[ { "id": 4183394503, "indicator": "https://medhrrst.com/js.php", "type": "URL", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: KongTuke - payload_delivery", "expiration": null, "is_active": 1 }, { "id": 4183028908, "indicator": "medhrrst.com", "type": "domain", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: KongTuke - payload_delivery", "expiration": null, "is_active": 1 }, { "id": 4183394504, "indicator": "https://medhrrst.com/1h6f.js", "type": "URL", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: KongTuke - payload_delivery", "expiration": null, "is_active": 1 }, { "id": 4183391611, "indicator": "zx88.ae.org", "type": "hostname", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Quasar RAT - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4183391612, "indicator": "vibrations.ru.com", "type": "hostname", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Quasar RAT - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4183391613, "indicator": "mfd.uk.com", "type": "hostname", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Quasar RAT - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4183391614, "indicator": "kaf.uk.com", "type": "hostname", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Quasar RAT - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4183391615, "indicator": "fastandfastairconditioner.in.net", "type": "domain", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Quasar RAT - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4183391616, "indicator": "a9wi86h.uk.com", "type": "hostname", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Quasar RAT - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4183380093, "indicator": "http://118.31.168.221:80/IQQr", "type": "URL", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Cobalt Strike - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4183374985, "indicator": "https://www.appleslicesllc.com/", "type": "URL", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Unknown malware - payload_delivery", "expiration": null, "is_active": 1 }, { "id": 4183372351, "indicator": "xxblessing2026now.duckdns.org", "type": "hostname", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: XWorm - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4183042444, "indicator": "panel.kalygenesis.xyz", "type": "hostname", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Unknown Stealer - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4182618327, "indicator": "gl1g7tts-5500.euw.devtunnels.ms", "type": "hostname", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Agent Tesla - payload_delivery", "expiration": null, "is_active": 1 }, { "id": 4183343668, "indicator": "https://mebelinki.ru/xamster.html", "type": "URL", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Unknown malware - payload_delivery", "expiration": null, "is_active": 1 }, { "id": 4183343669, "indicator": "https://kinugort.ru/xhamster.html", "type": "URL", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Unknown malware - payload_delivery", "expiration": null, "is_active": 1 }, { "id": 4183360624, "indicator": "https://cdn.jsdelivr.net/gh/brush-tablet-win7/tg-sector-add/dare", "type": "URL", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: ClearFake - payload_delivery", "expiration": null, "is_active": 1 }, { "id": 4183356440, "indicator": "atlretf7m.localto.net", "type": "hostname", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: SpyNote - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4183355970, "indicator": "http://172.86.66.132", "type": "URL", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Stealc - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4183355971, "indicator": "http://159.198.75.187", "type": "URL", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Stealc - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4183355972, "indicator": "us-neuroquiet.co.com", "type": "hostname", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: AsyncRAT - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4183342098, "indicator": "losespadadz.myftp.biz", "type": "hostname", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: XWorm - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4183345032, "indicator": "http://astrologickeconoablos.cc:8080/updater?for=E0CD6A53D52A08539A9787E388FF1D3B", "type": "URL", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Unknown malware - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4183243907, "indicator": "tosifu.jp.net", "type": "hostname", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: AsyncRAT - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4183243908, "indicator": "nuestraboda.it.com", "type": "hostname", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: AsyncRAT - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4183243909, "indicator": "dc2.sa.com", "type": "hostname", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: AsyncRAT - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4183243910, "indicator": "chl.ru.com", "type": "hostname", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: AsyncRAT - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4183224428, "indicator": "https://cdn.jsdelivr.net/gh/ws40-delta-xchg-fab8/23phys-step2-det-sim/asset-mgr11", "type": "URL", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: ClearFake - payload_delivery", "expiration": null, "is_active": 1 }, { "id": 4183221755, "indicator": "http://thesavvyplayer.com/images/view.php", "type": "URL", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Pony - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4183183131, "indicator": "1.ooocyber.cfd", "type": "hostname", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Unknown malware - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4183183132, "indicator": "2.ooocyber.cfd", "type": "hostname", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Unknown malware - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4183183133, "indicator": "3.ooocyber.cfd", "type": "hostname", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Unknown malware - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4183183134, "indicator": "cdn-css-framework.cfd", "type": "domain", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Unknown malware - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4183183135, "indicator": "cpass.verf-secu4u.art", "type": "hostname", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Unknown malware - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4183183136, "indicator": "js-framework.cfd", "type": "domain", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Unknown malware - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4183183137, "indicator": "cdn-js-connection.cfd", "type": "domain", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Unknown malware - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4183183138, "indicator": "update211.security-ssa-gov.com", "type": "hostname", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Unknown