[
  {
    "id": 4186427654,
    "indicator": "vf6cttllpzkiklvpmvj5ihtnqb4e4v3ki6oizt3vhifd3q7pg6oz36qd.onion",
    "type": "domain",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: BitRAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186427655,
    "indicator": "jefafe2169-35904.portmap.host",
    "type": "hostname",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: Quasar RAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4088363662,
    "indicator": "http://gardenhub-fitlife3.com",
    "type": "URL",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: Amadey - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4090511835,
    "indicator": "http://gardenhub-fitlife2.com",
    "type": "URL",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: Amadey - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186427656,
    "indicator": "http://moviecentral-petparade3.com",
    "type": "URL",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: Amadey - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4103230364,
    "indicator": "http://moviecentral-petparade2.com",
    "type": "URL",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: Amadey - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186365888,
    "indicator": "canadaamournoixthrum.com",
    "type": "domain",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: DeerStealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186360813,
    "indicator": "marrueye.cyou",
    "type": "domain",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: Lumma Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186305804,
    "indicator": "https://marrueye.cyou/api",
    "type": "URL",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: Lumma Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186300411,
    "indicator": "http://45.87.43.148:443/visit.js",
    "type": "URL",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: Cobalt Strike - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186300412,
    "indicator": "http://45.87.43.148:443/UuHK",
    "type": "URL",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: Cobalt Strike - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186206730,
    "indicator": "https://mail.smartbowls.co.za/",
    "type": "URL",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown malware - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186206731,
    "indicator": "https://mail.qbb.nmi.mybluehost.me/",
    "type": "URL",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown malware - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186206732,
    "indicator": "https://mail.mo-ag.co.uk/",
    "type": "URL",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown malware - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186206733,
    "indicator": "https://mail.hostwala.in/",
    "type": "URL",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown malware - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186206734,
    "indicator": "https://mail.domonova.co.ao/",
    "type": "URL",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown malware - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186206725,
    "indicator": "https://mail.panorama-g.com/",
    "type": "URL",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown malware - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186206726,
    "indicator": "https://mail.optimumfl.org/",
    "type": "URL",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown malware - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186206727,
    "indicator": "https://meimeilab.com/",
    "type": "URL",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown malware - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186206729,
    "indicator": "https://pulsebeatrecords.com/",
    "type": "URL",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown malware - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186206728,
    "indicator": "https://mail.talkagency.com.br/",
    "type": "URL",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown malware - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186206718,
    "indicator": "https://sitepapelaria.edsure.com.br/",
    "type": "URL",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown malware - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186206719,
    "indicator": "https://san-antonio.concretestampingandstaining.com/",
    "type": "URL",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown malware - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186206720,
    "indicator": "https://surecomforts.com/",
    "type": "URL",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown malware - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186206721,
    "indicator": "https://v1.estismail.com/",
    "type": "URL",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown malware - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186206722,
    "indicator": "https://uggtrade.ru/",
    "type": "URL",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown malware - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186206723,
    "indicator": "https://visuapex.com/",
    "type": "URL",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown malware - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186206724,
    "indicator": "https://treat.kusherp.com/",
    "type": "URL",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown malware - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186206710,
    "indicator": "https://wurk.africa/",
    "type": "URL",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown malware - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186206711,
    "indicator": "https://vellenso.ru/",
    "type": "URL",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown malware - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186206712,
    "indicator": "https://visitbundala.com/",
    "type": "URL",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown malware - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186206713,
    "indicator": "https://evolvedesign.co.za/",
    "type": "URL",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown malware - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186206714,
    "indicator": "https://bo.cerisecosmetique.com/",
    "type": "URL",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown malware - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186206715,
    "indicator": "https://partner.naturigin.hu/",
    "type": "URL",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown malware - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186206716,
    "indicator": "https://concretestampingandstaining.brandonwyatt.website/",
    "type": "URL",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown malware - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186206717,
    "indicator": "https://mrsillucia.de/",
    "type": "URL",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown malware - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186206705,
    "indicator": "https://www.release-notes.us/",
    "type": "URL",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown malware - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186206706,
    "indicator": "https://pauloeduardodemelo1744295722000.kbral.com.br/",
    "type": "URL",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown malware - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186206707,
    "indicator": "https://yalta.logomebel.ru/",
    "type": "URL",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown malware - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186206708,
    "indicator": "https://translator.isotoop.be/",
    "type": "URL",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown malware - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186206709,
    "indicator": "https://yvngvualr.com/",
    "type": "URL",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown malware - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186214777,
    "indicator": "https://seminariodiocesedejanauba.com.br.agenciadelivearte.com.br/",
    "type": "URL",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown malware - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186214776,
    "indicator": "https://senioryuyu.com/",
    "type": "URL",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown malware - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186219691,
