{
  "name": "Threat Research Report: Malicious Domain Activity During the Los Angeles Wildfires",
  "slug": "threat-research-report-malicious-domain-activity-during-the-los-angeles-wildfires",
  "description": "During the 2025 Los Angeles wildfires, cybercriminals exploited the disaster through various phishing campaigns. Analysis of 119 domains registered between January 8-13, 2025, revealed themes targeting emergency assistance, legal services, and reconstruction efforts. GoDaddy was the most used registrar, and .com the prevalent TLD. Fraudulent GoFundMe campaigns, fake merchandise stores, and wildfire-themed cryptocurrencies were identified. The scams aimed to cause financial losses, harvest personal information, and spread misinformation. Compared to Hurricane Helene, the wildfire scams were more reactive and locally focused. Mitigation strategies include stringent rules for fundraising platforms, continuous monitoring of fake websites, and caution against unverified cryptocurrencies.",
  "published": "2025-01-17T17:13:51+00:00",
  "created_at": "2025-01-17T17:13:51+00:00",
  "modified_at": "2025-01-20T08:59:18+00:00",
  "created_at_opencti": "2025-01-17T17:13:51+00:00",
  "author": "",
  "confidence": null,
  "report_types": [],
  "labels": [],
  "tags": [
    "2025-01-17",
    "los angeles wildfires",
    "natural disaster exploitation",
    "phishing",
    "social engineering"
  ],
  "related_entities": {
    "observables": [
      {
        "id": "",
        "name": "uclafire.org"
      },
      {
        "id": "",
        "name": "thelosangelescompany.com"
      },
      {
        "id": "",
        "name": "thehostlosangeles.com"
      },
      {
        "id": "",
        "name": "taximonserratelosangeles.com"
      },
      {
        "id": "",
        "name": "taxilosangelesca.com"
      },
      {
        "id": "",
        "name": "showuplosangeles.com"
      },
      {
        "id": "",
        "name": "renewlosangeles.com"
      },
      {
        "id": "",
        "name": "reconstructionlosangeles.com"
      },
      {
        "id": "",
        "name": "rebuildlosangelesnow.com"
      },
      {
        "id": "",
        "name": "rebuildlosangeles.net"
      },
      {
        "id": "",
        "name": "rebuildlafires.com"
      },
      {
        "id": "",
        "name": "rebuildinglosangelestogether.com"
      },
      {
        "id": "",
        "name": "rebuildafterlafire.com"
      },
      {
        "id": "",
        "name": "querylosangeles.com"
      },
      {
        "id": "",
        "name": "poolslafires.com"
      },
      {
        "id": "",
        "name": "officiallosangeleskings.com"
      },
      {
        "id": "",
        "name": "lovelafirerelief.org"
      },
      {
        "id": "",
        "name": "microneedlinglosangeles.com"
      },
      {
        "id": "",
        "name": "losangeleswildfires.info"
      },
      {
        "id": "",
        "name": "losangeleswildfire.site"
      },
      {
        "id": "",
        "name": "losangeleswasteremoval.com"
      },
      {
        "id": "",
        "name": "losangelesstructuralwork.com"
      },
      {
        "id": "",
        "name": "losangelesstrong.net"
      },
      {
        "id": "",
        "name": "losangelesplumbingsrvs.com"
      },
      {
        "id": "",
        "name": "losangelesplumberco.com"
      },
      {
        "id": "",
        "name": "losangelespatiocoversco.com"
      },
      {
        "id": "",
        "name": "losangelesjunkremovalco.com"
      },
      {
        "id": "",
        "name": "losangeleshaulingco.com"
      },
      {
        "id": "",
        "name": "losangelesfireslawyers.com"
      },
      {
        "id": "",
        "name": "losangelesfireslawyer.com"
      },
      {
        "id": "",
        "name": "losangelesfiresclaimslawyers.com"
      },
      {
        "id": "",
        "name": "losangelesfiresclaimslawyer.com"