malware - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 2725558409, "indicator": "winiks.com", "type": "domain", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Unknown malware - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4183183139, "indicator": "https://cdn-js-connection.cfd/admin/login.php", "type": "URL", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Unknown malware - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4183183140, "indicator": "https://cpass.verf-secu4u.art/admin/login.php", "type": "URL", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Unknown malware - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4183183141, "indicator": "https://js-framework.cfd/admin/login.php", "type": "URL", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Unknown malware - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4183183142, "indicator": "https://update211.security-ssa-gov.com/admin/login.php", "type": "URL", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Unknown malware - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4183183143, "indicator": "https://winiks.com/admin/login.php", "type": "URL", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Unknown malware - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4183183144, "indicator": "http://cdn-css-framework.cfd/admin/login.php", "type": "URL", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Unknown malware - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4183183145, "indicator": "http://cpass.verf-secu4u.art/admin/login.php", "type": "URL", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Unknown malware - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4183183146, "indicator": "http://js-framework.cfd/admin/login.php", "type": "URL", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Unknown malware - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4183183147, "indicator": "https://1.ooocyber.cfd/admin/login.php", "type": "URL", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Unknown malware - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4183183148, "indicator": "https://2.ooocyber.cfd/admin/login.php", "type": "URL", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Unknown malware - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4183183149, "indicator": "https://3.ooocyber.cfd/admin/login.php", "type": "URL", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Unknown malware - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4183183150, "indicator": "https://cdn-css-framework.cfd/admin/login.php", "type": "URL", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Unknown malware - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4183183151, "indicator": "http://1.ooocyber.cfd/admin/login.php", "type": "URL", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Unknown malware - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4183183152, "indicator": "http://2.ooocyber.cfd/admin/login.php", "type": "URL", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Unknown malware - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4183183153, "indicator": "http://3.ooocyber.cfd/admin/login.php", "type": "URL", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Unknown malware - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4183182575, "indicator": "https://cdn.jsdelivr.net/gh/ws40-delta-xchg-fab8/unity-rt-net-sync-exp/v65-sd45-asd102", "type": "URL", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: ClearFake - payload_delivery", "expiration": null, "is_active": 1 }, { "id": 4183182576, "indicator": "https://31.13.208.13/admin/login.php", "type": "URL", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Unknown malware - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4183182577, "indicator": "https://144.31.14.196/admin/login.php", "type": "URL", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Unknown malware - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4183182578, "indicator": "https://89.110.75.193/admin/login.php", "type": "URL", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Unknown malware - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4183182579, "indicator": "https://45.8.93.242/admin/login.php", "type": "URL", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Unknown malware - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4183182580, "indicator": "https://64.188.66.221/admin/login.php", "type": "URL", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Unknown malware - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4183118896, "indicator": "otraprueba.ddnsfree.com", "type": "hostname", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: AsyncRAT - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4183100347, "indicator": "wsergoijnrjewgewr.duckdns.org", "type": "hostname", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Mirai - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 3832393597, "indicator": "boats.kaisenc2.online", "type": "hostname", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Mirai - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 3785270096, "indicator": "cooldockmantoo.men", "type": "domain", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Mirai - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4183042443, "indicator": "prime6.idmkt.info", "type": "hostname", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Mirai - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 3816184494, "indicator": "dsfasdfasdfasd.online", "type": "domain", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Mirai - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 3816184488, "indicator": "oosdfewugsd.online", "type": "domain", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Mirai - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 3816184486, "indicator": "rrsadtfusdf.online", "type": "domain", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Mirai - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4183039661, "indicator": "shzkagxdv.localto.net", "type": "hostname", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: SpyNote - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4183039662, "indicator": "0p7wfcoia.localto.net", "type": "hostname", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: SpyNote - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4183039663, "indicator": "gtour26.myftp.org", "type": "hostname", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Quasar RAT - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4183039664, "indicator": "adobecreativecloud.duckdns.org", "type": "hostname", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: XWorm - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4183039665, "indicator": "edition-pulled.gl.at.ply.gg", "type": "hostname", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: XWorm - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4182958657, "indicator": "wilknnson.com", "type": "domain", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: