[ { "id": 4149455294, "indicator": "158.94.208.104", "type": "IPv4", "created": "2026-05-13T05:03:02", "content": "", "title": "", "description": "CC=GB ASN=AS786 jisc services limited", "expiration": "2026-06-12T04:00:00", "is_active": 1 }, { "id": 4357166202, "indicator": "158.94.208.92", "type": "IPv4", "created": "2026-05-13T05:03:02", "content": "", "title": "", "description": "CC=GB ASN=AS786 jisc services limited", "expiration": "2026-06-12T04:00:00", "is_active": 1 }, { "id": 4357166203, "indicator": "178.16.52.232", "type": "IPv4", "created": "2026-05-13T05:03:02", "content": "", "title": "", "description": "CC=DE ASN=AS40999 dus.net gmbh", "expiration": "2026-06-12T04:00:00", "is_active": 1 }, { "id": 4293582155, "indicator": "http://158.94.208.92", "type": "URL", "created": "2026-05-13T05:03:02", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4357166204, "indicator": "http://ntdnewtds.shop/jsrepo?rnd=", "type": "URL", "created": "2026-05-13T05:03:02", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4293582166, "indicator": "dnsnewtds.shop", "type": "domain", "created": "2026-05-13T05:03:02", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4357166205, "indicator": "gettrumpmemestrendingtokens.com", "type": "domain", "created": "2026-05-13T05:03:02", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4293582168, "indicator": "ntdnewtds.shop", "type": "domain", "created": "2026-05-13T05:03:02", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4357166206, "indicator": "http://www.dnsnewtds.shop/", "type": "URL", "created": "2026-05-13T05:03:02", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4357166207, "indicator": "https://dnsnewtds.shop/...", "type": "URL", "created": "2026-05-13T05:03:02", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4357166208, "indicator": "https://www.dnsnewtds.shop/", "type": "URL", "created": "2026-05-13T05:03:02", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4177407826, "indicator": "caravan-crm-lu.com", "type": "domain", "created": "2026-05-13T05:03:02", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4168126397, "indicator": "blksssd.ydns.eu", "type": "hostname", "created": "2026-05-13T05:03:02", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4152193748, "indicator": "kamisisterbrofanydodf.com", "type": "domain", "created": "2026-05-13T05:03:02", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4357166209, "indicator": "http://158.94.208.104/x7GkP2mQ9zL4/", "type": "URL", "created": "2026-05-13T05:03:02", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4293582153, "indicator": "http://158.94.208.104/x7GkP2mQ9zL4/my_downloader.bin", "type": "URL", "created": "2026-05-13T05:03:02", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4293582154, "indicator": "http://158.94.208.104/x7GkP2mQ9zL4/my_l.bin", "type": "URL", "created": "2026-05-13T05:03:02", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4293582152, "indicator": "http://158.94.208.104/x7GkP2mQ9zL4/my_s.bin", "type": "URL", "created": "2026-05-13T05:03:02", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4293582151, "indicator": "http://158.94.208.104/x7GkP2mQ9zL4/student_downloader.bin", "type": "URL", "created": "2026-05-13T05:03:02", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4293582150, "indicator": "http://158.94.208.104/x7GkP2mQ9zL4/student_l.bin", "type": "URL", "created": "2026-05-13T05:03:02", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4293582149, "indicator": "http://158.94.208.104/x7GkP2mQ9zL4/student_s.bin", "type": "URL", "created": "2026-05-13T05:03:02", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4357166210, "indicator": "gettrumpmemes.gettrumpmemestrendingtokens.com", "type": "hostname", "created": "2026-05-13T05:03:02", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4357166211, "indicator": "https://gettrumpmemes.gettrumpmemestrendingtokens.com/", "type": "URL", "created": "2026-05-13T05:03:02", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4357166212, "indicator": "https://gettrumpmemes.gettrumpmemestrendingtokens.com/images/*", "type": "URL", "created": "2026-05-13T05:03:02", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4357166213, "indicator": "https://gettrumpmemes.gettrumpmemestrendingtokens.com/images/1389676a4641ef8e3b4790cf06063249d411a692.svg", "type": "URL", "created": "2026-05-13T05:03:02", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4357166214, "indicator": "https://gettrumpmemes.gettrumpmemestrendingtokens.com/images/39676ea0b0640b4db29d0f93845d702b3784985a.svg", "type": "URL", "created