[
  {
    "id": 4185627627,
    "indicator": "velikieluki.logomebel.ru",
    "type": "hostname",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627628,
    "indicator": "yalta.logomebel.ru",
    "type": "hostname",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4071107196,
    "indicator": "yvngvualr.com",
    "type": "domain",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627629,
    "indicator": "release-notes.us",
    "type": "domain",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627630,
    "indicator": "tileroofinglasvegas.brandonwyatt.website",
    "type": "hostname",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627631,
    "indicator": "seminariodiocesedejanauba.com.br.agenciadelivearte.com.br",
    "type": "hostname",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627632,
    "indicator": "translator.isotoop.be",
    "type": "hostname",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627633,
    "indicator": "pauloeduardodemelo1744295722000.kbral.com.br",
    "type": "hostname",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627634,
    "indicator": "mrsillucia.de",
    "type": "domain",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627635,
    "indicator": "partner.naturigin.hu",
    "type": "hostname",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627636,
    "indicator": "evolvedesign.co.za",
    "type": "domain",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627637,
    "indicator": "efes.co.il",
    "type": "domain",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627638,
    "indicator": "astermedica.ru",
    "type": "domain",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627639,
    "indicator": "concretestampingandstaining.brandonwyatt.website",
    "type": "hostname",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627640,
    "indicator": "wurk.africa",
    "type": "domain",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627641,
    "indicator": "bo.cerisecosmetique.com",
    "type": "hostname",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627642,
    "indicator": "apellanizydesosa.com",
    "type": "domain",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627643,
    "indicator": "vellenso.ru",
    "type": "domain",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627644,
    "indicator": "v1.estismail.com",
    "type": "hostname",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627645,
    "indicator": "wp.thecelticclassic.net",
    "type": "hostname",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627646,
    "indicator": "treat.kusherp.com",
    "type": "hostname",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627647,
    "indicator": "visuapex.com",
    "type": "domain",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627648,
    "indicator": "webdisk.blancosettlement.com",
    "type": "hostname",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627649,
    "indicator": "uggtrade.ru",
    "type": "domain",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 2767257788,
    "indicator": "visitbundala.com",
    "type": "domain",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627650,
    "indicator": "solid-master.com",
    "type": "domain",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4167931859,
    "indicator": "theinvestworthy.com",
    "type": "domain",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627651,
    "indicator": "social.priestv.com",
    "type": "hostname",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627652,
    "indicator": "sitepapelaria.edsure.com.br",
    "type": "hostname",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627653,
    "indicator": "senioryuyu.com",
    "type": "domain",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627654,
    "indicator": "surecomforts.com",
    "type": "domain",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627655,
    "indicator": "san-antonio.concretestampingandstaining.com",
    "type": "hostname",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627656,
    "indicator": "pulsebeatrecords.com",
    "type": "domain",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627657,
    "indicator": "noticq.site.tb-hosting.com",
    "type": "hostname",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627658,
    "indicator": "noticiasimpactotlaxcala.pro",
    "type": "domain",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627659,
    "indicator": "meimeilab.com",
    "type": "domain",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627660,
    "indicator": "mail.polbath.co.uk",
    "type": "hostname",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627661,
    "indicator": "mail.seminariodiocesedejanauba.com.br",
    "type": "hostname",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627662,
    "indicator": "mail.talkagency.com.br",
    "type": "hostname",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627663,
    "indicator": "mail.hostwala.in",
    "type": "hostname",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627664,
    "indicator": "mail.smartbowls.co.za",
    "type": "hostname",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627665,
    "indicator": "mail.qbb.nmi.mybluehost.me",
    "type": "hostname",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627666,
    "indicator": "mail.panorama-g.com",
    "type": "hostname",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627667,
    "indicator": "mail.qualitylivingpm.com",
    "type": "hostname",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627668,
    "indicator": "mail.optimumfl.org",
    "type": "hostname",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627669,
    "indicator": "mail.mo-ag.co.uk",
    "type": "hostname",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627670,
    "indicator": "mail.gorillahealth.org",
    "type": "hostname",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627671,
    "indicator": "mail.dk-decor.com",
    "type": "hostname",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627672,
    "indicator": "mail.domonova.co.ao",
    "type": "hostname",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627673,
    "indicator": "mail.cspalguber.pt",
    "type": "hostname",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627674,
    "indicator": "mail.criptocontrol.com.br",
    "type": "hostname",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627675,
    "indicator": "mail.copiousinfotech.com",
    "type": "hostname",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627676,
    "indicator": "kiemdinhxdcongtrinh.duyviet.asia",
    "type": "hostname",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627677,
    "indicator": "lacasadelsoleets.it",
