[
  {
    "id": 4189952711,
    "indicator": "https://cdn.jsdelivr.net/gh/web3call/ws014/gf22",
    "type": "URL",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: ClearFake - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189880087,
    "indicator": "http://5.175.192.109/login",
    "type": "URL",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown malware - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189836222,
    "indicator": "accounts.booking.ciberseguridad-eia.xyz",
    "type": "hostname",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown malware - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189830666,
    "indicator": "fandmc.cn",
    "type": "domain",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: AsyncRAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189830667,
    "indicator": "oxygen.fandmc.cn",
    "type": "hostname",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: AsyncRAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189830668,
    "indicator": "docs.fandmc.cn",
    "type": "hostname",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: AsyncRAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189830669,
    "indicator": "status.fandmc.cn",
    "type": "hostname",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: AsyncRAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189826279,
    "indicator": "https://captolls.com/",
    "type": "URL",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown malware - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189819085,
    "indicator": "vitoboy.com",
    "type": "domain",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: Cobalt Strike - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4188836457,
    "indicator": "http://45.93.20.205/ce11694fbb78411c.php",
    "type": "URL",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: Stealc - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189787715,
    "indicator": "captolls.com",
    "type": "domain",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: ClearFake - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189781332,
    "indicator": "https://innstantily.top/redirect/auth-fetch.js",
    "type": "URL",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: SmartApeSG - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189781333,
    "indicator": "https://innstantily.top/redirect/settings-core.php",
    "type": "URL",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: SmartApeSG - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189781334,
    "indicator": "innstantily.top",
    "type": "domain",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: SmartApeSG - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189781335,
    "indicator": "https://innstantily.top/redirect/settings-controller.js",
    "type": "URL",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: SmartApeSG - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189781336,
    "indicator": "www.ski-snowboardvancouver.ca",
    "type": "hostname",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: SmartApeSG - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189781337,
    "indicator": "https://www.ski-snowboardvancouver.ca/d.js",
    "type": "URL",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: SmartApeSG - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189773644,
    "indicator": "http://45.93.20.205",
    "type": "URL",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: Stealc - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189773645,
    "indicator": "http://158.94.211.84",
    "type": "URL",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: Stealc - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189770510,
    "indicator": "https://aliengp.cyou/api",
    "type": "URL",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: Lumma Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4177254187,
    "indicator": "mini-zmoto.com",
    "type": "domain",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186979920,
    "indicator": "arsenmarkaruyn.com",
    "type": "domain",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4186979921,
    "indicator": "cotlesgengeral.com",
    "type": "domain",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189693966,
    "indicator": "hqej69yf.v0xenharvest.ru",
    "type": "hostname",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: ClearFake - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189693967,
    "indicator": "wydannc6.v0xenharvest.ru",
    "type": "hostname",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: ClearFake - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189678264,
    "indicator": "bargeshipping.com",
    "type": "domain",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189678265,
    "indicator": "gosemobi.com",
    "type": "domain",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189678266,
    "indicator": "njtankservices.com",
    "type": "domain",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4182185461,
    "indicator": "laderbaj.net",
    "type": "domain",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189658424,
    "indicator": "https://stobminipinporl.com/api/bot/heartbeat",
    "type": "URL",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 2241010010,
    "indicator": "http://evervisionicd.com/xquat/fre.php",
    "type": "URL",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: Loki Password Stealer (PWS) - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189658425,
    "indicator": "stobminipinporl.com",
    "type": "domain",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189657196,
    "indicator": "www.355bet.com.br",
    "type": "hostname",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: AsyncRAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189657197,
    "indicator": "rentals-hidden.gl.at.ply.gg",
    "type": "hostname",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: XWorm - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189657198,
    "indicator": "trabahando.theworkpc.com",
    "type": "hostname",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: Mirai - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189648844,
    "indicator": "octazo.gb.net",
    "type": "hostname",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: AsyncRAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189648845,
    "indicator": "fb888.uk.com",
    "type": "hostname",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: AsyncRAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189648846,
    "indicator": "communications.it.com",
    "type": "hostname",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: AsyncRAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4182320334,
    "indicator": "hobefork.com",
    "type": "domain",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189645709,
    "indicator": "clearwaterfishingcompany.com",
    "type": "domain",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189645710,
    "indicator": "taxnearme.com",
    "type": "domain",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189645711,
    "indicator": "kd62.casino",
    "type": "domain",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: Quasar RAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189645712,
    "indicator": "337788bet.site",
    "type": "domain",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: Quasar RAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189640201,
    "indicator": "handsonatwork.co.uk",
    "type": "domain",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: ClearFake - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189640202,
    "indicator": "cansti.in.net",
    "type": "domain",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: AsyncRAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189640203,
    "indicator": "foamfasfkkfkfkfa.com",
    "type": "domain",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: ClearFake - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189640204,
    "indicator": "ofofoalalaladjrkrka.com",
    "type": "domain",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: ClearFake - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189632705,
    "indicator": "https://tannypro.com/js.php",
    "type": "URL",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: KongTuke - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189632706,
    "indicator": "tannypro.com",
    "type": "domain",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: KongTuke - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189632707,
    "indicator": "https://tannypro.com/5l8k.js",
    "type": "URL",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: KongTuke - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189588498,
    "indicator": "https://cdn.jsdelivr.net/gh/web3call/ws014/st85",
