[
  {
    "id": 4193651801,
    "indicator": "hsicclassactionsettlement.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Formbook - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 2580057929,
    "indicator": "goteclift.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Formbook - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4193651802,
    "indicator": "thetew.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Formbook - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3754058572,
    "indicator": "mybodysaver.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Formbook - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 2578247280,
    "indicator": "cuadorcoast.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Formbook - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 2577005290,
    "indicator": "missk-hair.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Formbook - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 2576990629,
    "indicator": "hk6628.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Formbook - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4193651803,
    "indicator": "rootmoover.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Formbook - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4193651804,
    "indicator": "setadragon.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Formbook - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 2598464447,
    "indicator": "pon.xyz",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Formbook - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3754058585,
    "indicator": "reshemporium.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Formbook - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 2576975563,
    "indicator": "craftbychristians.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Formbook - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4193651805,
    "indicator": "laterlifelendingsupermarket.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Formbook - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3866264424,
    "indicator": "techwhose.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Formbook - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 2577012415,
    "indicator": "peak-valleyadvertising.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Formbook - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4193651806,
    "indicator": "ashestore.site",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Formbook - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 2577018108,
    "indicator": "rizqebooks.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Formbook - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4193651807,
    "indicator": "kyg-cpa.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Formbook - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 2576968588,
    "indicator": "bigarius.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Formbook - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 2580040552,
    "indicator": "collegevillepaareahomes.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Formbook - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 2598446999,
    "indicator": "kingdomvets.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Formbook - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 2580112183,
    "indicator": "thetravellingwitch.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Formbook - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 2578288458,
    "indicator": "organicdiscover.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Formbook - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 2580043903,
    "indicator": "davidwarburg.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Formbook - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4193651808,
    "indicator": "chinanl168.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Formbook - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 2577003158,
    "indicator": "martabaroagency.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Formbook - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 2598458341,
    "indicator": "neosinder.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Formbook - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4193651809,
    "indicator": "greenmommarket.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Formbook - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4193651810,
    "indicator": "prinothhusky.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Formbook - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4193651811,
    "indicator": "800pls.info",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Formbook - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4193651812,
    "indicator": "recipesdunnright.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Formbook - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4193651813,
    "indicator": "feathertiara.net",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Formbook - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4193651814,
    "indicator": "intoxickiss.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Formbook - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 2578273559,
    "indicator": "joshuatreeresearch.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Formbook - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4193651815,
    "indicator": "brasilupshop.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Formbook - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 2580107062,
    "indicator": "support24h.site",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Formbook - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 2580025672,
    "indicator": "amsmapped.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Formbook - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3754058570,
    "indicator": "mimortgageexpert.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Formbook - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3416899140,
    "indicator": "verifypurchase.online",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Formbook - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4193651816,
    "indicator": "333s998.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Formbook - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 2577012196,
    "indicator": "pawsthemomentpetphotography.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Formbook - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 2580114712,
    "indicator": "travelstipsguide.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Formbook - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 2577031875,
    "indicator": "tv-safetrading.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Formbook - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4193651817,
    "indicator": "thesweetboy.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Formbook - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3754058574,
    "indicator": "occulusblu.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Formbook - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3866158431,
    "indicator": "frystmor.city",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Formbook - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 2598477913,
    "indicator": "systemofyouth.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Formbook - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4193651818,
    "indicator": "sctsmney.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Formbook - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 2580132902,
    "indicator": "zwq.xyz",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Formbook - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4193651819,
    "indicator": "searchlakeconroehomes.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Formbook - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3754058383,
    "indicator": "briative.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Formbook - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4193651820,
    "indicator": "fafene.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Formbook - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4193651821,
    "indicator": "solanohomebuyerclass.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Formbook - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 2580067550,
    "indicator": "joneshondaservice.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Formbook - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3317932523,
    "indicator": "iqpt.info",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Formbook - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4193651822,
    "indicator": "theforumonline.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Formbook - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3159574388,
    "indicator": "nathanielwhite108.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Formbook - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 2598474001,
    "indicator": "singnema.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Formbook - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 3159574389,
    "indicator": "theroseofsharonsalon.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Formbook - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 2580097551,
    "indicator": "rsautoluxe.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Formbook - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4193648584,
    "indicator": "https://kolscan.fi/",
