_type": "Indicator", "id": "d1be9efa-5280-4d1a-8e83-1d69f583caaf", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--9a0e3e3f-2b66-595d-8182-d82933796c4a", "toId": "da8e8e39-6716-4ded-a5f9-8fecb34df0b7", "to_id": "da8e8e39-6716-4ded-a5f9-8fecb34df0b7", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.400Z", "created_at": "2026-10-03T03:30:23.217Z", "modified": "2026-10-03T03:30:24.534Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:30:24.534Z" }, "description_available": false, "entity_type": "based-on", "fromId": "c7629a1b-ba14-4e0e-9b72-fd9202003566", "from_id": "c7629a1b-ba14-4e0e-9b72-fd9202003566", "from_name": null, "from_type": "Indicator", "id": "d8353f58-a7a7-43a7-b1c5-249dea9be76c", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--0010a741-c9bc-5b61-944a-3827e07b4fac", "toId": "df335467-10f8-4cb5-ab3b-60c2e56ad3e3", "to_id": "df335467-10f8-4cb5-ab3b-60c2e56ad3e3", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.409Z", "created_at": "2026-10-03T03:30:26.536Z", "modified": "2026-10-03T03:30:29.183Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:30:29.183Z" }, "description_available": false, "entity_type": "based-on", "fromId": "eebd4630-e8fd-4e63-af0b-4a958e2f29ab", "from_id": "eebd4630-e8fd-4e63-af0b-4a958e2f29ab", "from_name": null, "from_type": "Indicator", "id": "db749abc-b066-4a4a-9960-76a8d1b9f364", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--776d00b0-221b-56aa-afd4-d6f7547cd1c6", "toId": "8e4e2a51-6140-48fd-93a5-5f5ac776d076", "to_id": "8e4e2a51-6140-48fd-93a5-5f5ac776d076", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.271Z", "created_at": "2026-10-03T03:28:53.721Z", "modified": "2026-10-03T03:28:56.763Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:28:56.763Z" }, "description_available": false, "entity_type": "based-on", "fromId": "ffa21391-0979-4e3c-8ac6-62cdac39a4c2", "from_id": "ffa21391-0979-4e3c-8ac6-62cdac39a4c2", "from_name": null, "from_type": "Indicator", "id": "dcd85b30-37d1-49d7-9252-cad02c205fa7", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--441e8a4e-8a14-5fb6-800b-7d4085eef9d7", "toId": "e35884ad-c59a-4357-9fad-7c9165144c9f", "to_id": "e35884ad-c59a-4357-9fad-7c9165144c9f", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.343Z", "created_at": "2026-10-03T03:29:50.016Z", "modified": "2026-10-03T03:29:54.217Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:29:54.217Z" }, "description_available": false, "entity_type": "based-on", "fromId": "5f259031-ab5a-45b1-9959-210a2784edf7", "from_id": "5f259031-ab5a-45b1-9959-210a2784edf7", "from_name": null, "from_type": "Indicator", "id": "e5fb93eb-5d7a-477e-98ea-97952fbc1ee9", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--eaebed25-1e6e-56cb-b0e8-7537487020db", "toId": "3a69650f-7ad6-43d9-9b06-949fe8e0880b", "to_id": "3a69650f-7ad6-43d9-9b06-949fe8e0880b", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.464Z", "created_at": "2026-10-03T03:30:47.938Z", "modified": "2026-10-03T03:30:49.856Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:30:49.856Z" }, "description_available": false, "entity_type": "based-on", "fromId": "ea931519-c22d-449a-aa79-b763e82d3b89", "from_id": "ea931519-c22d-449a-aa79-b763e82d3b89", "from_name": null, "from_type": "Indicator", "id": "e95e0298-56cc-47e7-9889-f46d69b9e625", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--838e49ed-4ef4-55d1-824e-0ea64b8d578f", "toId": "d8b402b5-2d8a-4de0-adbd-124008a744d1", "to_id": "d8b402b5-2d8a-4de0-adbd-124008a744d1", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.396Z", "created_at": "2026-10-03T03:30:23.223Z", "modified": "2026-10-03T03:30:24.537Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:30:24.537Z" }, "description_available": false, "entity_type": "based-on", "fromId": "f0a29f96-3d65-497f-b796-5b25e22b88fe", "from_id": "f0a29f96-3d65-497f-b796-5b25e22b88fe", "from_name": null, "from_type": "Indicator", "id": "ec7f4808-8d0e-455a-a733-e28deae61ab1", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--b6482773-b2c9-5970-8822-07799e7c3234", "toId": "caf2b211-1217-44da-9faa-1eddc03a2d63", "to_id": "caf2b211-1217-44da-9faa-1eddc03a2d63", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.441Z", "created_at": "2026-10-03T03:30:36.048Z", "modified": "2026-10-03T03:30:39.682Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:30:39.682Z" }, "description_available": false, "entity_type": "based-on", "fromId": "44164fd9-7fd6-43f3-a16b-72e9813ade1b", "from_id": "44164fd9-7fd6-43f3-a16b-72e9813ade1b", "from_name": null, "from_type": "Indicator", "id": "f37f7967-7581-4865-a025-29010b0c0ff4", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--52bf390d-97ca-590a-95a9-2faabd16760e", "toId": "abbf6bc9-ef05-4dac-a6f3-4aa5afd15df0", "to_id": "abbf6bc9-ef05-4dac-a6f3-4aa5afd15df0", "to_name": null, "to_type": "DomainName" }, { "__typename": "StixCoreRelationship", "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-03T00:52:08.424Z", "created_at": "2026-10-03T03:30:30.512Z", "modified": "2026-10-03T03:30:32.961Z", "start_time": "1970-01-01T00:00:00.000Z", "stop_time": "5138-11-16T09:46:40.000Z", "updated_at": "2026-10-03T03:30:32.961Z" }, "description_available": false, "entity_type": "based-on", "fromId": "ffcdb5ad-f65f-4119-87dd-95c82b6e3a3f", "from_id": "ffcdb5ad-f65f-4119-87dd-95c82b6e3a3f", "from_name": null, "from_type": "Indicator", "id": "f40ca727-1474-4f58-98fa-0e8357716f89", "is_inferred": false, "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "references": [], "relationship_type": "based-on", "restrict_access": false, "revoked": false, "scope": "report", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "standard_id": "relationship--caf14153-c643-5e69-bdb4-a0bd6af006dd", "toId": "83d3edda-9a1b-4f75-86c5-a166aac4b298", "to_id": "83d3edda-9a1b-4f75-86c5-a166aac4b298", "to_name": null, "to_type": "DomainName" } ], "iocs": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemufl06qs0r4o[.]xyz", "description_available": false, "object_id": "fccfe04d-44ca-46e3-b14a-57a6efe24346", "object_ids": [ "7cf42db2-0198-4032-aee9-90d0c46f118e", "fccfe04d-44ca-46e3-b14a-57a6efe24346" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "fccfe04d-44ca-46e3-b14a-57a6efe24346", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemufl06qs0r4o.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "7cf42db2-0198-4032-aee9-90d0c46f118e", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemufl06qs0r4o.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemufl06qs0r4o.