": "2026-05-13T05:03:02", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4357166215, "indicator": "https://gettrumpmemes.gettrumpmemestrendingtokens.com/images/750146d79df2f7e02b6895527d982b4de952ab94.svg", "type": "URL", "created": "2026-05-13T05:03:02", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4357166216, "indicator": "https://gettrumpmemes.gettrumpmemestrendingtokens.com/images/ca03486f14ec38cd5ed6377fe6f56c1a5713a44a.svg", "type": "URL", "created": "2026-05-13T05:03:02", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4293582167, "indicator": "https://ntdnewtds.shop/jsrepo", "type": "URL", "created": "2026-05-13T05:03:02", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4357166217, "indicator": "https://ntdnewtds.shop/jsrepo/", "type": "URL", "created": "2026-05-13T05:03:02", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4357166218, "indicator": "http://www.kamisisterbrofanydodf.com/", "type": "URL", "created": "2026-05-13T05:03:02", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4357166219, "indicator": "https://www.kamisisterbrofanydodf.com/", "type": "URL", "created": "2026-05-13T05:03:02", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4363985896, "indicator": "51b46342163ef37f5f41c269ffb337d3", "type": "FileHash-MD5", "created": "2026-05-17T05:03:04", "content": "", "title": "", "description": "MD5 of 2198767147bdf67a45da63ad9a35900b4ca8e628fedca13873ae50cf5805c810", "expiration": null, "is_active": 1 }, { "id": 4363985897, "indicator": "7c268bfab0653cdca45b4dc3c1ee0092", "type": "FileHash-MD5", "created": "2026-05-17T05:03:04", "content": "", "title": "compromised_site_redirector_fromcharcode", "description": "MD5 of 88c9a328be9d2f04b3b93d2d95117f3ab3c5403fd0f9c69f8002e74e8edfd3a9", "expiration": null, "is_active": 1 }, { "id": 4363985898, "indicator": "724a8445c5c3fd57778d82f62b9d4a6112a3bb2d", "type": "FileHash-SHA1", "created": "2026-05-17T05:03:04", "content": "", "title": "", "description": "SHA1 of 2198767147bdf67a45da63ad9a35900b4ca8e628fedca13873ae50cf5805c810", "expiration": null, "is_active": 1 }, { "id": 4363985899, "indicator": "f1542a7697e04865e1dfeeed084e5ea5870100f0", "type": "FileHash-SHA1", "created": "2026-05-17T05:03:04", "content": "", "title": "compromised_site_redirector_fromcharcode", "description": "SHA1 of 88c9a328be9d2f04b3b93d2d95117f3ab3c5403fd0f9c69f8002e74e8edfd3a9", "expiration": null, "is_active": 1 }, { "id": 4363985900, "indicator": "2198767147bdf67a45da63ad9a35900b4ca8e628fedca13873ae50cf5805c810", "type": "FileHash-SHA256", "created": "2026-05-17T05:03:04", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4294579007, "indicator": "2f515997ab1c7f5ab94a46041ad2af06031a842469b65bcbd2c64bd47f12a896", "type": "FileHash-SHA256", "created": "2026-05-17T05:03:04", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4363985901, "indicator": "6d0f2cd8b853c64182986d2dcaefe5df9fe9b53220774f99dcfd9f09add3540d", "type": "FileHash-SHA256", "created": "2026-05-17T05:03:04", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4363985902, "indicator": "88c9a328be9d2f04b3b93d2d95117f3ab3c5403fd0f9c69f8002e74e8edfd3a9", "type": "FileHash-SHA256", "created": "2026-05-17T05:03:04", "content": "", "title": "compromised_site_redirector_fromcharcode", "description": "", "expiration": null, "is_active": 1 }, { "id": 4363985896, "indicator": "51b46342163ef37f5f41c269ffb337d3", "type": "FileHash-MD5", "created": "2026-05-17T05:03:06", "content": "", "title": "", "description": "MD5 of 2198767147bdf67a45da63ad9a35900b4ca8e628fedca13873ae50cf5805c810", "expiration": null, "is_active": 1 }, { "id": 4363985897, "indicator": "7c268bfab0653cdca45b4dc3c1ee0092", "type": "FileHash-MD5", "created": "2026-05-17T05:03:06", "content": "", "title": "compromised_site_redirector_fromcharcode", "description": "MD5 of 88c9a328be9d2f04b3b93d2d95117f3ab3c5403fd0f9c69f8002e74e8edfd3a9", "expiration": null, "is_active": 1 }, { "id": 4363985898, "indicator": "724a8445c5c3fd57778d82f62b9d4a6112a3bb2d", "type": "FileHash-SHA1", "created": "2026-05-17T05:03:06", "content": "", "title": "", "description": "SHA1 of 2198767147bdf67a45da63ad9a35900b4ca8e628fedca13873ae50cf5805c810", "expiration": null, "is_active": 1 }, { "id": 4363985899, "indicator": "f1542a7697e04865e1dfeeed084e5ea5870100f0", "type": "FileHash-SHA1", "created": "2026-05-17T05:03:06", "content": "", "title": "compromised_site_redirector_fromcharcode", "description": "SHA1 of 88c9a328be9d2f04b3b93d2d95117f3ab3c5403fd0f9c69f8002e74e8edfd3a9", "expiration": null, "is_active": 1 }, { "id": 