First seen April 25, 2026 · Last seen May 18, 2026 · Campaign
Public preview
IOC type, status and defensive guidance visible. Pro adds alert context, Pro+ adds exports and deeper relationships.
Context
Mock phishing sender address used in NeonStealer e-commerce credential harvesting emails.
Defensive Guidance
Add to email gateway blocklist. Search mailboxes for messages from this sender. Flag for user awareness.
Tags
Safety Note
Uses .example reserved TLD (RFC 2606). Not a real email address.
Actions
Related Threat Feed Items
Related Campaigns
Related Actors