    "type": "domain",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627678,
    "indicator": "imeldaespinoza.com",
    "type": "domain",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627679,
    "indicator": "hrdevelopment.jp",
    "type": "domain",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627680,
    "indicator": "ima0909.com",
    "type": "domain",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627681,
    "indicator": "ivanovo.logomebel.ru",
    "type": "hostname",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627682,
    "indicator": "hostmaster.extracareliving.com",
    "type": "hostname",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627683,
    "indicator": "imap.bldg-envelope.com",
    "type": "hostname",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627684,
    "indicator": "hospital.iqwing.live",
    "type": "hostname",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627685,
    "indicator": "guestpertpublishing.com",
    "type": "domain",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627686,
    "indicator": "example.adbuthab.com",
    "type": "hostname",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627687,
    "indicator": "fenixcesmape.ahipnologa.com",
    "type": "hostname",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627688,
    "indicator": "feature.rinkroster.com",
    "type": "hostname",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 2627693662,
    "indicator": "elive123go.com",
    "type": "domain",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627689,
    "indicator": "data4study.sbitransport.com",
    "type": "hostname",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627690,
    "indicator": "countryhouse.asia",
    "type": "domain",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 2624883320,
    "indicator": "createubebeni.com",
    "type": "domain",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627691,
    "indicator": "doorsleeds.co.uk",
    "type": "domain",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627692,
    "indicator": "cpcontacts.hotelthilanka.com",
    "type": "hostname",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3353442227,
    "indicator": "chinana5.com",
    "type": "domain",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627693,
    "indicator": "caminosac.com",
    "type": "domain",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627694,
    "indicator": "camprosa.com",
    "type": "domain",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3987217658,
    "indicator": "chehov51.com",
    "type": "domain",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627695,
    "indicator": "calmost-hair.com",
    "type": "domain",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627696,
    "indicator": "chaparcast.com",
    "type": "domain",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627697,
    "indicator": "cloud.sigmamarketing.eu",
    "type": "hostname",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627698,
    "indicator": "blagoveshchensk.logomebel.ru",
    "type": "hostname",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627699,
    "indicator": "bibianaalves.com.br",
    "type": "domain",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627700,
    "indicator": "blog.infogenius.fr",
    "type": "hostname",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627701,
    "indicator": "812blog.com",
    "type": "domain",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627702,
    "indicator": "barricrafts.sidechain.es",
    "type": "hostname",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627703,
    "indicator": "binbinartgallery.com",
    "type": "domain",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627704,
    "indicator": "51b7d1a091.nxcli.net",
    "type": "hostname",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185627705,
    "indicator": "acc.ottobarkhuis.nl",
    "type": "hostname",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185607689,
    "indicator": "https://voidstealer.net/",
    "type": "URL",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Void - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4183216899,
    "indicator": "http://151.243.213.58/d.sh",
    "type": "URL",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown malware - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185595374,
    "indicator": "https://nice1688.github.io/",
    "type": "URL",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Lumma Stealer - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185596761,
    "indicator": "hollow-paper.info",
    "type": "domain",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: SantaStealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185599216,
    "indicator": "https://hollow-paper.info/",
    "type": "URL",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: SantaStealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185599217,
    "indicator": "capitamx.cyou",
    "type": "domain",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Lumma Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185599218,
    "indicator": "personrg.cyou",
    "type": "domain",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Lumma Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185592019,
    "indicator": "www.micrcscft.cyou",
    "type": "hostname",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Cobalt Strike - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185592020,
    "indicator": "http://94.26.90.74/537e2870ea5a48dd.php",
    "type": "URL",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Stealc - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185589609,
    "indicator": "ggjvk3v5bzopisqkf7kd5el2j40gdgcu.lambda-url.ap-southeast-1.on.aws",
    "type": "hostname",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Cobalt Strike - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185589451,
    "indicator": "https://cdn.jsdelivr.net/gh/paper-skydiver-drv8/crispy-machine-band3/projz",
    "type": "URL",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: ClearFake - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185457076,
    "indicator": "homencck.com",
    "type": "domain",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: KongTuke - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185457077,
    "indicator": "https://homencck.com/5s5t.js",
    "type": "URL",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: KongTuke - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185457075,
    "indicator": "https://homencck.com/js.php",
    "type": "URL",
    "created": "2026-01-24T17:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: KongTuke - payload_delivery",
    "expiration": null,
    "is_active": 1
  }
]