4363985900, "indicator": "2198767147bdf67a45da63ad9a35900b4ca8e628fedca13873ae50cf5805c810", "type": "FileHash-SHA256", "created": "2026-05-17T05:03:06", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4294579007, "indicator": "2f515997ab1c7f5ab94a46041ad2af06031a842469b65bcbd2c64bd47f12a896", "type": "FileHash-SHA256", "created": "2026-05-17T05:03:06", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4363985901, "indicator": "6d0f2cd8b853c64182986d2dcaefe5df9fe9b53220774f99dcfd9f09add3540d", "type": "FileHash-SHA256", "created": "2026-05-17T05:03:06", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4363985902, "indicator": "88c9a328be9d2f04b3b93d2d95117f3ab3c5403fd0f9c69f8002e74e8edfd3a9", "type": "FileHash-SHA256", "created": "2026-05-17T05:03:06", "content": "", "title": "compromised_site_redirector_fromcharcode", "description": "", "expiration": null, "is_active": 1 }, { "id": 4363986210, "indicator": "https://3004.filemail.com/api/file/get?filekey=SfG1eQcm_8_zdIesRkVjDKsLLPGn3bfOiftAwlv4LtkdRlpJPaW4FoAJi5w", "type": "URL", "created": "2026-05-17T05:04:59", "content": "", "title": "secondary payload download", "description": "Execution chain: WScript.exe ? rundll32.exe (shell32.dll ShellExec_RunDLL) ? PowerShell (Base64-encoded, hidden window) ? downloads python312x64.zip (~14.5 MB) from https://3004.filemail.com/api/file/get?filekey=SfG1eQcm_8_zdIesRkVjDKsLLPGn3bfOiftAwlv4LtkdRlpJPaW4FoAJi5w ? extracts to %APPDATA%\\Templates\\python312x64\\ ? executes pythonw.exe with Protected.py", "expiration": null, "is_active": 1 }, { "id": 4183727182, "indicator": "captioto.com", "type": "domain", "created": "2026-05-18T04:44:57", "content": "", "title": "C2 Server Domain used in ClickFix campaigns", "description": "Omegatech SC:\nTimestamp\t Prefix \tAS Path\n2026-05-17 21:11:25\t178.16.53.0/24\tAS202412", "expiration": null, "is_active": 1 }, { "id": 4178418242, "indicator": "cptoptious.com", "type": "domain", "created": "2026-05-18T04:44:57", "content": "", "title": "C2 Server Domain used in ClickFix campaigns", "description": "Omegatech SC:\nTimestamp\tPrefix\tAS Path\n2026-05-17 21:27:14\t178.16.53.0/24\tAS202412", "expiration": null, "is_active": 1 }, { "id": 4237422277, "indicator": "newtdsone.shop", "type": "domain", "created": "2026-05-18T04:44:57", "content": "", "title": "C2 Server Domain used in ClickFix campaigns", "description": "Omegatech SC:\nTimestamp\tPrefix\tAS Path\n2026-05-17 21:43:04\t178.16.53.0/24\tAS202412\nDomain reported to registrar 2026-05-17", "expiration": null, "is_active": 1 }, { "id": 4365625202, "indicator": "https://cptoptious.com/jsrepo", "type": "URL", "created": "2026-05-18T04:44:57", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4365625203, "indicator": "https://cptoptious.com/automail-insurtech-tax.de", "type": "URL", "created": "2026-05-18T04:44:57", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4365625204, "indicator": "https://captioto.com/jsrepo", "type": "URL", "created": "2026-05-18T04:44:57", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4365625205, "indicator": "https://www.captioto.com/", "type": "URL", "created": "2026-05-18T04:44:57", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4365625206, "indicator": "http://www.captioto.com/", "type": "URL", "created": "2026-05-18T04:44:57", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4365625207, "indicator": "https://www.cptoptious.com/", "type": "URL", "created": "2026-05-18T04:44:57", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4365625208, "indicator": "https://cptoptious.com/url=", "type": "URL", "created": "2026-05-18T04:44:57", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4365625209, "indicator": "https://cptoptious.com/teamrepo", "type": "URL", "created": "2026-05-18T04:44:57", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4365625210, "indicator": "http://www.cptoptious.com/", "type": "URL", "created": "2026-05-18T04:44:57", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4365625211, "indicator": "http://cptoptious.com/jsrepo", "type": "URL", "created": "2026-05-18T04:44:57", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4261013574, "indicator": "http://cptoptious.com/captcha.html", "type": "URL", "created": "2026-05-18T04:44:57", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4261013486, "indicator": "http://cptoptious.com/captcha.htm", "type": "URL", "created": "2026-05-18T04:44:57", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4365625212, "indicator": "https://www.newtdsone.shop/", "type": "URL", "created": "2026-05-18T04:44:57", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4365625213, "indicator": "http://www.newtdsone.shop/", "type": "URL", "created": "2026-05-18T04:44:57", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4293582150, "indicator": "http://158.94.208.104/x7GkP2mQ9zL4/student_l.bin", "type": "URL", "created": "2026-05-18T18:20:11", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4149455294, "indicator": "158.94.208.104", "type": "IPv4", "created": "2026-05-18T18:20:11", "content": "", "title": "", "description": "CC=GB