KongTuke - payload_delivery", "expiration": null, "is_active": 1 }, { "id": 4182958656, "indicator": "https://wilknnson.com/js.php", "type": "URL", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: KongTuke - payload_delivery", "expiration": null, "is_active": 1 }, { "id": 4182958655, "indicator": "https://touchkasablanka.com/api/public-server.js", "type": "URL", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: NetSupportManager RAT - payload_delivery", "expiration": null, "is_active": 1 }, { "id": 4182958654, "indicator": "https://touchkasablanka.com/api/api-module.php", "type": "URL", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: NetSupportManager RAT - payload_delivery", "expiration": null, "is_active": 1 }, { "id": 4182958653, "indicator": "https://touchkasablanka.com/api/handler-service.js", "type": "URL", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: NetSupportManager RAT - payload_delivery", "expiration": null, "is_active": 1 }, { "id": 4182958652, "indicator": "http://79.141.162.189/web", "type": "URL", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: NetSupportManager RAT - payload_delivery", "expiration": null, "is_active": 1 }, { "id": 4182958651, "indicator": "https://minaretish.com/web", "type": "URL", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: NetSupportManager RAT - payload_delivery", "expiration": null, "is_active": 1 }, { "id": 4182958650, "indicator": "https://79.141.162.189/socket", "type": "URL", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: NetSupportManager RAT - payload_delivery", "expiration": null, "is_active": 1 }, { "id": 4182966733, "indicator": "dl.zeekitchenandbathdesign.com", "type": "hostname", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: FAKEUPDATES - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4182972984, "indicator": "https://operiteons.com/api/api-module.php", "type": "URL", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: NetSupportManager RAT - payload_delivery", "expiration": null, "is_active": 1 }, { "id": 4182972983, "indicator": "operiteons.com", "type": "domain", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: NetSupportManager RAT - payload_delivery", "expiration": null, "is_active": 1 }, { "id": 4182972982, "indicator": "https://operiteons.com/api/handler-service.js", "type": "URL", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: NetSupportManager RAT - payload_delivery", "expiration": null, "is_active": 1 }, { "id": 4183029215, "indicator": "static.urgaacoffeeroastery.com", "type": "hostname", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: FAKEUPDATES - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4182958658, "indicator": "https://wilknnson.com/6j6s.js", "type": "URL", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: KongTuke - payload_delivery", "expiration": null, "is_active": 1 }, { "id": 4169566562, "indicator": "filipsesperanto.com", "type": "domain", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: DeerStealer - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4183028578, "indicator": "seramyuthrenodycollect.com", "type": "domain", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: DeerStealer - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4182991035, "indicator": "https://cdn.jsdelivr.net/gh/fxd2-tickstep-sim-loop10/net-pred-rollback-testbed/scene9-strm3-16", "type": "URL", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: ClearFake - payload_delivery", "expiration": null, "is_active": 1 }, { "id": 4182976820, "indicator": "http://103.101.85.56/a9a8e5e72d1378b6.php", "type": "URL", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Stealc - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4182974195, "indicator": "http://103.101.85.56", "type": "URL", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Stealc - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4182970300, "indicator": "d2d.agfoodpos.com", "type": "hostname", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Vidar - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4182970301, "indicator": "severo.mobilefoundationrepair.com", "type": "hostname", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Vidar - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4182970302, "indicator": "zak.agfoodpos.com", "type": "hostname", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Vidar - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4182970303, "indicator": "sixoro.mobilefoundationrepair.com", "type": "hostname", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Vidar - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4182970304, "indicator": "fettorer.mobilefoundationrepair.com", "type": "hostname", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Vidar - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4182970305, "indicator": "https://116.202.184.153/", "type": "URL", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Vidar - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4182970306, "indicator": "https://77.42.49.39/", "type": "URL", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Vidar - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4182970307, "indicator": "https://193.221.201.197/", "type": "URL", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Vidar - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4182970308, "indicator": "https://49.13.37.244/", "type": "URL", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Vidar - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4182970309, "indicator": "https://77.42.49.40/", "type": "URL", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Vidar - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4182970310, "indicator": "https://zak.agfoodpos.com/", "type": "URL", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Vidar - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4182970311, "indicator": "https://sixoro.mobilefoundationrepair.com/", "type": "URL", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Vidar - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4182970312, "indicator": "https://d2d.agfoodpos.com/", "type": "URL", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Vidar - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4182970313, "indicator": "https://severo.mobilefoundationrepair.com/", "type": "URL", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Vidar - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4182970314, "indicator": "https://78.47.103.17/", "type": "URL", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Vidar - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4182970315, "indicator": "https://fettorer.mobilefoundationrepair.com/", "type": "URL", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Vidar - botnet_cc", "expiration": null, "is_active": 1 }, { "id": 4182966734, "indicator": "costactspreadinf.duckdns.org", "type": "hostname", "created": "2026-01-21T08:20:33", "content": "", "title": "", "description": "ThreatFox: Remcos - botnet_cc", "expiration": null, "is_active": 1 } ]