    "indicator": "http://212.135.38.87/ssh.sh",
    "type": "URL",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown malware - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186263637,
    "indicator": "https://velikieluki.logomebel.ru/",
    "type": "URL",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown malware - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186287038,
    "indicator": "https://unchewq.cyou/api",
    "type": "URL",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: Lumma Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186284421,
    "indicator": "http://45.156.87.65",
    "type": "URL",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: Stealc - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 2815136269,
    "indicator": "goaenergy.com",
    "type": "domain",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186270062,
    "indicator": "https://ultra4ktool.com",
    "type": "URL",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: Stealc - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185614450,
    "indicator": "57c42474b0ea.ofalias.net",
    "type": "hostname",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: Quasar RAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186270063,
    "indicator": "https://www.agitex.africa.com/:4782",
    "type": "URL",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: AsyncRAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186270064,
    "indicator": "https://www.agitex.africa.com/:2096",
    "type": "URL",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: AsyncRAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186270065,
    "indicator": "https://www.agitex.africa.com/:2087",
    "type": "URL",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: AsyncRAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186270066,
    "indicator": "https://www.agitex.africa.com/:2083",
    "type": "URL",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: AsyncRAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186270067,
    "indicator": "https://www.agitex.africa.com/:2053",
    "type": "URL",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: AsyncRAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186270068,
    "indicator": "https://www.agitex.africa.com/:8888",
    "type": "URL",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: AsyncRAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186270069,
    "indicator": "https://www.agitex.africa.com/:80",
    "type": "URL",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: AsyncRAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186270070,
    "indicator": "https://www.agitex.africa.com/:8080",
    "type": "URL",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: AsyncRAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186270071,
    "indicator": "https://www.agitex.africa.com/:443",
    "type": "URL",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: AsyncRAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186270072,
    "indicator": "https://www.agitex.africa.com/:8848",
    "type": "URL",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: AsyncRAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4184528162,
    "indicator": "garellla-30563.portmap.host",
    "type": "hostname",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: XWorm - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185349048,
    "indicator": "http://178.16.54.140/4c716ef724024c23.php",
    "type": "URL",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: Stealc - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186204497,
    "indicator": "https://cdn.jsdelivr.net/gh/paper-skydiver-drv8/crispy-machine-band3/trans1at",
    "type": "URL",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: ClearFake - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185661986,
    "indicator": "http://ldark.nm.ru/ind",
    "type": "URL",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: Berbew - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185661987,
    "indicator": "http://devx.nm.ru/inde",
    "type": "URL",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: Berbew - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4177254412,
    "indicator": "enemy1.no-ip.info",
    "type": "hostname",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: DarkComet - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 2786867616,
    "indicator": "genetichax.no-ip.biz",
    "type": "hostname",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: DarkComet - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185661984,
    "indicator": "kc15.no-ip.info",
    "type": "hostname",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: DarkComet - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 2786823405,
    "indicator": "poisonivy1.no-ip.org",
    "type": "hostname",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: DarkComet - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185661985,
    "indicator": "tcp-free.tunnel4.com",
    "type": "hostname",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: DarkComet - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4174229969,
    "indicator": "nicedudesmoke.ddns.net",
    "type": "hostname",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: DarkComet - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185661983,
    "indicator": "https://streamable.com/xf0twu",
    "type": "URL",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: DarkComet - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4180822177,
    "indicator": "botnet.nigassculo23.shop",
    "type": "hostname",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: Mirai - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185661982,
    "indicator": "sumrak2026.duckdns.org",
    "type": "hostname",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: Mirai - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4178359241,
    "indicator": "realityv3.redirectme.net",
    "type": "hostname",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: Mirai - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4173288992,
    "indicator": "dmss888.com",
    "type": "domain",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: ValleyRAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3847314039,
    "indicator": "nb-1.muhanfrp.cn",
    "type": "hostname",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: ValleyRAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4172308655,
    "indicator": "7323.pw",
    "type": "domain",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: ValleyRAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186198971,
    "indicator": "aguang.yuxuanow.com",
    "type": "hostname",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: ValleyRAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3847314040,
    "indicator": "zz-1.muhanfrp.cn",
    "type": "hostname",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: ValleyRAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185831205,
    "indicator": "apostrwz.cyou",
    "type": "domain",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: Lumma Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185831206,
    "indicator": "absoluod.cyou",
    "type": "domain",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: Lumma Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185831203,
    "indicator": "haeccee.cyou",
    "type": "domain",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: Lumma Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185831204,
    "indicator": "vesicak.cyou",
    "type": "domain",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: Lumma Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4185833623,
    "indicator": "glider.cfd",
    "type": "domain",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: Aura Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186191113,
    "indicator": "agitex.africa.com",
    "type": "hostname",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: AsyncRAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186151221,
    "indicator": "yandishuangshang6789.com",
    "type": "domain",
    "created": "2026-01-25T19:02:42",
    "content": "",
    "title": "",
    "description": "ThreatFox: ValleyRAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  }
]