First seen April 22, 2026 · Last seen May 18, 2026 · Campaign
Public preview
IOC type, status and defensive guidance visible. Pro adds alert context, Pro+ adds exports and deeper relationships.
Context
Mock phishing domain used in NeonStealer credential harvesting campaign targeting e-commerce users.
Defensive Guidance
Add to URL filtering blocklist. Train users on domain verification. Enable browser isolation for untrusted links.
Tags
Safety Note
Uses .example reserved TLD (RFC 2606). Not a real phishing domain.
Actions
Related Threat Feed Items
Related Campaigns
Related Malware
Related Actors
Related Dark Web Mentions
Related Intelligence
Static mock relationships for demonstration. Not AI-generated or externally enriched.