[
 {
  "value": "com.utils.launcher",
  "type": "domain",
  "first_seen": "2026-09-10",
  "last_seen": "2026-09-10",
  "status": "expired",
  "confidence": "reported",
  "n_sources": 1,
  "stories": [
   "macsync-the-evasive-macos-stealer-exploiting-clickfix-lures"
  ],
  "sources": [
   "https://cyberpress.org/macsync-clickfix-wallet-heist/"
  ],
  "reason": "MacSync macOS stealer process bundle identifier (ClickFix delivery)"
 }
]