      },
      {
        "id": "",
        "name": "losangelesfiresclaimsattorneys.com"
      },
      {
        "id": "",
        "name": "losangelesfiresclaimsattorney.com"
      },
      {
        "id": "",
        "name": "losangelesfiresclaims.com"
      },
      {
        "id": "",
        "name": "losangelesfiresattorneys.com"
      },
      {
        "id": "",
        "name": "losangelesfiresattorney.com"
      },
      {
        "id": "",
        "name": "losangelesfirelawfirm.com"
      },
      {
        "id": "",
        "name": "losangelesfiredefenders.com"
      },
      {
        "id": "",
        "name": "losangelesfiredepartment.com"
      },
      {
        "id": "",
        "name": "losangelesdebrisremoval.com"
      },
      {
        "id": "",
        "name": "losangelesconstructionco.com"
      },
      {
        "id": "",
        "name": "losangelescleanups.com"
      },
      {
        "id": "",
        "name": "losangelescastructuralwork.com"
      },
      {
        "id": "",
        "name": "losangelescajunkremoval.com"
      },
      {
        "id": "",
        "name": "losangelescadebrisremoval.com"
      },
      {
        "id": "",
        "name": "losangelescacleanups.com"
      },
      {
        "id": "",
        "name": "losangelescabuilding.com"
      },
      {
        "id": "",
        "name": "losangelesbuildingco.com"
      },
      {
        "id": "",
        "name": "losangeles.stream"
      },
      {
        "id": "",
        "name": "losangeles-rebuild.com"
      },
      {
        "id": "",
        "name": "lawildfiresclaim.com"
      },
      {
        "id": "",
        "name": "lawildfires.net"
      },
      {
        "id": "",
        "name": "lawildfire2025.com"
      },
      {
        "id": "",
        "name": "lawildfire.org"
      },
      {
        "id": "",
        "name": "lawildfire.law"
      },
      {
        "id": "",
        "name": "lafirevictimsnextsteps.com"
      },
      {
        "id": "",
        "name": "lafireswim.com"
      },
      {
        "id": "",
        "name": "lafiresupport.org"
      },
      {
        "id": "",
        "name": "lafiresreliefhub.com"
      },
      {
        "id": "",
        "name": "lafiresue.com"
      },
      {
        "id": "",
        "name": "lafiresrelief.com"
      },
      {
        "id": "",
        "name": "lafiresrebuildhomes.com"
      },
      {
        "id": "",
        "name": "lafiresprinkler.com"
      },
      {
        "id": "",
        "name": "lafireshomerebuild.com"
      },
      {
        "id": "",
        "name": "lafiresconstruction.com"
      },
      {
        "id": "",
        "name": "lafiresbuild.com"
      },
      {
        "id": "",
        "name": "lafiresales.com"
      },
      {
        "id": "",
        "name": "lafiresale.com"
      },
      {
        "id": "",
        "name": "lafiresauce.com"
      },
      {
        "id": "",
        "name": "lafireresources.org"
      },
      {
        "id": "",
        "name": "lafires.fund"
      },
      {
        "id": "",
        "name": "lafirerecoveryguide.com"
      },
      {
        "id": "",
        "name": "lafirepools.com"
      },
      {
        "id": "",
        "name": "lafirepool.net"
      },
      {
        "id": "",
        "name": "lafireonsol.xyz"
      },
      {
        "id": "",
        "name": "lafiremap.org"
      },
      {
        "id": "",
        "name": "lafirepermits.com"
      },
      {
        "id": "",
        "name": "lafirelegalhelp.com"
      },
      {
        "id": "",
        "name": "lafireinventory.com"
      },
      {
        "id": "",
        "name": "lafireinsuranceclaims.com"
      },
      {
        "id": "",
        "name": "lafirehelpline.com"
      },
      {
        "id": "",
        "name": "lafiredisasters.com"
      },
      {
        "id": "",
        "name": "lafiredocumentary.com"
      },
      {