ASN=AS786 jisc services limited", "expiration": "2026-06-17T18:00:00", "is_active": 1 }, { "id": 4289443416, "indicator": "91.92.240.117", "type": "IPv4", "created": "2026-05-18T18:20:11", "content": "", "title": "", "description": "CC=BG ASN=AS34368 zonata - natskovi & sie ltd.", "expiration": "2026-06-17T18:00:00", "is_active": 1 }, { "id": 4366984332, "indicator": "91.92.240.121", "type": "IPv4", "created": "2026-05-18T18:20:11", "content": "", "title": "", "description": "CC=BG ASN=AS34368 zonata - natskovi & sie ltd.", "expiration": "2026-06-17T18:00:00", "is_active": 1 }, { "id": 4366984333, "indicator": "http://91.92.240.117/", "type": "URL", "created": "2026-05-18T18:20:11", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4366984334, "indicator": "http://91.92.240.121/", "type": "URL", "created": "2026-05-18T18:20:11", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4366984335, "indicator": "https://bryanexhaust.com/", "type": "URL", "created": "2026-05-18T18:20:11", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4366984336, "indicator": "https://sdntds.shop/teamrepo?rnd=0.3905751823084034&ts=1779127243826", "type": "URL", "created": "2026-05-18T18:20:11", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4366984337, "indicator": "https://sdntds.shop/teamrepo?rnd=0.5058000373016334", "type": "URL", "created": "2026-05-18T18:20:11", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4366984338, "indicator": "bryanexhaust.com", "type": "domain", "created": "2026-05-18T18:20:11", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4293582160, "indicator": "sdntds.shop", "type": "domain", "created": "2026-05-18T18:20:11", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4293582149, "indicator": "http://158.94.208.104/x7GkP2mQ9zL4/student_s.bin", "type": "URL", "created": "2026-05-18T18:20:11", "content": "", "title": "C2 Server / OMEGATECH", "description": "Secondary payload", "expiration": null, "is_active": 1 }, { "id": 4367028630, "indicator": "c43c4bfd2e1a44ef690e6801be2b4099", "type": "FileHash-MD5", "created": "2026-05-18T18:59:17", "content": "", "title": "Payload hash", "description": "collected from bryanexhaust.com", "expiration": null, "is_active": 1 }, { "id": 4367028631, "indicator": "4a3b036f9447151b8ca04dbdce96bf98edf8a8a8a5638c4fc1dc3b237eb30be5", "type": "FileHash-SHA256", "created": "2026-05-18T18:59:17", "content": "", "title": "Payload hash", "description": "Collected from bryanexhaust.com", "expiration": null, "is_active": 1 }, { "id": 4293582150, "indicator": "http://158.94.208.104/x7GkP2mQ9zL4/student_l.bin", "type": "URL", "created": "2026-05-18T22:47:29", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4253969197, "indicator": "178.16.53.137", "type": "IPv4", "created": "2026-05-18T22:47:29", "content": "", "title": "", "description": "CC=DE ASN=AS40999 dus.net gmbh", "expiration": "2026-06-17T22:00:00", "is_active": 1 }, { "id": 4367103670, "indicator": "f17ba86cd4acff4ecfa2357c3b1d4b2c", "type": "FileHash-MD5", "created": "2026-05-18T22:47:29", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4149455294, "indicator": "158.94.208.104", "type": "IPv4", "created": "2026-05-18T22:47:29", "content": "", "title": "", "description": "CC=GB ASN=AS786 jisc services limited", "expiration": "2026-06-17T22:00:00", "is_active": 1 }, { "id": 4289443416, "indicator": "91.92.240.117", "type": "IPv4", "created": "2026-05-18T22:47:29", "content": "", "title": "", "description": "CC=BG ASN=AS34368 zonata - natskovi & sie ltd.", "expiration": "2026-06-17T22:00:00", "is_active": 1 }, { "id": 4366984332, "indicator": "91.92.240.121", "type": "IPv4", "created": "2026-05-18T22:47:29", "content": "", "title": "", "description": "CC=BG ASN=AS34368 zonata - natskovi & sie ltd.", "expiration": "2026-06-17T22:00:00", "is_active": 1 }, { "id": 