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemui6m6bbj1bd[.]xyz", "description_available": false, "object_id": "2a0173b5-d40a-4352-824d-5f6443ab34a3", "object_ids": [ "13002b82-07c2-4c61-9313-11fbde4d0a62", "2a0173b5-d40a-4352-824d-5f6443ab34a3" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "2a0173b5-d40a-4352-824d-5f6443ab34a3", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemui6m6bbj1bd.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "13002b82-07c2-4c61-9313-11fbde4d0a62", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemui6m6bbj1bd.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemui6m6bbj1bd.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemui8go6g99bb[.]xyz", "description_available": false, "object_id": "7faf3ef2-4b72-4c32-85a7-f0afe6c9f672", "object_ids": [ "71a1f438-8b08-4ad7-9a21-753630ef8791", "7faf3ef2-4b72-4c32-85a7-f0afe6c9f672" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "7faf3ef2-4b72-4c32-85a7-f0afe6c9f672", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemui8go6g99bb.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "71a1f438-8b08-4ad7-9a21-753630ef8791", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemui8go6g99bb.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemui8go6g99bb.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemuicitd4jrtr[.]xyz", "description_available": false, "object_id": "36b669f0-8c68-4ffb-9958-57343c315d6a", "object_ids": [ "36b669f0-8c68-4ffb-9958-57343c315d6a", "8558f492-9c6a-4a03-86e6-758119c483cf" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "36b669f0-8c68-4ffb-9958-57343c315d6a", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemuicitd4jrtr.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "8558f492-9c6a-4a03-86e6-758119c483cf", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemuicitd4jrtr.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemuicitd4jrtr.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemuidkr38kji0[.]xyz", "description_available": false, "object_id": "8ed1332f-365a-46e1-9684-b76c39a7c514", "object_ids": [ "6194d4bb-57fe-4729-82f1-b1830543e4d9", "8ed1332f-365a-46e1-9684-b76c39a7c514" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "8ed1332f-365a-46e1-9684-b76c39a7c514", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemuidkr38kji0.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "6194d4bb-57fe-4729-82f1-b1830543e4d9", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemuidkr38kji0.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemuidkr38kji0.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemuidlij5urd0[.]xyz", "description_available": false, "object_id": "7d700a67-0db5-4db8-8b0b-dba6fbb924b9", "object_ids": [ "3ac8260b-1a0a-4894-8b10-2d0b2233e40a", "7d700a67-0db5-4db8-8b0b-dba6fbb924b9" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "7d700a67-0db5-4db8-8b0b-dba6fbb924b9", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemuidlij5urd0.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "3ac8260b-1a0a-4894-8b10-2d0b2233e40a", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemuidlij5urd0.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemuidlij5urd0.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemuif3pa5k4eh[.]xyz", "description_available": false, "object_id": "cf93f018-aa54-4893-a461-689f98d697e2", "object_ids": [ "956fc18e-a6b9-4d6b-acf4-b0649d4cd014", "cf93f018-aa54-4893-a461-689f98d697e2" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "cf93f018-aa54-4893-a461-689f98d697e2", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemuif3pa5k4eh.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "956fc18e-a6b9-4d6b-acf4-b0649d4cd014", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemuif3pa5k4eh.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemuif3pa5k4eh.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemuife3h91vjj[.]xyz", "description_available": false, "object_id": "3ad229cb-0605-4cb2-981e-6c604bd39b6d", "object_ids": [ "3ad229cb-0605-4cb2-981e-6c604bd39b6d", "c27c1774-1042-49e1-8f2e-9442d43a05c4" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "3ad229cb-0605-4cb2-981e-6c604bd39b6d", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemuife3h91vjj.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "c27c1774-1042-49e1-8f2e-9442d43a05c4", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemuife3h91vjj.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemuife3h91vjj.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemuioeefbyh3i[.]xyz", "description_available": false, "object_id": "48a0c2a5-f1b8-4506-adee-45fb22261706", "object_ids": [ "48a0c2a5-f1b8-4506-adee-45fb22261706", "82811954-0eba-4c05-a7e6-0fb2e4b4a9f4" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "48a0c2a5-f1b8-4506-adee-45fb22261706", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemuioeefbyh3i.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "82811954-0eba-4c05-a7e6-0fb2e4b4a9f4", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemuioeefbyh3i.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemuioeefbyh3i.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemuioi7005ekb[.]xyz", "description_available": false, "object_id": "f0a29f96-3d65-497f-b796-5b25e22b88fe", "object_ids": [ "caf2b211-1217-44da-9faa-1eddc03a2d63", "f0a29f96-3d65-497f-b796-5b25e22b88fe" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "f0a29f96-3d65-497f-b796-5b25e22b88fe", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemuioi7005ekb.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "caf2b211-1217-44da-9faa-1eddc03a2d63", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemuioi7005ekb.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemuioi7005ekb.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemuizkhpdbjnv[.]xyz", "description_available": false, "object_id": "c7629a1b-ba14-4e0e-9b72-fd9202003566", "object_ids": [ "c7629a1b-ba14-4e0e-9b72-fd9202003566", "df335467-10f8-4cb5-ab3b-60c2e56ad3e3" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "c7629a1b-ba14-4e0e-9b72-fd9202003566", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemuizkhpdbjnv.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "df335467-10f8-4cb5-ab3b-60c2e56ad3e3", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemuizkhpdbjnv.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemuizkhpdbjnv.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemuj1xencnin8[.]xyz", "description_available": false, "object_id": "33e37228-df8b-4bdf-bd04-a0f8c267ef5e", "object_ids": [ "33e37228-df8b-4bdf-bd04-a0f8c267ef5e", "c317299f-f552-4a0c-b468-6f00dde1ddcd" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "33e37228-df8b-4bdf-bd04-a0f8c267ef5e", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemuj1xencnin8.