    "type": "URL",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: ClearFake - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4144448217,
    "indicator": "tdrdomainnew.com",
    "type": "domain",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: CastleRAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189574735,
    "indicator": "http://8.217.97.238:8888/supershell/login/",
    "type": "URL",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown malware - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189536604,
    "indicator": "unmindv.cyou",
    "type": "domain",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: Lumma Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189536605,
    "indicator": "genussy.cyou",
    "type": "domain",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: Lumma Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189536606,
    "indicator": "studfdu.cyou",
    "type": "domain",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: Lumma Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189531966,
    "indicator": "aliengp.cyou",
    "type": "domain",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: Lumma Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189531967,
    "indicator": "vetchir.cyou",
    "type": "domain",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: Lumma Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189531968,
    "indicator": "menopjc.cyou",
    "type": "domain",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: Lumma Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189531969,
    "indicator": "stathas.cyou",
    "type": "domain",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: Lumma Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189531970,
    "indicator": "odovakmc.cyou",
    "type": "domain",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: Lumma Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189531971,
    "indicator": "mummifjn.cyou",
    "type": "domain",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: Lumma Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189531972,
    "indicator": "offseti.cyou",
    "type": "domain",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: Lumma Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189531973,
    "indicator": "interrg.cyou",
    "type": "domain",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: Lumma Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189530348,
    "indicator": "https://interrg.cyou/api",
    "type": "URL",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: Lumma Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189528429,
    "indicator": "https://stathas.cyou/api",
    "type": "URL",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: Lumma Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189528430,
    "indicator": "https://menopjc.cyou/api",
    "type": "URL",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: Lumma Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189525754,
    "indicator": "sni.ptbaconsulting.com",
    "type": "hostname",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: FAKEUPDATES - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189525755,
    "indicator": "https://98.142.251.59/method",
    "type": "URL",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: SmartApeSG - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189525756,
    "indicator": "https://irforgoten.com/name",
    "type": "URL",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: SmartApeSG - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189525757,
    "indicator": "http://98.142.251.59/name",
    "type": "URL",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: SmartApeSG - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189525758,
    "indicator": "https://utahindelevere.top/redirect/auth-fetch.js",
    "type": "URL",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: SmartApeSG - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189525759,
    "indicator": "https://utahindelevere.top/redirect/settings-core.php",
    "type": "URL",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: SmartApeSG - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189499808,
    "indicator": "utahindelevere.top",
    "type": "domain",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: SmartApeSG - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189525760,
    "indicator": "https://utahindelevere.top/redirect/settings-controller.js",
    "type": "URL",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: SmartApeSG - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189525761,
    "indicator": "https://cpajoliette.com/meta.google.com",
    "type": "URL",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: SmartApeSG - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189498450,
    "indicator": "vyy.uk.com",
    "type": "hostname",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: Quasar RAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189498451,
    "indicator": "nog.jp.net",
    "type": "hostname",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: Quasar RAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189498452,
    "indicator": "license.eu.com",
    "type": "hostname",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: Quasar RAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189473961,
    "indicator": "luvxcide.duckdns.org",
    "type": "hostname",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: Nanocore RAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189473962,
    "indicator": "dohinukss.localto.net",
    "type": "hostname",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: SpyNote - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189473963,
    "indicator": "boosterman22q1-33740.portmap.host",
    "type": "hostname",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: XWorm - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189106988,
    "indicator": "hebasix.duckdns.org",
    "type": "hostname",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: XWorm - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189473964,
    "indicator": "boosterman22q1-42479.portmap.host",
    "type": "hostname",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: XWorm - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189473965,
    "indicator": "egornigga-61525.portmap.host",
    "type": "hostname",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: XWorm - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189467210,
    "indicator": "https://cdn.jsdelivr.net/gh/web3call/ws014/zr0",
    "type": "URL",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: ClearFake - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189459864,
    "indicator": "https://cdn.jsdelivr.net/gh/web3call/ws014/das",
    "type": "URL",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: ClearFake - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189458979,
    "indicator": "rousedonkibure.us",
    "type": "domain",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: Havoc - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189458980,
    "indicator": "evil.azuretest.fr",
    "type": "hostname",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown malware - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189458981,
    "indicator": "http://cb042722.tw1.ru/b4e69250.php",
    "type": "URL",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: DCRat - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189455521,
    "indicator": "https://cdn.jsdelivr.net/gh/web3call/ws014/tor",
    "type": "URL",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: ClearFake - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189452067,
    "indicator": "https://cdn.jsdelivr.net/gh/web3call/ws014/hex",
    "type": "URL",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: ClearFake - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189448440,
    "indicator": "https://cdn.jsdelivr.net/gh/web3call/ws014/bra",
    "type": "URL",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: ClearFake - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4143895530,
    "indicator": "kakapupuneww.com",
    "type": "domain",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: CastleRAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189441640,
    "indicator": "https://cdn.jsdelivr.net/gh/web3call/ws014/zec",
    "type": "URL",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: ClearFake - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 2683572208,
    "indicator": "midlandaudio.com",
    "type": "domain",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189428177,
    "indicator": "https://cdn.jsdelivr.net/gh/web3call/ws014/var",
    "type": "URL",
    "created": "2026-01-30T06:20:07",
    "content": "",
    "title": "",
    "description": "ThreatFox: ClearFake - payload_delivery",
    "expiration": null,
    "is_active": 1
  }
]