4293582149, "indicator": "http://158.94.208.104/x7GkP2mQ9zL4/student_s.bin", "type": "URL", "created": "2026-05-18T22:47:29", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4366984333, "indicator": "http://91.92.240.117/", "type": "URL", "created": "2026-05-18T22:47:29", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4366984334, "indicator": "http://91.92.240.121/", "type": "URL", "created": "2026-05-18T22:47:29", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4367103671, "indicator": "https://dnsnewtds.shop/teamrepo?rnd=", "type": "URL", "created": "2026-05-18T22:47:29", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4367103672, "indicator": "https://ntdnewtds.shop/teamrepo?rnd=", "type": "URL", "created": "2026-05-18T22:47:29", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4367103673, "indicator": "https://sdntds.shop/teamrepo?rnd=", "type": "URL", "created": "2026-05-18T22:47:29", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4293582166, "indicator": "dnsnewtds.shop", "type": "domain", "created": "2026-05-18T22:47:29", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4293582168, "indicator": "ntdnewtds.shop", "type": "domain", "created": "2026-05-18T22:47:29", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4293582160, "indicator": "sdntds.shop", "type": "domain", "created": "2026-05-18T22:47:29", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4293582150, "indicator": "http://158.94.208.104/x7GkP2mQ9zL4/student_l.bin", "type": "URL", "created": "2026-05-18T22:49:36", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4253969197, "indicator": "178.16.53.137", "type": "IPv4", "created": "2026-05-18T22:49:36", "content": "", "title": "", "description": "CC=DE ASN=AS40999 dus.net gmbh", "expiration": "2026-06-17T22:00:00", "is_active": 1 }, { "id": 4149455294, "indicator": "158.94.208.104", "type": "IPv4", "created": "2026-05-18T22:49:36", "content": "", "title": "", "description": "CC=GB ASN=AS786 jisc services limited", "expiration": "2026-06-17T22:00:00", "is_active": 1 }, { "id": 4289443416, "indicator": "91.92.240.117", "type": "IPv4", "created": "2026-05-18T22:49:36", "content": "", "title": "", "description": "CC=BG ASN=AS34368 zonata - natskovi & sie ltd.", "expiration": "2026-06-17T22:00:00", "is_active": 1 }, { "id": 4366984332, "indicator": "91.92.240.121", "type": "IPv4", "created": "2026-05-18T22:49:36", "content": "", "title": "", "description": "CC=BG ASN=AS34368 zonata - natskovi & sie ltd.", "expiration": "2026-06-17T22:00:00", "is_active": 1 }, { "id": 4293582149, "indicator": "http://158.94.208.104/x7GkP2mQ9zL4/student_s.bin", "type": "URL", "created": "2026-05-18T22:49:36", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4366984333, "indicator": "http://91.92.240.117/", "type": "URL", "created": "2026-05-18T22:49:36", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4366984334, "indicator": "http://91.92.240.121/", "type": "URL", "created": "2026-05-18T22:49:36", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4367103689, "indicator": "https://dnsnewtds.shop/teamrepo", "type": "URL", "created": "2026-05-18T22:49:36", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4367103690, "indicator": "https://ntdnewtds.shop/teamrepo", "type": "URL", "created": "2026-05-18T22:49:36", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4367103691, "indicator": "https://sdntds.shop/teamrepo", "type": "URL", "created": "2026-05-18T22:49:36", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4293582166, "indicator": "dnsnewtds.shop", "type": "domain", "created": "2026-05-18T22:49:36", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4293582168, "indicator": "ntdnewtds.shop", "type": "domain", "created": "2026-05-18T22:49:36", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4293582160, "indicator": "sdntds.shop", "type": "domain", "created": "2026-05-18T22:49:36", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4149455294, "indicator": "158.94.208.104", "type": "IPv4", "created": "2026-05-18T22:51:09", "content": "", "title": "", "description": "CC=GB ASN=AS786 jisc services limited", "expiration": "2026-06-17T22:00:00", "is_active": 1 }, { "id": 4289443416, "indicator": "91.92.240.117", "type": "IPv4", "created": "2026-05-18T22:51:09", "content": "", "title": "", "description": "CC=BG ASN=AS34368 zonata - natskovi & sie ltd.", "expiration": "2026-06-17T22:00:00", "is_active": 1 }, { "id": 4366984332, "indicator": "91.92.240.121", "type": "IPv4", "created": "2026-05-18T22:51:09", "content": "", "title": "", "description": "CC=BG ASN=AS34368 zonata - natskovi & sie ltd.", "expiration": "2026-06-17T22:00:00", "is_active": 1 }, { "id": 