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "c317299f-f552-4a0c-b468-6f00dde1ddcd", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemuj1xencnin8.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemuj1xencnin8.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemuj7lzbasipw[.]xyz", "description_available": false, "object_id": "eebd4630-e8fd-4e63-af0b-4a958e2f29ab", "object_ids": [ "8e4e2a51-6140-48fd-93a5-5f5ac776d076", "eebd4630-e8fd-4e63-af0b-4a958e2f29ab" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "eebd4630-e8fd-4e63-af0b-4a958e2f29ab", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemuj7lzbasipw.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "8e4e2a51-6140-48fd-93a5-5f5ac776d076", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemuj7lzbasipw.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemuj7lzbasipw.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemujbcz1nas1x[.]xyz", "description_available": false, "object_id": "29bb1397-47a3-410a-bb7b-ff5debc5d6ad", "object_ids": [ "29bb1397-47a3-410a-bb7b-ff5debc5d6ad", "ce0eb065-3dad-4148-ad7c-03219c471164" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "29bb1397-47a3-410a-bb7b-ff5debc5d6ad", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemujbcz1nas1x.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "ce0eb065-3dad-4148-ad7c-03219c471164", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemujbcz1nas1x.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemujbcz1nas1x.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemujdi54aitrf[.]xyz", "description_available": false, "object_id": "f41937b0-1100-44a1-9f53-bbc42cb21a9d", "object_ids": [ "54896639-55a3-4111-886e-ba8def475b1b", "f41937b0-1100-44a1-9f53-bbc42cb21a9d" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "f41937b0-1100-44a1-9f53-bbc42cb21a9d", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemujdi54aitrf.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "54896639-55a3-4111-886e-ba8def475b1b", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemujdi54aitrf.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemujdi54aitrf.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemujejvp4tp0x[.]xyz", "description_available": false, "object_id": "df7da9c8-4dce-4b15-926c-de26d7b9ede4", "object_ids": [ "cc0ae819-750f-4310-b878-406db6ef225e", "df7da9c8-4dce-4b15-926c-de26d7b9ede4" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "df7da9c8-4dce-4b15-926c-de26d7b9ede4", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemujejvp4tp0x.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "cc0ae819-750f-4310-b878-406db6ef225e", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemujejvp4tp0x.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemujejvp4tp0x.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemujffobdhxgj[.]xyz", "description_available": false, "object_id": "ffcdb5ad-f65f-4119-87dd-95c82b6e3a3f", "object_ids": [ "83d3edda-9a1b-4f75-86c5-a166aac4b298", "ffcdb5ad-f65f-4119-87dd-95c82b6e3a3f" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "ffcdb5ad-f65f-4119-87dd-95c82b6e3a3f", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemujffobdhxgj.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "83d3edda-9a1b-4f75-86c5-a166aac4b298", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemujffobdhxgj.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemujffobdhxgj.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemuji07m137aw[.]xyz", "description_available": false, "object_id": "c6f0ceb1-b1f0-4ece-9041-c00299196af8", "object_ids": [ "0851e435-8f42-419e-83d1-890f01adfb12", "c6f0ceb1-b1f0-4ece-9041-c00299196af8" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "c6f0ceb1-b1f0-4ece-9041-c00299196af8", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemuji07m137aw.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "0851e435-8f42-419e-83d1-890f01adfb12", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemuji07m137aw.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemuji07m137aw.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemujoqrmsm0et[.]xyz", "description_available": false, "object_id": "ffa21391-0979-4e3c-8ac6-62cdac39a4c2", "object_ids": [ "e35884ad-c59a-4357-9fad-7c9165144c9f", "ffa21391-0979-4e3c-8ac6-62cdac39a4c2" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "ffa21391-0979-4e3c-8ac6-62cdac39a4c2", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemujoqrmsm0et.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "e35884ad-c59a-4357-9fad-7c9165144c9f", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemujoqrmsm0et.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemujoqrmsm0et.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemujrfn7witew[.]xyz", "description_available": false, "object_id": "77efc144-29ec-4029-9a24-9bb6b24e2a2e", "object_ids": [ "77efc144-29ec-4029-9a24-9bb6b24e2a2e", "fc6ff934-43be-4e2f-8af7-f722643a67ba" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "77efc144-29ec-4029-9a24-9bb6b24e2a2e", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemujrfn7witew.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "fc6ff934-43be-4e2f-8af7-f722643a67ba", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemujrfn7witew.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemujrfn7witew.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemujsm7brhwh0[.]xyz", "description_available": false, "object_id": "4b877bea-4d48-4e7e-9350-448a500b0446", "object_ids": [ "42e5bb2a-33d0-45c8-88cf-fdf52c9ab457", "4b877bea-4d48-4e7e-9350-448a500b0446" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "4b877bea-4d48-4e7e-9350-448a500b0446", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemujsm7brhwh0.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "42e5bb2a-33d0-45c8-88cf-fdf52c9ab457", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemujsm7brhwh0.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemujsm7brhwh0.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemujtcvh5q9fj[.]xyz", "description_available": false, "object_id": "2f50b47f-ead3-4b67-a576-16a630b3a544", "object_ids": [ "2f50b47f-ead3-4b67-a576-16a630b3a544", "8c0286b2-f712-4ac3-ad98-babe1426032a" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "2f50b47f-ead3-4b67-a576-16a630b3a544", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemujtcvh5q9fj.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "8c0286b2-f712-4ac3-ad98-babe1426032a", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemujtcvh5q9fj.