iremoval[.]app

Posts referencing this indicator

• Lookalike Domains Expose the iPhone Theft Economy

  Domain hosting the API endpoint used by the threat actor's automated Google Safe Browsing evasion script.

  2026-05-14