4293582150, "indicator": "http://158.94.208.104/x7GkP2mQ9zL4/student_l.bin", "type": "URL", "created": "2026-05-18T22:51:09", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4293582149, "indicator": "http://158.94.208.104/x7GkP2mQ9zL4/student_s.bin", "type": "URL", "created": "2026-05-18T22:51:09", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4367103757, "indicator": "http://sdntds.shop/teamrepo]", "type": "URL", "created": "2026-05-18T22:51:09", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4293582160, "indicator": "sdntds.shop", "type": "domain", "created": "2026-05-18T22:51:09", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4367283627, "indicator": "f29926ae72794dde60ae1d57d97c5781", "type": "FileHash-MD5", "created": "2026-05-19T06:25:35", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4367283628, "indicator": "ff1d1a915f7a4a1df4a16e0dd2990241", "type": "FileHash-MD5", "created": "2026-05-19T06:25:35", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4367283629, "indicator": "abc92bc7fcb91e4122ebe93c4ea0d35b0e5bbce5", "type": "FileHash-SHA1", "created": "2026-05-19T06:25:35", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4367283630, "indicator": "f7836ce43c5f137fdd793d37c0ad3c17ab4ec9f0", "type": "FileHash-SHA1", "created": "2026-05-19T06:25:35", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4367283631, "indicator": "b726e153e883e0bc6fba82c4ac6811d7e924b981778c122f34a57edd613b1937", "type": "FileHash-SHA256", "created": "2026-05-19T06:25:35", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4367283632, "indicator": "ddc31ec7dbb142352e2b91847aac451f7891e107a2d0075a13b96a02cd043cff", "type": "FileHash-SHA256", "created": "2026-05-19T06:25:35", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4149455294, "indicator": "158.94.208.104", "type": "IPv4", "created": "2026-05-19T06:25:35", "content": "", "title": "", "description": "CC=GB ASN=AS786 jisc services limited", "expiration": "2026-06-18T06:00:00", "is_active": 1 }, { "id": 4357166202, "indicator": "158.94.208.92", "type": "IPv4", "created": "2026-05-19T06:25:35", "content": "", "title": "", "description": "CC=GB ASN=AS786 jisc services limited", "expiration": "2026-06-18T06:00:00", "is_active": 1 }, { "id": 4357166203, "indicator": "178.16.52.232", "type": "IPv4", "created": "2026-05-19T06:25:35", "content": "", "title": "", "description": "CC=DE ASN=AS40999 dus.net gmbh", "expiration": "2026-06-18T06:00:00", "is_active": 1 }, { "id": 4367283633, "indicator": "http://158.94.208.104:80", "type": "URL", "created": "2026-05-19T06:25:35", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4293582155, "indicator": "http://158.94.208.92", "type": "URL", "created": "2026-05-19T06:25:35", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4357166204, "indicator": "http://ntdnewtds.shop/jsrepo?rnd=", "type": "URL", "created": "2026-05-19T06:25:35", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4293582166, "indicator": "dnsnewtds.shop", "type": "domain", "created": "2026-05-19T06:25:35", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4293582168, "indicator": "ntdnewtds.shop", "type": "domain", "created": "2026-05-19T06:25:35", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 2810121387, "indicator": "obfuscator.io", "type": "domain", "created": "2026-05-19T06:25:35", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4177407826, "indicator": "caravan-crm-lu.com", "type": "domain", "created": "2026-05-19T06:25:35", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4168126397, "indicator": "blksssd.ydns.eu", "type": "hostname", "created": "2026-05-19T06:25:35", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4152193748, "indicator": "kamisisterbrofanydodf.com", "type": "domain", "created": "2026-05-19T06:25:35", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4357166209, "indicator": "http://158.94.208.104/x7GkP2mQ9zL4/", "type": "URL", "created": "2026-05-19T06:25:35", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4293582153, "indicator": "http://158.94.208.104/x7GkP2mQ9zL4/my_downloader.bin", "type": "URL", "created": "2026-05-19T06:25:35", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4293582154, "indicator": "http://158.94.208.104/x7GkP2mQ9zL4/my_l.bin", "type": "URL", "created": "2026-05-19T06:25:35", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4293582152, "indicator": "http://158.94.208.104/x7GkP2mQ9zL4/my_s.bin", "type": "URL", "created": "2026-05-19T06:25:35", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4293582151, "indicator": "http://158.94.208.104/x7GkP2mQ9zL4/student_downloader.bin", "type": "URL", "created": "2026-05-19T06:25:35", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4293582150, "indicator": "http://158.94.208