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemujtcvh5q9fj.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemujtd8ingh2b[.]xyz", "description_available": false, "object_id": "4672b0b0-92f4-4b43-9d76-20fe767cd7b3", "object_ids": [ "4672b0b0-92f4-4b43-9d76-20fe767cd7b3", "714a5d86-0f98-4add-89c1-5a408f995bf1" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "4672b0b0-92f4-4b43-9d76-20fe767cd7b3", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemujtd8ingh2b.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "714a5d86-0f98-4add-89c1-5a408f995bf1", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemujtd8ingh2b.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemujtd8ingh2b.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemujtdkvy6c7n[.]xyz", "description_available": false, "object_id": "37e00eab-ea54-4e2c-882c-51a771e1d716", "object_ids": [ "37e00eab-ea54-4e2c-882c-51a771e1d716", "dec882eb-d1df-4090-b4ac-874148672379" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "37e00eab-ea54-4e2c-882c-51a771e1d716", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemujtdkvy6c7n.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "dec882eb-d1df-4090-b4ac-874148672379", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemujtdkvy6c7n.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemujtdkvy6c7n.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemujufht1ntj4[.]xyz", "description_available": false, "object_id": "44164fd9-7fd6-43f3-a16b-72e9813ade1b", "object_ids": [ "44164fd9-7fd6-43f3-a16b-72e9813ade1b", "abbf6bc9-ef05-4dac-a6f3-4aa5afd15df0" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "44164fd9-7fd6-43f3-a16b-72e9813ade1b", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemujufht1ntj4.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "abbf6bc9-ef05-4dac-a6f3-4aa5afd15df0", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemujufht1ntj4.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemujufht1ntj4.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemujufs1975v4[.]xyz", "description_available": false, "object_id": "b4e6da0e-d5a8-48ec-8088-4a5a4c9e687a", "object_ids": [ "5067f256-5692-4701-b670-9b2eaf654685", "b4e6da0e-d5a8-48ec-8088-4a5a4c9e687a" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "b4e6da0e-d5a8-48ec-8088-4a5a4c9e687a", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemujufs1975v4.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "5067f256-5692-4701-b670-9b2eaf654685", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemujufs1975v4.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemujufs1975v4.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemujug76lkyke[.]xyz", "description_available": false, "object_id": "9b231e95-4b33-4b5b-85a2-f4271e401157", "object_ids": [ "2222bc30-8f5c-4a8e-8eff-c9f5c239288c", "9b231e95-4b33-4b5b-85a2-f4271e401157" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "9b231e95-4b33-4b5b-85a2-f4271e401157", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemujug76lkyke.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "2222bc30-8f5c-4a8e-8eff-c9f5c239288c", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemujug76lkyke.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemujug76lkyke.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemujumvtmjaf1[.]xyz", "description_available": false, "object_id": "a95a9391-bf64-4cb0-9560-034450478f9b", "object_ids": [ "a95a9391-bf64-4cb0-9560-034450478f9b", "f4e37867-1367-4f3d-8fc0-8975bb634caa" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "a95a9391-bf64-4cb0-9560-034450478f9b", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemujumvtmjaf1.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "f4e37867-1367-4f3d-8fc0-8975bb634caa", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemujumvtmjaf1.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemujumvtmjaf1.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemujuncdlpnng[.]xyz", "description_available": false, "object_id": "b47b7c0a-f138-4273-8b5b-7dc8d87a1a2b", "object_ids": [ "3425995f-7378-443a-8b7b-9d28ce73705b", "b47b7c0a-f138-4273-8b5b-7dc8d87a1a2b" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "b47b7c0a-f138-4273-8b5b-7dc8d87a1a2b", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemujuncdlpnng.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "3425995f-7378-443a-8b7b-9d28ce73705b", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemujuncdlpnng.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemujuncdlpnng.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemujuno47vpud[.]xyz", "description_available": false, "object_id": "1a4c0239-2521-4cd4-a881-b37251e225a7", "object_ids": [ "1a4c0239-2521-4cd4-a881-b37251e225a7", "d7f76d09-4596-4c90-9243-f696602e2518" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "1a4c0239-2521-4cd4-a881-b37251e225a7", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemujuno47vpud.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "d7f76d09-4596-4c90-9243-f696602e2518", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemujuno47vpud.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemujuno47vpud.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemujunzgjapds[.]xyz", "description_available": false, "object_id": "8831740e-51c8-429d-9a94-91279ccf170f", "object_ids": [ "8831740e-51c8-429d-9a94-91279ccf170f", "eb84b1d1-6328-4200-9522-217c15d7fbd0" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "8831740e-51c8-429d-9a94-91279ccf170f", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemujunzgjapds.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "eb84b1d1-6328-4200-9522-217c15d7fbd0", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemujunzgjapds.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemujunzgjapds.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemujw19idqe01[.]xyz", "description_available": false, "object_id": "f3b9f9c5-25bd-4304-9a7d-a2c5b3672c0a", "object_ids": [ "72899ed8-23b7-4180-9093-f6c5ec7ec025", "f3b9f9c5-25bd-4304-9a7d-a2c5b3672c0a" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "f3b9f9c5-25bd-4304-9a7d-a2c5b3672c0a", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemujw19idqe01.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "72899ed8-23b7-4180-9093-f6c5ec7ec025", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemujw19idqe01.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemujw19idqe01.