{
    "2102c54e-6efd-4897-bce4-3709dec7206b": {
        "event_id": 17343,
        "created_at": "2024-12-05T11:29:13.553196+00:00",
        "updated_at": "2024-12-05T16:18:09.500300+00:00",
        "name": "Campagna di Phishing Intesa Sanpaolo via PEC",
        "description": "",
        "subject": "Intesa sanpaolo : Accesso Temporaneamente Disabilitato: Azione Richiesta",
        "tlp": "0",
        "campaign_type": "phishing",
        "method": "linked",
        "country": "italy",
        "file_type": [],
        "theme": "Banking",
        "malware": null,
        "phishing": "IntesaSanpaolo",
        "via": "pec",
        "tag": [],
        "ioc_list": {
            "md5": [],
            "sha1": [],
            "sha256": [],
            "imphash": [],
            "domain": [
                "volcanoweb.nl",
                "richiesta-assistenza-web-intesasanpaolo.codeanyapp.com",
                "filiale-digitale-on-intesasanpaolo-com.codeanyapp.com",
                "carezf.webflow.io",
                "celestian.webflow.io",
                "poszai.webflow.io",
                "zairip.webflow.io",
                "engagefz.webflow.io",
                "prelectnetworks.com",
                "livablehealthcare.com",
                "sd-160629.dedibox.fr",
                "cgncollege.com",
                "filiale-digitale-intesasanpaolo-com.codeanyapp.com",
                "dskadsa8223.blogspot.com",
                "intee400444.blogspot.com",
                "intee9001.blogspot.com",
                "sdasjd323123.blogspot.com",
                "kanmotaliiik.blogspot.com",
                "inte739222.blogspot.com",
                "khjkjhlkhkl079.blogspot.com",
                "inte809.blogspot.com",
                "dsad78323.blogspot.com",
                "tbibin212212.blogspot.com",
                "inegsyauds722.blogspot.com",
                "dasdsad22.blogspot.com",
                "inteade2321.blogspot.com",
                "inte010101.blogspot.com",
                "sdasd323323.blogspot.com",
                "dasdas323.blogspot.com",
                "inteee56678.blogspot.com",
                "verifica-id-richiesta-intesasanpaolo.codeanyapp.com"
            ],
            "url": [
                "https://volcanoweb.nl/jo",
                "https://richiesta-assistenza-web-intesasanpaolo.codeanyapp.com/it/web/login.php",
                "https://www.google.com/amp/s/cgncollege.com/okis",
                "https://poszai.webflow.io/",
                "https://dasdsad22.blogspot.com/",
                "http://sd-160629.dedibox.fr/",
                "https://volcanoweb.nl/ho/",
                "https://www.google.com/amp/s/prelectnetworks.com/sda",
                "https://inte739222.blogspot.com/",
                "https://www.blogger.com/blogin.g?blogspotURL=https://sdasjd323123.blogspot.com/&type=blog",
                "https://volcanoweb.nl/",
                "https://intee400444.blogspot.com/",
                "https://did.li/qzqgT",
                "https://www.google.com/amp/s/engagefz.webflow.io",
                "https://sd-160629.dedibox.fr/icon/other/hub/git/intesa/Intesa/",
                "https://www.blogger.com/blogin.g?blogspotURL=https://inte809.blogspot.com/&type=blog",
                "https://livablehealthcare.com/",
                "https://filiale-digitale-on-intesasanpaolo-com.codeanyapp.com/it/web/login.php",
                "https://www.blogger.com/blogin.g?blogspotURL=https://khjkjhlkhkl079.blogspot.com/&type=blog",
                "https://celestian.webflow.io/",
                "https://inte010101.blogspot.com/",
                "https://www.blogger.com/blogin.g?blogspotURL=https://dsad78323.blogspot.com/&type=blog",
                "https://engagefz.webflow.io/",
                "https://www.blogger.com/blogin.g?blogspotURL=https://dasdas323.blogspot.com/&type=blog",
                "https://kanmotaliiik.blogspot.com/",
                "https://www.blogger.com/blogin.g?blogspotURL=https://tbibin212212.blogspot.com/&type=blog",
                "https://www.google.com/amp/s/dasdsad22.blogspot.com",
                "https://intee9001.blogspot.com/",
                "https://www.google.com/amp/s/celestian.webflow.io",
                "https://www.blogger.com/blogin.g?blogspotURL=https://inegsyauds722.blogspot.com/&type=blog",
                "https://www.blogger.com/blogin.g?blogspotURL=https://sdasd323323.blogspot.com/&type=blog",
                "https://www.google.com/amp/s/prelectnetworks.com/ff",
                "https://www.blogger.com/blogin.g?blogspotURL=https://inteade2321.blogspot.com/&type=blog",
                "https://zairip.webflow.io/",
                "https://www.google.com/amp/s/livablehealthcare.com/dnwr",
                "https://prelectnetworks.com/",