.104/x7GkP2mQ9zL4/student_l.bin", "type": "URL", "created": "2026-05-19T06:25:35", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4293582149, "indicator": "http://158.94.208.104/x7GkP2mQ9zL4/student_s.bin", "type": "URL", "created": "2026-05-19T06:25:35", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4367283627, "indicator": "f29926ae72794dde60ae1d57d97c5781", "type": "FileHash-MD5", "created": "2026-05-19T06:25:36", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4367283628, "indicator": "ff1d1a915f7a4a1df4a16e0dd2990241", "type": "FileHash-MD5", "created": "2026-05-19T06:25:36", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4367283629, "indicator": "abc92bc7fcb91e4122ebe93c4ea0d35b0e5bbce5", "type": "FileHash-SHA1", "created": "2026-05-19T06:25:36", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4367283630, "indicator": "f7836ce43c5f137fdd793d37c0ad3c17ab4ec9f0", "type": "FileHash-SHA1", "created": "2026-05-19T06:25:36", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4367283631, "indicator": "b726e153e883e0bc6fba82c4ac6811d7e924b981778c122f34a57edd613b1937", "type": "FileHash-SHA256", "created": "2026-05-19T06:25:36", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4367283632, "indicator": "ddc31ec7dbb142352e2b91847aac451f7891e107a2d0075a13b96a02cd043cff", "type": "FileHash-SHA256", "created": "2026-05-19T06:25:36", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4149455294, "indicator": "158.94.208.104", "type": "IPv4", "created": "2026-05-19T06:25:36", "content": "", "title": "", "description": "CC=GB ASN=AS786 jisc services limited", "expiration": "2026-06-18T06:00:00", "is_active": 1 }, { "id": 4357166202, "indicator": "158.94.208.92", "type": "IPv4", "created": "2026-05-19T06:25:36", "content": "", "title": "", "description": "CC=GB ASN=AS786 jisc services limited", "expiration": "2026-06-18T06:00:00", "is_active": 1 }, { "id": 4357166203, "indicator": "178.16.52.232", "type": "IPv4", "created": "2026-05-19T06:25:36", "content": "", "title": "", "description": "CC=DE ASN=AS40999 dus.net gmbh", "expiration": "2026-06-18T06:00:00", "is_active": 1 }, { "id": 4367283633, "indicator": "http://158.94.208.104:80", "type": "URL", "created": "2026-05-19T06:25:36", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4293582155, "indicator": "http://158.94.208.92", "type": "URL", "created": "2026-05-19T06:25:36", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4357166204, "indicator": "http://ntdnewtds.shop/jsrepo?rnd=", "type": "URL", "created": "2026-05-19T06:25:36", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4293582166, "indicator": "dnsnewtds.shop", "type": "domain", "created": "2026-05-19T06:25:36", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4293582168, "indicator": "ntdnewtds.shop", "type": "domain", "created": "2026-05-19T06:25:36", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 2810121387, "indicator": "obfuscator.io", "type": "domain", "created": "2026-05-19T06:25:36", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4177407826, "indicator": "caravan-crm-lu.com", "type": "domain", "created": "2026-05-19T06:25:36", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4168126397, "indicator": "blksssd.ydns.eu", "type": "hostname", "created": "2026-05-19T06:25:36", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4152193748, "indicator": "kamisisterbrofanydodf.com", "type": "domain", "created": "2026-05-19T06:25:36", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4357166209, "indicator": "http://158.94.208.104/x7GkP2mQ9zL4/", "type": "URL", "created": "2026-05-19T06:25:36", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4293582153, "indicator": "http://158.94.208.104/x7GkP2mQ9zL4/my_downloader.bin", "type": "URL", "created": "2026-05-19T06:25:36", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4293582154, "indicator": "http://158.94.208.104/x7GkP2mQ9zL4/my_l.bin", "type": "URL", "created": "2026-05-19T06:25:36", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4293582152, "indicator": "http://158.94.208.104/x7GkP2mQ9zL4/my_s.bin", "type": "URL", "created": "2026-05-19T06:25:36", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4293582151, "indicator": "http://158.94.208.104/x7GkP2mQ9zL4/student_downloader.bin", "type": "URL", "created": "2026-05-19T06:25:36", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4293582150, "indicator": "http://158.94.208.104/x7GkP2mQ9zL4/student_l.bin", "type": "URL", "created": "2026-05-19T06:25:36", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4293582149, "indicator": "http://158.