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemujw1uspghl1[.]xyz", "description_available": false, "object_id": "d0b05918-209b-473c-bff4-0589efae058e", "object_ids": [ "d0b05918-209b-473c-bff4-0589efae058e", "d27bd845-5878-4f5a-99af-a0f78b296771" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "d0b05918-209b-473c-bff4-0589efae058e", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemujw1uspghl1.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "d27bd845-5878-4f5a-99af-a0f78b296771", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemujw1uspghl1.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemujw1uspghl1.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemujwcvm5ufu8[.]xyz", "description_available": false, "object_id": "b5dd0207-0ab1-485d-995a-2eb79c9fe0e5", "object_ids": [ "b5dd0207-0ab1-485d-995a-2eb79c9fe0e5", "d85bdd62-a3d3-4033-aec8-fe28a0c698a6" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "b5dd0207-0ab1-485d-995a-2eb79c9fe0e5", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemujwcvm5ufu8.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "d85bdd62-a3d3-4033-aec8-fe28a0c698a6", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemujwcvm5ufu8.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemujwcvm5ufu8.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemujxjlv2lmhh[.]xyz", "description_available": false, "object_id": "ea931519-c22d-449a-aa79-b763e82d3b89", "object_ids": [ "d8b402b5-2d8a-4de0-adbd-124008a744d1", "ea931519-c22d-449a-aa79-b763e82d3b89" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "ea931519-c22d-449a-aa79-b763e82d3b89", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemujxjlv2lmhh.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "d8b402b5-2d8a-4de0-adbd-124008a744d1", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemujxjlv2lmhh.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemujxjlv2lmhh.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemuk3jcm1olr8[.]xyz", "description_available": false, "object_id": "5a0a6544-22d6-45d2-8b8f-4b975f377bf7", "object_ids": [ "5a0a6544-22d6-45d2-8b8f-4b975f377bf7", "ea3fce72-4025-4558-a31a-8e34eaf48f00" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "5a0a6544-22d6-45d2-8b8f-4b975f377bf7", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemuk3jcm1olr8.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "ea3fce72-4025-4558-a31a-8e34eaf48f00", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemuk3jcm1olr8.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemuk3jcm1olr8.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemuk3jpe1eph7[.]xyz", "description_available": false, "object_id": "cf33d6b4-24fa-4c1b-8ab4-6e088581d707", "object_ids": [ "03524efb-ab4a-4182-b884-226ed4b590ee", "cf33d6b4-24fa-4c1b-8ab4-6e088581d707" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "cf33d6b4-24fa-4c1b-8ab4-6e088581d707", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemuk3jpe1eph7.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "03524efb-ab4a-4182-b884-226ed4b590ee", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemuk3jpe1eph7.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemuk3jpe1eph7.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemuk3z1hh2tvn[.]xyz", "description_available": false, "object_id": "8a9db52c-6728-4b21-80a1-d25e414a786a", "object_ids": [ "8a9db52c-6728-4b21-80a1-d25e414a786a", "d54e6658-6af1-4c43-86ee-547b6f4f148c" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "8a9db52c-6728-4b21-80a1-d25e414a786a", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemuk3z1hh2tvn.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "d54e6658-6af1-4c43-86ee-547b6f4f148c", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemuk3z1hh2tvn.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemuk3z1hh2tvn.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemuk3zjrr2ufy[.]xyz", "description_available": false, "object_id": "3af275aa-e289-4651-a556-9b877aec837b", "object_ids": [ "3af275aa-e289-4651-a556-9b877aec837b", "b51bf621-f13e-48fa-b14e-ab22b61dc8dc" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "3af275aa-e289-4651-a556-9b877aec837b", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemuk3zjrr2ufy.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "b51bf621-f13e-48fa-b14e-ab22b61dc8dc", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemuk3zjrr2ufy.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemuk3zjrr2ufy.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemuk3zu5776gi[.]xyz", "description_available": false, "object_id": "a76e86ee-95cc-4885-9153-0290f869c93a", "object_ids": [ "15d3425e-f6e1-43fe-936f-7f4d9fb4ec0b", "a76e86ee-95cc-4885-9153-0290f869c93a" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "a76e86ee-95cc-4885-9153-0290f869c93a", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemuk3zu5776gi.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "15d3425e-f6e1-43fe-936f-7f4d9fb4ec0b", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemuk3zu5776gi.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemuk3zu5776gi.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemuk6zd201nsw[.]xyz", "description_available": false, "object_id": "532946b6-08d9-4c34-b8d2-775076cc5c79", "object_ids": [ "532946b6-08d9-4c34-b8d2-775076cc5c79", "cdec3d61-83f9-4ae9-a9b9-42c58ab1d666" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "532946b6-08d9-4c34-b8d2-775076cc5c79", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemuk6zd201nsw.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "cdec3d61-83f9-4ae9-a9b9-42c58ab1d666", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemuk6zd201nsw.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemuk6zd201nsw.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemuk7f31386dx[.]xyz", "description_available": false, "object_id": "cc59f958-1ed2-400d-bc37-6c8c6dd9c92a", "object_ids": [ "7891b84d-af8f-4095-92c5-289117a02b09", "cc59f958-1ed2-400d-bc37-6c8c6dd9c92a" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "cc59f958-1ed2-400d-bc37-6c8c6dd9c92a", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemuk7f31386dx.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "7891b84d-af8f-4095-92c5-289117a02b09", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemuk7f31386dx.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemuk7f31386dx.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemuk7fi1dcrp4[.]xyz", "description_available": false, "object_id": "fa6ceeb1-abc7-446b-8dc7-4327c731aac0", "object_ids": [ "404797a0-18da-4559-a617-cacec5927dc4", "fa6ceeb1-abc7-446b-8dc7-4327c731aac0" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "fa6ceeb1-abc7-446b-8dc7-4327c731aac0", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemuk7fi1dcrp4.