Threat intelligence indicators

Result: bba.com
Domain - STIX 2.1
{
  "created": "2026-04-24T15:03:13.588078Z",
  "description": "dnstwister result indicator for FQDN bba.com",
  "id": "indicator--a8644b4e-08c6-4a78-9a74-5bdde5546e43",
  "modified": "2026-04-24T15:03:13.588078Z",
  "name": "FQDN bba.com",
  "pattern": "[network-traffic:dst_ref.type = 'domain-name' AND network-traffic:dst_ref.value = 'bba.com'] OR [domain-name:value = 'bba.com']",
  "pattern_type": "stix",
  "pattern_version": "2.1",
  "spec_version": "2.1",
  "type": "indicator",
  "valid_from": "2026-04-24T15:03:13.588078Z"
}
download
URL (wildcard) - STIX 2.1
{
  "created": "2026-04-24T15:03:13.590611Z",
  "description": "dnstwister result indicator for URL (wildcard) bba.com",
  "id": "indicator--735af721-ddaf-46e4-b8da-c7f9d255370d",
  "modified": "2026-04-24T15:03:13.590611Z",
  "name": "URL (wildcard) bba.com",
  "pattern": "[url:value LIKE '%://bba.com%']",
  "pattern_type": "stix",
  "pattern_version": "2.1",
  "spec_version": "2.1",
  "type": "indicator",
  "valid_from": "2026-04-24T15:03:13.590611Z"
}
download

If you have any suggestions for other indicators we should include we'd love to hear from you.