{"success":true,"data":{"id":"dora-incident-phish","label":"Fake DORA / ICT incident mandatory notification lure — urgency + off-europa.eu link.","description":"Fake DORA (Digital Operational Resilience Act, Regulation EU 2022/2554) ICT incident mandatory notification lure. Attackers impersonate EU regulatory bodies with fake \"mandatory ICT incident report required — notify within 4 hours or face non-compliance fines\" emails linking to off-europa.eu portals. Real DORA supervisory notifications come from official EBA/ESMA/EIOPA channels on europa.eu. Fires when: DORA brand/ICT incident vocabulary + mandatory notification urgency + all hrefs off europa.eu + no List-Unsubscribe + no In-Reply-To. Source: GE-R8; ESMA DORA advisory 2025.","tier":"danger","category":"phishing","isThin":false}}