[
  {
    "id": 4186204497,
    "indicator": "https://cdn.jsdelivr.net/gh/paper-skydiver-drv8/crispy-machine-band3/trans1at",
    "type": "URL",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: ClearFake - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185661986,
    "indicator": "http://ldark.nm.ru/ind",
    "type": "URL",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: Berbew - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185661987,
    "indicator": "http://devx.nm.ru/inde",
    "type": "URL",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: Berbew - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4177254412,
    "indicator": "enemy1.no-ip.info",
    "type": "hostname",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: DarkComet - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 2786867616,
    "indicator": "genetichax.no-ip.biz",
    "type": "hostname",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: DarkComet - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185661984,
    "indicator": "kc15.no-ip.info",
    "type": "hostname",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: DarkComet - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 2786823405,
    "indicator": "poisonivy1.no-ip.org",
    "type": "hostname",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: DarkComet - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185661985,
    "indicator": "tcp-free.tunnel4.com",
    "type": "hostname",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: DarkComet - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4174229969,
    "indicator": "nicedudesmoke.ddns.net",
    "type": "hostname",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: DarkComet - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185661983,
    "indicator": "https://streamable.com/xf0twu",
    "type": "URL",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: DarkComet - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4180822177,
    "indicator": "botnet.nigassculo23.shop",
    "type": "hostname",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: Mirai - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185661982,
    "indicator": "sumrak2026.duckdns.org",
    "type": "hostname",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: Mirai - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4178359241,
    "indicator": "realityv3.redirectme.net",
    "type": "hostname",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: Mirai - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4173288992,
    "indicator": "dmss888.com",
    "type": "domain",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: ValleyRAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3847314039,
    "indicator": "nb-1.muhanfrp.cn",
    "type": "hostname",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: ValleyRAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4172308655,
    "indicator": "7323.pw",
    "type": "domain",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: ValleyRAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186198971,
    "indicator": "aguang.yuxuanow.com",
    "type": "hostname",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: ValleyRAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3847314040,
    "indicator": "zz-1.muhanfrp.cn",
    "type": "hostname",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: ValleyRAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185831205,
    "indicator": "apostrwz.cyou",
    "type": "domain",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: Lumma Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185831206,
    "indicator": "absoluod.cyou",
    "type": "domain",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: Lumma Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185831203,
    "indicator": "haeccee.cyou",
    "type": "domain",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: Lumma Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185831204,
    "indicator": "vesicak.cyou",
    "type": "domain",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: Lumma Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185833623,
    "indicator": "glider.cfd",
    "type": "domain",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: Aura Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186191113,
    "indicator": "agitex.africa.com",
    "type": "hostname",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: AsyncRAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186151221,
    "indicator": "yandishuangshang6789.com",
    "type": "domain",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: ValleyRAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186151222,
    "indicator": "yandishuang1234.com",
    "type": "domain",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: ValleyRAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3920465555,
    "indicator": "winoutin.mywire.org",
    "type": "hostname",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: AsyncRAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185950124,
    "indicator": "http://159.69.114.128/b5caa8f188054fc8.php",
    "type": "URL",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: Stealc - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185868251,
    "indicator": "https://cdn.jsdelivr.net/gh/step8-det-19-runtime/repl-88-rt-msh11/net-19-77-21",
    "type": "URL",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: ClearFake - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185863064,
    "indicator": "officegrow.in.net",
    "type": "domain",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: Quasar RAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185863065,
    "indicator": "kotabansal.in.net",
    "type": "domain",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: Quasar RAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185863066,
    "indicator": "iop5.ru.com",
    "type": "hostname",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: Quasar RAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185863067,
    "indicator": "go88.sa.com",
    "type": "hostname",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: Quasar RAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185855434,
    "indicator": "wah.uk.com",
    "type": "hostname",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: Quasar RAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185855435,
    "indicator": "paperaeroplane.uk.com",
    "type": "hostname",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: Quasar RAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185855436,
    "indicator": "nnk.uk.com",
    "type": "hostname",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: Quasar RAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185855437,
    "indicator": "netdoctor.uk.com",
    "type": "hostname",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: Quasar RAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185855438,
    "indicator": "gxm.us.com",
    "type": "hostname",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: Quasar RAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185837339,