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "404797a0-18da-4559-a617-cacec5927dc4", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemuk7fi1dcrp4.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemuk7fi1dcrp4.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemuk7fvnvihra[.]xyz", "description_available": false, "object_id": "5b16f4a6-2a67-4f43-82f7-22ee736bda01", "object_ids": [ "447e090d-c2ee-4bac-b1c2-49173f21d2de", "5b16f4a6-2a67-4f43-82f7-22ee736bda01" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "5b16f4a6-2a67-4f43-82f7-22ee736bda01", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemuk7fvnvihra.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "447e090d-c2ee-4bac-b1c2-49173f21d2de", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemuk7fvnvihra.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemuk7fvnvihra.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemuk7xbyszpzj[.]xyz", "description_available": false, "object_id": "39693732-3a83-4e41-b024-da66fcc970a3", "object_ids": [ "20feb0af-1d3c-4d64-9837-90d0f91a55a1", "39693732-3a83-4e41-b024-da66fcc970a3" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "39693732-3a83-4e41-b024-da66fcc970a3", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemuk7xbyszpzj.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "20feb0af-1d3c-4d64-9837-90d0f91a55a1", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemuk7xbyszpzj.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemuk7xbyszpzj.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemuk7y434m4om[.]xyz", "description_available": false, "object_id": "30379efc-8c95-4bb0-bdab-fc12f46bc759", "object_ids": [ "30379efc-8c95-4bb0-bdab-fc12f46bc759", "abb8ee98-f4e9-48c9-b960-ab4510be4c2d" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "30379efc-8c95-4bb0-bdab-fc12f46bc759", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemuk7y434m4om.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "abb8ee98-f4e9-48c9-b960-ab4510be4c2d", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemuk7y434m4om.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemuk7y434m4om.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemuk7yi5eqn74[.]xyz", "description_available": false, "object_id": "853b59b9-8312-4f6f-9f4e-a2c0e6deb86a", "object_ids": [ "853b59b9-8312-4f6f-9f4e-a2c0e6deb86a", "957dbc54-2830-41f3-afca-cd1a219f6cc4" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "853b59b9-8312-4f6f-9f4e-a2c0e6deb86a", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemuk7yi5eqn74.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "957dbc54-2830-41f3-afca-cd1a219f6cc4", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemuk7yi5eqn74.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemuk7yi5eqn74.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemuk7ys6db9qj[.]xyz", "description_available": false, "object_id": "cb161fbc-ec27-420d-bead-10bb66ee0377", "object_ids": [ "cb161fbc-ec27-420d-bead-10bb66ee0377", "f7c9f84a-e179-428c-ba97-3cd12c043a9b" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "cb161fbc-ec27-420d-bead-10bb66ee0377", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemuk7ys6db9qj.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "f7c9f84a-e179-428c-ba97-3cd12c043a9b", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemuk7ys6db9qj.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemuk7ys6db9qj.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemuk9ayiwadjz[.]xyz", "description_available": false, "object_id": "05bd3370-3cbe-4a77-8067-15d513e46c57", "object_ids": [ "05bd3370-3cbe-4a77-8067-15d513e46c57", "da8e8e39-6716-4ded-a5f9-8fecb34df0b7" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "05bd3370-3cbe-4a77-8067-15d513e46c57", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemuk9ayiwadjz.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "da8e8e39-6716-4ded-a5f9-8fecb34df0b7", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemuk9ayiwadjz.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemuk9ayiwadjz.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemuk9c4oppeco[.]xyz", "description_available": false, "object_id": "320213c8-b234-4233-82c3-bfa700049954", "object_ids": [ "1d6c6beb-f570-4d2b-a154-e99f7c296595", "320213c8-b234-4233-82c3-bfa700049954" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "320213c8-b234-4233-82c3-bfa700049954", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemuk9c4oppeco.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "1d6c6beb-f570-4d2b-a154-e99f7c296595", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemuk9c4oppeco.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemuk9c4oppeco.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemukh5awm67rj[.]xyz", "description_available": false, "object_id": "857a04ed-1f6c-4d16-8229-22f64ef8e036", "object_ids": [ "857a04ed-1f6c-4d16-8229-22f64ef8e036", "d472ea37-d74a-48a4-bfa0-2e4ec2aca630" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "857a04ed-1f6c-4d16-8229-22f64ef8e036", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemukh5awm67rj.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "d472ea37-d74a-48a4-bfa0-2e4ec2aca630", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemukh5awm67rj.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemukh5awm67rj.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemukpy2hpmpwv[.]xyz", "description_available": false, "object_id": "59825d45-5f02-4f2d-96b9-c519e94792ae", "object_ids": [ "3dc3f837-e496-4160-8af5-349e0700c6da", "59825d45-5f02-4f2d-96b9-c519e94792ae" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "59825d45-5f02-4f2d-96b9-c519e94792ae", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemukpy2hpmpwv.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "3dc3f837-e496-4160-8af5-349e0700c6da", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemukpy2hpmpwv.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemukpy2hpmpwv.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemukrod1am6ez[.]xyz", "description_available": false, "object_id": "fd1e2044-7276-49ed-9522-8d542502d6b1", "object_ids": [ "944cc497-65a6-42eb-be7b-1c3693a2613a", "fd1e2044-7276-49ed-9522-8d542502d6b1" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "fd1e2044-7276-49ed-9522-8d542502d6b1", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemukrod1am6ez.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "944cc497-65a6-42eb-be7b-1c3693a2613a", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemukrod1am6ez.