    "type": "URL",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown malware - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4193638110,
    "indicator": "https://one-safe.io/",
    "type": "URL",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown malware - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4193638111,
    "indicator": "https://cz-douyin.com/",
    "type": "URL",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown malware - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4193628368,
    "indicator": "https://cdn.jsdelivr.net/gh/relight-73-unsigned/coolray/mm21",
    "type": "URL",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: ClearFake - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4143772422,
    "indicator": "registration-irc.gl.at.ply.gg",
    "type": "hostname",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: XWorm - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4193550258,
    "indicator": "gaz39-service.ru",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Havoc - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4193536788,
    "indicator": "kolscan.fi",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown malware - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4193546285,
    "indicator": "www.capztoolz.com",
    "type": "hostname",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown malware - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4193536787,
    "indicator": "cz-douyin.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown malware - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4153950796,
    "indicator": "one-safe.io",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown malware - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4189787715,
    "indicator": "captolls.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown malware - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4193546287,
    "indicator": "control.minecraftplanet.de",
    "type": "hostname",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Havoc - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4193539799,
    "indicator": "https://www.rigogabriele.it/",
    "type": "URL",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown malware - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4193536785,
    "indicator": "http://ilovehosting1.com/1.bat",
    "type": "URL",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Quasar RAT - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4193536786,
    "indicator": "ews.spacelink.dpdns.org",
    "type": "hostname",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Cobalt Strike - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4193535806,
    "indicator": "nwk.skjeelancipla.com.lk",
    "type": "hostname",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Vidar - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 2944348639,
    "indicator": "webcdns.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Cobalt Strike - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4193535807,
    "indicator": "sbwur1.top",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: MintsLoader - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4193535808,
    "indicator": "gecdfcjcbcmmakk.top",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: MintsLoader - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 2951758640,
    "indicator": "shortcut.save",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Agent Tesla - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 329316,
    "indicator": "wscript.shell",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Agent Tesla - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4193458682,
    "indicator": "x1eplattwistinit.duckdns.org",
    "type": "hostname",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Remcos - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4193458683,
    "indicator": "greatmindzcroll.duckdns.org",
    "type": "hostname",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Remcos - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4193458684,
    "indicator": "plattwistinit.duckdns.org",
    "type": "hostname",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Remcos - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4193458685,
    "indicator": "x1egreatmindzcroll.duckdns.org",
    "type": "hostname",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Remcos - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4193458686,
    "indicator": "itallgrealomeirac.duckdns.org",
    "type": "hostname",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Remcos - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4176239428,
    "indicator": "goveanrs.org",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: ClearFake - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4176239427,
    "indicator": "getalia.org",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: ClearFake - payload_delivery",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4193458687,
    "indicator": "wcw.uk.com",
    "type": "hostname",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: AsyncRAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4193458688,
    "indicator": "win678.fun",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: AsyncRAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4193458689,
    "indicator": "ubwgpb.za.com",
    "type": "hostname",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: AsyncRAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4193458690,
    "indicator": "riceif.in.net",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: AsyncRAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4193458691,
    "indicator": "pub88-game.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: AsyncRAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4193458692,
    "indicator": "meraki.uk.com",
    "type": "hostname",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: AsyncRAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4193458693,
    "indicator": "kra.sa.com",
    "type": "hostname",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: AsyncRAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4193458694,
    "indicator": "gqa.uk.com",
    "type": "hostname",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: AsyncRAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4193458695,
    "indicator": "addictiontreatment.eu.com",
    "type": "hostname",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: AsyncRAT - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4193457218,
    "indicator": "ingodgracebabyangelgivenblesswellwithmyl.duckdns.org",
    "type": "hostname",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Remcos - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4193456456,
    "indicator": "thapcamtvz.org",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown malware - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4193456457,
    "indicator": "news.spacelink.dpdns.org",
    "type": "hostname",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Cobalt Strike - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4190057324,
    "indicator": "primeshare33.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4190057334,
    "indicator": "maccloudzip.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4190057341,
    "indicator": "imacfilesafe.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4190057335,
    "indicator": "macdropnow.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4190057345,
    "indicator": "imacsimplesend.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4190057326,
    "indicator": "safemacguard.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4190057317,
    "indicator": "maciclouddock.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4190057357,
    "indicator": "fileshadowtransfer87.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4190057328,
    "indicator": "macclouddesk.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4190057333,
    "indicator": "maccloudx.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4191433761,
    "indicator": "mymachelpdesk.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4190057351,
    "indicator": "macabooart.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4191433756,
    "indicator": "macflowy.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4190057332,
    "indicator": "maccloudjet.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4190057355,
    "indicator": "cloudgate29.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4191433768,
    "indicator": "macfileshare.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4190057342,
    "indicator": "imacfolder.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4190057314,
    "indicator": "syncport20.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4191433759,
    "indicator": "macsyncbin.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4190057338,
    "indicator": "macfilesafesend.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4190057331,
    "indicator": "maccloudglide.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4191433757,
    "indicator": "macicloudtrack.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4190057319,
    "indicator": "macprivateicloud.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4190057336,
    "indicator": "macfiledesk.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  },
  {
    "id": 4190057322,
    "indicator": "macsyncsend.com",
    "type": "domain",
    "created": "2026-02-03T01:20:02",
    "content": "",
    "title": "",
    "description": "ThreatFox: Unknown Stealer - botnet_cc",
    "expiration": null,
    "is_active": 1
  }
]