    "indicator": "slotscatteremas.jp.net",
    "type": "hostname",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: Quasar RAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185837340,
    "indicator": "tagbilarandiocese.mex.com",
    "type": "hostname",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: Quasar RAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3575538231,
    "indicator": "roblox.gr.com",
    "type": "hostname",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: Quasar RAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185837341,
    "indicator": "iso.za.com",
    "type": "hostname",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: Quasar RAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185837342,
    "indicator": "fastlovesolutions.in.net",
    "type": "domain",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: Quasar RAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185837343,
    "indicator": "duo.us.com",
    "type": "hostname",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: Quasar RAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185837344,
    "indicator": "au888.surf",
    "type": "domain",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: Quasar RAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185837345,
    "indicator": "au88-au88.shop",
    "type": "domain",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: Quasar RAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185833624,
    "indicator": "uotahi.za.com",
    "type": "hostname",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: Quasar RAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185833625,
    "indicator": "vn-au88.com",
    "type": "domain",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: Quasar RAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185833626,
    "indicator": "testseriesbymadhavi.in.net",
    "type": "domain",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: Quasar RAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185833627,
    "indicator": "mqdfpy.sa.com",
    "type": "hostname",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: Quasar RAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185833628,
    "indicator": "erogen.ru.com",
    "type": "hostname",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: Quasar RAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185833629,
    "indicator": "au88vietnam.pro",
    "type": "domain",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: Quasar RAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185833630,
    "indicator": "consultrade.uk.com",
    "type": "hostname",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: Quasar RAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185833631,
    "indicator": "au88.it.com",
    "type": "hostname",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: Quasar RAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185833632,
    "indicator": "au88kitty.com",
    "type": "domain",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: Quasar RAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185833633,
    "indicator": "au88-binb.com",
    "type": "domain",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: Quasar RAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185833634,
    "indicator": "au88-top.com",
    "type": "domain",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: Quasar RAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185831201,
    "indicator": "return-network.icu",
    "type": "domain",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: Mirai - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185831202,
    "indicator": "bbos.homes",
    "type": "domain",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: Mirai - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185831208,
    "indicator": "f6m8.chickenkiller.com",
    "type": "hostname",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: Mirai - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185831209,
    "indicator": "on81.crabdance.com",
    "type": "hostname",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: Mirai - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185831210,
    "indicator": "nkn7.mooo.com",
    "type": "hostname",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: Mirai - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185830440,
    "indicator": "ubdecp.sa.com",
    "type": "hostname",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: AsyncRAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185830441,
    "indicator": "playercodes.in.net",
    "type": "domain",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: AsyncRAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185830442,
    "indicator": "lxzzyb.sa.com",
    "type": "hostname",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: AsyncRAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185830443,
    "indicator": "gro.uk.com",
    "type": "hostname",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: AsyncRAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185830444,
    "indicator": "ecom.in.net",
    "type": "domain",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: AsyncRAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185830445,
    "indicator": "dwuxon.za.com",
    "type": "hostname",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: AsyncRAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185828231,
    "indicator": "rfk.uk.com",
    "type": "hostname",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: AsyncRAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185828232,
    "indicator": "lxbqgh.sa.com",
    "type": "hostname",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: AsyncRAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185828233,
    "indicator": "iqzomxh.sa.com",
    "type": "hostname",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: AsyncRAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185828234,
    "indicator": "hailorachiy.in.net",
    "type": "domain",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: AsyncRAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185828235,
    "indicator": "6247.cn.com",
    "type": "hostname",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: AsyncRAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185828236,
    "indicator": "skybridgeconstructions.in.net",
    "type": "domain",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: AsyncRAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185666560,
    "indicator": "vva.uk.com",
    "type": "hostname",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: AsyncRAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185666561,
    "indicator": "unl.uk.com",
    "type": "hostname",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: AsyncRAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185666562,
    "indicator": "technest.us.com",
    "type": "hostname",
    "created": "2026-01-25T09:18:20",
    "content": "",
    "title": "",
    "description": "ThreatFox: AsyncRAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  }
]