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemukrod1am6ez.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemukvxv7j5hmv[.]xyz", "description_available": false, "object_id": "fca95720-5285-48ca-9df1-ab894b93819d", "object_ids": [ "4b056dce-9803-4e77-bc66-dbd1e724f8f5", "fca95720-5285-48ca-9df1-ab894b93819d" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "fca95720-5285-48ca-9df1-ab894b93819d", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemukvxv7j5hmv.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "4b056dce-9803-4e77-bc66-dbd1e724f8f5", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemukvxv7j5hmv.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemukvxv7j5hmv.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemukvy7wudsqb[.]xyz", "description_available": false, "object_id": "7f131bd6-880b-48a9-8f59-e7b69fbc5f7d", "object_ids": [ "7f131bd6-880b-48a9-8f59-e7b69fbc5f7d", "977c5945-effd-4960-82e4-9b744c6073fb" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "7f131bd6-880b-48a9-8f59-e7b69fbc5f7d", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemukvy7wudsqb.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "977c5945-effd-4960-82e4-9b744c6073fb", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemukvy7wudsqb.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemukvy7wudsqb.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemukww7ivnaji[.]xyz", "description_available": false, "object_id": "d0c29edc-e50d-4dd2-a1b9-f295e41bb50f", "object_ids": [ "068ef3d3-488d-4cfc-868d-f3e4f9966d4a", "d0c29edc-e50d-4dd2-a1b9-f295e41bb50f" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "d0c29edc-e50d-4dd2-a1b9-f295e41bb50f", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemukww7ivnaji.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "068ef3d3-488d-4cfc-868d-f3e4f9966d4a", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemukww7ivnaji.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemukww7ivnaji.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemukwxih8302f[.]xyz", "description_available": false, "object_id": "460bccae-4650-4bdc-901d-77587502ad04", "object_ids": [ "3ee2de33-c8b9-4d81-8387-1692100b04d2", "460bccae-4650-4bdc-901d-77587502ad04" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "460bccae-4650-4bdc-901d-77587502ad04", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemukwxih8302f.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "3ee2de33-c8b9-4d81-8387-1692100b04d2", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemukwxih8302f.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemukwxih8302f.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemul94tcv4l80[.]xyz", "description_available": false, "object_id": "5f9b8f9c-92c3-44fe-8e5c-9c29ac064685", "object_ids": [ "5f9b8f9c-92c3-44fe-8e5c-9c29ac064685", "b937543f-e00f-46f0-8b0f-5f5f02f5c7aa" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "5f9b8f9c-92c3-44fe-8e5c-9c29ac064685", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemul94tcv4l80.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "b937543f-e00f-46f0-8b0f-5f5f02f5c7aa", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemul94tcv4l80.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemul94tcv4l80.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemul95f18sowo[.]xyz", "description_available": false, "object_id": "a1a3a0ec-0edc-430e-9419-c84eac8f24ad", "object_ids": [ "5aaa3bf0-a27f-4fef-a34a-4ba040b4c394", "a1a3a0ec-0edc-430e-9419-c84eac8f24ad" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "a1a3a0ec-0edc-430e-9419-c84eac8f24ad", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemul95f18sowo.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "5aaa3bf0-a27f-4fef-a34a-4ba040b4c394", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemul95f18sowo.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemul95f18sowo.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemul95pxqgmm8[.]xyz", "description_available": false, "object_id": "5f259031-ab5a-45b1-9959-210a2784edf7", "object_ids": [ "3a69650f-7ad6-43d9-9b06-949fe8e0880b", "5f259031-ab5a-45b1-9959-210a2784edf7" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "5f259031-ab5a-45b1-9959-210a2784edf7", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemul95pxqgmm8.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "3a69650f-7ad6-43d9-9b06-949fe8e0880b", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemul95pxqgmm8.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemul95pxqgmm8.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemulaay8dbm66[.]xyz", "description_available": false, "object_id": "6f37e0fd-18fa-4f52-aa92-2628c3c20397", "object_ids": [ "4d8a1940-c452-49e8-9f59-909bdec677a9", "6f37e0fd-18fa-4f52-aa92-2628c3c20397" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "6f37e0fd-18fa-4f52-aa92-2628c3c20397", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemulaay8dbm66.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "4d8a1940-c452-49e8-9f59-909bdec677a9", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemulaay8dbm66.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemulaay8dbm66.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemulaucnbmnrd[.]xyz", "description_available": false, "object_id": "82ee7b85-195b-414b-bde2-5db2c446aabc", "object_ids": [ "82ee7b85-195b-414b-bde2-5db2c446aabc", "c405ba8e-22d7-44b4-80a9-caad59643217" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "82ee7b85-195b-414b-bde2-5db2c446aabc", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemulaucnbmnrd.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "c405ba8e-22d7-44b4-80a9-caad59643217", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemulaucnbmnrd.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemulaucnbmnrd.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemulffos1qryn[.]xyz", "description_available": false, "object_id": "259621a7-614d-4c93-9ba2-1c95eb10f2ea", "object_ids": [ "259621a7-614d-4c93-9ba2-1c95eb10f2ea", "4030732c-8306-4feb-be0f-09c6a7165ebc" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "259621a7-614d-4c93-9ba2-1c95eb10f2ea", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemulffos1qryn.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "4030732c-8306-4feb-be0f-09c6a7165ebc", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemulffos1qryn.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemulffos1qryn.