                "https://carezf.webflow.io/",
                "https://cutt.ly/guard/peJaO6t5",
                "https://dskadsa8223.blogspot.com/",
                "https://livablehealthcare.com/dnwr",
                "https://prelectnetworks.com/ff",
                "https://prelectnetworks.com/sda",
                "https://cgncollege.com/okis",
                "https://tbibin212212.blogspot.com/",
                "https://inteade2321.blogspot.com/",
                "https://dasdas323.blogspot.com/",
                "https://sdasd323323.blogspot.com/",
                "https://inegsyauds722.blogspot.com/",
                "https://khjkjhlkhkl079.blogspot.com/",
                "https://sdasjd323123.blogspot.com/",
                "https://inte809.blogspot.com/",
                "https://dsad78323.blogspot.com/",
                "https://filiale-digitale-intesasanpaolo-com.codeanyapp.com/it/web/login.php",
                "https://google.com/amp/s/verifica-id-richiesta-intesasanpaolo.codeanyapp.com/it/web/login.php",
                "https://google.com/amp/s/engagefz.webflow.io",
                "https://inteee56678.blogspot.com/",
                "https://inteee6002.blogspot.com/",
                "https://intee7837832932.blogspot.com/",
                "https://google.com/amp/s/cgncollege.com/okis",
                "https://volcanoweb.nl/ho",
                "https://verifica-id-richiesta-intesasanpaolo.codeanyapp.com/it/web/login.php",
                "https://www.blogger.com/blogin.g?blogspotURL=https://inteee56678.blogspot.com/&type=blog",
                "https://djasdhu8234.blogspot.com/",
                "https://43423423432.blogspot.com/"
            ],
            "ipv4": [],
            "email": []
        },
        "email_victim": [],
        "ioca_version": "1.0",
        "organization": "cert-agid"
    },
    "7f2ac6b8-5c34-4b87-a1be-4743cec020ee": {
        "event_id": 17270,
        "created_at": "2024-11-25T08:24:31.604284+00:00",
        "updated_at": "2024-11-29T08:43:39.793766+00:00",
        "name": "Campagna di Phishing Intesa SanPaolo italiana via PEC",
        "description": "",
        "subject": "Intesa sanpaolo : Verifica Necessaria: Aggiornamento del Dispositivo.",
        "tlp": "0",
        "campaign_type": "phishing",
        "method": "linked",
        "country": "italy",
        "file_type": [],
        "theme": "Banking",
        "malware": null,
        "phishing": "IntesaSanpaolo",
        "via": "pec",
        "tag": [],
        "ioc_list": {
            "md5": [],
            "sha1": [],
            "sha256": [],
            "imphash": [],
            "domain": [
                "filiale-digitale-itt-intesasanpaolo-itt.codeanyapp.com",
                "sdasd323323.blogspot.com",
                "filiale-digitale-web-intesasanpaolo-itt.codeanyapp.com",
                "filiale-digitale-is-intesasanpaolo-itt.codeanyapp.com",
                "carezf.webflow.io",
                "verfica-dispositivo-richiesta-intesasanpaolo.codeanyapp.com",
                "zairip.webflow.io",
                "poszai.webflow.io",
                "filiale-digitale-on-intesasanpaolo-com.codeanyapp.com",
                "khjkjhlkhkl079.blogspot.com",
                "verifica-richiesta-richiesta-intesasanpaolo.codeanyapp.com",
                "tbibin212212.blogspot.com",
                "celestian.webflow.io",
                "inteade2321.blogspot.com",
                "verifica-id-richiesta-intesasanpaolo.codeanyapp.com",
                "dskadsa8223.blogspot.com"
            ],
            "url": [
                "https://sdasd323323.blogspot.com/",
                "https://www.google.com/amp/s/filiale-digitale-web-intesasanpaolo-itt.codeanyapp.com/it/web/login.php",
                "https://google.com/amp/s/filiale-digitale-web-intesasanpaolo-itt.codeanyapp.com/it/web/login.php",
                "https://filiale-digitale-web-intesasanpaolo-itt.codeanyapp.com/it/web/snd.php",
                "https://filiale-digitale-web-intesasanpaolo-itt.codeanyapp.com/it/web/login.php",
                "https://filiale-digitale-web-intesasanpaolo-itt.codeanyapp.com/it/web/load.php",
                "https://filiale-digitale-web-intesasanpaolo-itt.codeanyapp.com/it/web/load3.php",
                "https://filiale-digitale-web-intesasanpaolo-itt.codeanyapp.com/it/web/snd4.php",
                "https://filiale-digitale-web-intesasanpaolo-itt.codeanyapp.com/it/web/card.php",
                "https://filiale-digitale-web-intesasanpaolo-itt.codeanyapp.com/it/web/sms2.php",
                "https://filiale-digitale-web-intesasanpaolo-itt.codeanyapp.com/it/web/snd3.php",
                "https://filiale-digitale-web-intesasanpaolo-itt.codeanyapp.com/it/web/load2.php",