        "id": "",
        "name": "lafiredisaster.com"
      },
      {
        "id": "",
        "name": "lafiredebrisremoval.com"
      },
      {
        "id": "",
        "name": "lafirediaries.com"
      },
      {
        "id": "",
        "name": "lafirecleanupcrews.com"
      },
      {
        "id": "",
        "name": "lafirecleanupcrew.com"
      },
      {
        "id": "",
        "name": "lafireclassicmusclecarsappraisals.online"
      },
      {
        "id": "",
        "name": "lafireclassicmusclecarsappraisals.com"
      },
      {
        "id": "",
        "name": "lafireclassiccarappraisals75persentdiscount.online"
      },
      {
        "id": "",
        "name": "lafireclassiccarappraisals75persentdiscount.com"
      },
      {
        "id": "",
        "name": "lafireclassiccarappraisals.online"
      },
      {
        "id": "",
        "name": "lafireclassiccarappraisal.store"
      },
      {
        "id": "",
        "name": "lafireclassiccarappraisals.com"
      },
      {
        "id": "",
        "name": "lafireclassiccarappraisal.online"
      },
      {
        "id": "",
        "name": "lafirebusiness.com"
      },
      {
        "id": "",
        "name": "lafireclassiccarappraisal.com"
      },
      {
        "id": "",
        "name": "lafirebiz.com"
      },
      {
        "id": "",
        "name": "lafireappraisalstonybegleyclassicmusclecars.online"
      },
      {
        "id": "",
        "name": "lafireappraisalstonybegleyclassicmusclecars.com"
      },
      {
        "id": "",
        "name": "lafireaidhub.com"
      },
      {
        "id": "",
        "name": "lafire25.com"
      },
      {
        "id": "",
        "name": "lafire.fund"
      },
      {
        "id": "",
        "name": "lafire.live"
      },
      {
        "id": "",
        "name": "helplafire.com"
      },
      {
        "id": "",
        "name": "gofundlafires.org"
      },
      {
        "id": "",
        "name": "gofundlafires.com"
      },
      {
        "id": "",
        "name": "fundlafires.org"
      },
      {
        "id": "",
        "name": "fundlafires.com"
      },
      {
        "id": "",
        "name": "fireattorneylosangeles.com"
      },
      {
        "id": "",
        "name": "findmypetlafires.com"
      },
      {
        "id": "",
        "name": "etaxilosangeles.com"
      },
      {
        "id": "",
        "name": "diamondpaintinglosangeles.com"
      },
      {
        "id": "",
        "name": "coachesforlosangeles.org"
      },
      {
        "id": "",
        "name": "2025lafire.com"
      },
      {
        "id": "",
        "name": "centurylosangeles.com"
      },
      {
        "id": "",
        "name": "lafires.support"
      }
    ],
    "attack_patterns": [
      {
        "id": "79525d9e-3824-4347-a471-7dcea20fd864",
        "name": "T1583.006"
      },
      {
        "id": "75702b35-b790-4504-a1e0-7829e76f22e9",
        "name": "T1585"
      },
      {
        "id": "d19f56ca-5ce8-4bd1-af90-7d83e394470c",
        "name": "T1583.001"
      },
      {
        "id": "ef72da1d-2eaa-4d94-8913-06978609cfb4",
        "name": "T1608.001"
      },
      {
        "id": "2969e5a7-1049-4df8-b1ba-8a0675de6b94",
        "name": "T1589"
      },
      {
        "id": "6babd5aa-5112-4f14-a660-60d756a65d6d",
        "name": "T1586"
      },
      {
        "id": "74d5f31c-5e2d-4aed-b8b9-4fabdde76dfa",
        "name": "T1598"
      },
      {
        "id": "c340d47a-2ea8-41ca-9a0b-a72559b89bbf",
        "name": "T1584"
      },
      {
        "id": "d9b45b3b-d093-4016-89e9-48f31ff4d05d",
        "name": "T1566"
      }
    ],
    "others": [
      {
        "id": "",
        "name": "United States of America"
      }
    ]
  },
  "external_refs": [
    "https://bfore.ai/malicious-domain-activity-during-the-los-angeles-wildfires/",
    "https://otx.alienvault.com/pulse/678a9ddf34dda84c442583b5"
  ]
}