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemuli8pd7qi9z[.]xyz", "description_available": false, "object_id": "48a0eb2d-1811-4cca-b986-830b7087cff0", "object_ids": [ "48a0eb2d-1811-4cca-b986-830b7087cff0", "cf0ba14a-7b13-44fd-a9dd-bcc404228e7c" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "48a0eb2d-1811-4cca-b986-830b7087cff0", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemuli8pd7qi9z.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "cf0ba14a-7b13-44fd-a9dd-bcc404228e7c", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemuli8pd7qi9z.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemuli8pd7qi9z.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemulpmt6if530[.]xyz", "description_available": false, "object_id": "4ce6366e-cb93-43cd-b4b7-26547923553b", "object_ids": [ "48138184-f940-4692-b35d-d79dcfbd61f9", "4ce6366e-cb93-43cd-b4b7-26547923553b" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "4ce6366e-cb93-43cd-b4b7-26547923553b", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemulpmt6if530.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "48138184-f940-4692-b35d-d79dcfbd61f9", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemulpmt6if530.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemulpmt6if530.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemulpnff7964j[.]xyz", "description_available": false, "object_id": "4826f088-d475-4651-9500-03936444f2ce", "object_ids": [ "4826f088-d475-4651-9500-03936444f2ce", "6f21215f-ccb9-4997-bdcc-fe23b36f17bd" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "4826f088-d475-4651-9500-03936444f2ce", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemulpnff7964j.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "6f21215f-ccb9-4997-bdcc-fe23b36f17bd", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemulpnff7964j.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemulpnff7964j.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemulpo7jkntfz[.]xyz", "description_available": false, "object_id": "4c931945-9091-46de-8db9-04c9a6c4ed29", "object_ids": [ "4c931945-9091-46de-8db9-04c9a6c4ed29", "b093b470-0dc6-4644-a6e9-d6e8a8c24de4" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "4c931945-9091-46de-8db9-04c9a6c4ed29", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemulpo7jkntfz.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "b093b470-0dc6-4644-a6e9-d6e8a8c24de4", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemulpo7jkntfz.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemulpo7jkntfz.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemulr9d1dg77r[.]xyz", "description_available": false, "object_id": "39f58877-8b78-41b9-80ca-f667033465bc", "object_ids": [ "1fa0f9b1-b85f-42ab-9dca-6149d03af13b", "39f58877-8b78-41b9-80ca-f667033465bc" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "39f58877-8b78-41b9-80ca-f667033465bc", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemulr9d1dg77r.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "1fa0f9b1-b85f-42ab-9dca-6149d03af13b", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemulr9d1dg77r.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemulr9d1dg77r.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemuls00qrsh0k[.]xyz", "description_available": false, "object_id": "7be97e4b-d09d-48bf-a786-f422af0bf55a", "object_ids": [ "073dc327-8383-4579-8faf-b25f81d467b2", "7be97e4b-d09d-48bf-a786-f422af0bf55a" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "7be97e4b-d09d-48bf-a786-f422af0bf55a", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemuls00qrsh0k.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "073dc327-8383-4579-8faf-b25f81d467b2", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemuls00qrsh0k.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemuls00qrsh0k.xyz" }, { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "defanged": "sitemulszq4rm2yn[.]xyz", "description_available": false, "object_id": "85deeea6-da0e-456e-8ca9-f433dadb73c2", "object_ids": [ "346b81b5-ef8f-42a2-8e7d-622b65debaba", "85deeea6-da0e-456e-8ca9-f433dadb73c2" ], "source_objects": [ { "classification": "indicator", "confidence": 50, "context": "Objet Indicator explicitement associé au rapport source.", "object_id": "85deeea6-da0e-456e-8ca9-f433dadb73c2", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemulszq4rm2yn.xyz" }, { "classification": "observable", "confidence": null, "context": "Objet DomainName explicitement associé au rapport source.", "object_id": "346b81b5-ef8f-42a2-8e7d-622b65debaba", "valid_from": null, "valid_until": null, "validity_status": "undated", "value": "sitemulszq4rm2yn.xyz" } ], "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes", "type": "domain", "valid_from": "2026-10-01T20:52:13.000Z", "valid_until": "2027-01-12T11:47:21.260Z", "validity_status": "active", "value": "sitemulszq4rm2yn.xyz" } ], "mentioned": [ { "confidence": 100, "evidence_id": "6839ec2a-a1ec-4851-b89f-8923c0d36135", "name": "Finance", "role": "mentionné", "type": "Sector" } ], "mitre": { "associated_repertoire": [], "direct_techniques": [] }, "report_metadata": { "authorized_members": [], "confidence": 50, "created_by": null, "dates": { "created": "2026-10-01T20:52:12.428Z", "created_at": "2026-10-03T03:31:19.617Z", "modified": "2026-10-03T03:31:21.576Z", "published": "2026-10-01T20:52:12.428Z", "updated_at": "2026-10-03T03:31:21.576Z" }, "description_available": true, "id": "5f080b4d-bff1-44df-bb72-50ea26877842", "is_inferred": false, "labels": [ "blockchain fraud", "crypto impersonation", "cryptocurrency phishing", "fake voting scam", "token theft", "wallet drainer", "walletconnect abuse" ], "lang": "en", "name": "Fake xStocks, Pendle, and other sites bait crypto users with rewards votes", "objectMarking": [ { "definition": "TLP:CLEAR", "definition_type": "TLP" } ], "objectOrganization": [], "published": "2026-10-01T20:52:12.428Z", "references": [ { "external_id": null, "id": "994c5818-4138-4a49-bd4e-85e214d28f07", "source_name": "alien-vault", "url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes" }, { "external_id": "6abec7fc11f84dc2a20573a9", "id": "daa9fdaa-b4eb-4f95-9e5a-5d7010d6d923", "source_name": "alien-vault", "url": "https://otx.alienvault.com/pulse/6abec7fc11f84dc2a20573a9" } ], "report_types": [ "threat-report" ], "restrict_access": false, "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes" }, "targets": [], "techniques": [], "vulnerabilities": [] }, "report_id": "5f080b4d-bff1-44df-bb72-50ea26877842", "schema_version": 1, "selected_date": "2026-10-01", "source_url": "https://www.malwarebytes.com/blog/threat-intel/2026/10/fake-xstocks-pendle-and-other-sites-bait-crypto-users-with-rewards-votes" }