                "https://filiale-digitale-is-intesasanpaolo-itt.codeanyapp.com/it/web/login.php",
                "https://google.com/amp/s/filiale-digitale-is-intesasanpaolo-itt.codeanyapp.com/it/web/login.php",
                "https://filiale-digitale-is-intesasanpaolo-itt.codeanyapp.com/it/web/snd.php",
                "https://filiale-digitale-is-intesasanpaolo-itt.codeanyapp.com/it/web/snd4.php",
                "https://filiale-digitale-is-intesasanpaolo-itt.codeanyapp.com/it/web/snd3.php",
                "https://filiale-digitale-is-intesasanpaolo-itt.codeanyapp.com/it/web/load.php",
                "https://filiale-digitale-is-intesasanpaolo-itt.codeanyapp.com/it/web/card.php",
                "https://filiale-digitale-is-intesasanpaolo-itt.codeanyapp.com/it/web/load3.php",
                "https://filiale-digitale-is-intesasanpaolo-itt.codeanyapp.com/it/web/sms2.php",
                "https://verfica-dispositivo-richiesta-intesasanpaolo.codeanyapp.com/it/web/login.php",
                "https://carezf.webflow.io/",
                "https://zairip.webflow.io/",
                "https://google.com/amp/s/verfica-dispositivo-richiesta-intesasanpaolo.codeanyapp.com/it/web/login.php",
                "https://poszai.webflow.io/",
                "https://sdasjd323123.blogspot.com/",
                "https://google.com/amp/s/cgncollege.com/okis",
                "https://filiale-digitale-on-intesasanpaolo-com.codeanyapp.com/it/web/login.php",
                "https://engagefz.webflow.io/",
                "https://celestian.webflow.io/",
                "https://google.com/amp/s/celestian.webflow.io",
                "https://google.com/amp/s/engagefz.webflow.io",
                "https://verifica-richiesta-richiesta-intesasanpaolo.codeanyapp.com/",
                "https://khjkjhlkhkl079.blogspot.com/",
                "https://tbibin212212.blogspot.com/",
                "https://verifica-richiesta-richiesta-intesasanpaolo.codeanyapp.com/it/web/login.php",
                "https://verifica-richiesta-richiesta-intesasanpaolo.codeanyapp.com/it/web/",
                "https://inteade2321.blogspot.com/",
                "https://dskadsa8223.blogspot.com/",
                "https://verifica-id-richiesta-intesasanpaolo.codeanyapp.com/it/web/"
            ],
            "ipv4": [],
            "email": []
        },
        "email_victim": [],
        "ioca_version": "1.0",
        "organization": "cert-agid"
    },
    "9291b753-7dfe-466e-8cc7-461a32c99e54": {
        "event_id": 17313,
        "created_at": "2024-12-02T08:26:28.692847+00:00",
        "updated_at": "2024-12-04T15:35:31.516888+00:00",
        "name": "Campagna di Phishing IntesaSanpaolo italiana via PEC",
        "description": "",
        "subject": null,
        "tlp": "0",
        "campaign_type": "phishing",
        "method": "linked",
        "country": "italy",
        "file_type": [],
        "theme": "Banking",
        "malware": null,
        "phishing": "IntesaSanpaolo",
        "via": "pec",
        "tag": [],
        "ioc_list": {
            "md5": [],
            "sha1": [],
            "sha256": [],
            "imphash": [],
            "domain": [
                "richiesta-online-inetsasanpaolo-it-web.codeanyapp.com",
                "inegsyauds722.blogspot.com",
                "richiesta-online-intesasanpaolo-it-web.codeanyapp.com",
                "volcanoweb.nl",
                "richiesta-pratica-it-intesasanpaolo-it-web.codeanyapp.com",
                "dasdsad22.blogspot.com",
                "intee400444.blogspot.com",
                "intee9001.blogspot.com",
                "inte010101.blogspot.com"
            ],
            "url": [
                "https://richiesta-online-inetsasanpaolo-it-web.codeanyapp.com/it/web/login.php",
                "https://inegsyauds722.blogspot.com/",
                "https://volcanoweb.nl/ho",
                "https://richiesta-online-intesasanpaolo-it-web.codeanyapp.com/it/web/login.php",
                "https://google.com/amp/s/dasdsad22.blogspot.com",
                "https://richiesta-pratica-it-intesasanpaolo-it-web.codeanyapp.com/it/web/login.php",
                "https://intee400444.blogspot.com/",
                "https://richiesta-pratica-it-intesasanpaolo-it-web.codeanyapp.com/it/web/card.php",
                "https://richiesta-pratica-it-intesasanpaolo-it-web.codeanyapp.com/it/web/snd.php",
                "https://inte809.blogspot.com/",
                "https://intee9001.blogspot.com/",
                "https://inte010101.blogspot.com/",
                "https://volcanoweb.nl/jo"
            ],
            "ipv4": [],
            "email": []
        },
        "email_victim": [],
        "ioca_version": "1.0",
        "organization": "cert-agid"
    }
}