94.208.104/x7GkP2mQ9zL4/student_s.bin", "type": "URL", "created": "2026-05-19T06:25:36", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4367283627, "indicator": "f29926ae72794dde60ae1d57d97c5781", "type": "FileHash-MD5", "created": "2026-05-19T06:25:36", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4367283628, "indicator": "ff1d1a915f7a4a1df4a16e0dd2990241", "type": "FileHash-MD5", "created": "2026-05-19T06:25:36", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4367283629, "indicator": "abc92bc7fcb91e4122ebe93c4ea0d35b0e5bbce5", "type": "FileHash-SHA1", "created": "2026-05-19T06:25:36", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4367283630, "indicator": "f7836ce43c5f137fdd793d37c0ad3c17ab4ec9f0", "type": "FileHash-SHA1", "created": "2026-05-19T06:25:36", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4367283631, "indicator": "b726e153e883e0bc6fba82c4ac6811d7e924b981778c122f34a57edd613b1937", "type": "FileHash-SHA256", "created": "2026-05-19T06:25:36", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4367283632, "indicator": "ddc31ec7dbb142352e2b91847aac451f7891e107a2d0075a13b96a02cd043cff", "type": "FileHash-SHA256", "created": "2026-05-19T06:25:36", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4149455294, "indicator": "158.94.208.104", "type": "IPv4", "created": "2026-05-19T06:25:36", "content": "", "title": "", "description": "CC=GB ASN=AS786 jisc services limited", "expiration": "2026-06-18T06:00:00", "is_active": 1 }, { "id": 4357166202, "indicator": "158.94.208.92", "type": "IPv4", "created": "2026-05-19T06:25:36", "content": "", "title": "", "description": "CC=GB ASN=AS786 jisc services limited", "expiration": "2026-06-18T06:00:00", "is_active": 1 }, { "id": 4357166203, "indicator": "178.16.52.232", "type": "IPv4", "created": "2026-05-19T06:25:36", "content": "", "title": "", "description": "CC=DE ASN=AS40999 dus.net gmbh", "expiration": "2026-06-18T06:00:00", "is_active": 1 }, { "id": 4367283633, "indicator": "http://158.94.208.104:80", "type": "URL", "created": "2026-05-19T06:25:36", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4293582155, "indicator": "http://158.94.208.92", "type": "URL", "created": "2026-05-19T06:25:36", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4357166204, "indicator": "http://ntdnewtds.shop/jsrepo?rnd=", "type": "URL", "created": "2026-05-19T06:25:36", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4293582166, "indicator": "dnsnewtds.shop", "type": "domain", "created": "2026-05-19T06:25:36", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4293582168, "indicator": "ntdnewtds.shop", "type": "domain", "created": "2026-05-19T06:25:36", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 2810121387, "indicator": "obfuscator.io", "type": "domain", "created": "2026-05-19T06:25:36", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4177407826, "indicator": "caravan-crm-lu.com", "type": "domain", "created": "2026-05-19T06:25:36", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4168126397, "indicator": "blksssd.ydns.eu", "type": "hostname", "created": "2026-05-19T06:25:36", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4152193748, "indicator": "kamisisterbrofanydodf.com", "type": "domain", "created": "2026-05-19T06:25:36", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4357166209, "indicator": "http://158.94.208.104/x7GkP2mQ9zL4/", "type": "URL", "created": "2026-05-19T06:25:36", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4293582153, "indicator": "http://158.94.208.104/x7GkP2mQ9zL4/my_downloader.bin", "type": "URL", "created": "2026-05-19T06:25:36", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4293582154, "indicator": "http://158.94.208.104/x7GkP2mQ9zL4/my_l.bin", "type": "URL", "created": "2026-05-19T06:25:36", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4293582152, "indicator": "http://158.94.208.104/x7GkP2mQ9zL4/my_s.bin", "type": "URL", "created": "2026-05-19T06:25:36", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4293582151, "indicator": "http://158.94.208.104/x7GkP2mQ9zL4/student_downloader.bin", "type": "URL", "created": "2026-05-19T06:25:36", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4293582150, "indicator": "http://158.94.208.104/x7GkP2mQ9zL4/student_l.bin", "type": "URL", "created": "2026-05-19T06:25:36", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 }, { "id": 4293582149, "indicator": "http://158.94.208.104/x7GkP2mQ9zL4/student_s.bin", "type": "URL", "created": "2026-05-19T06:25:36", "content": "", "title": "", "description": "", "expiration": null, "is_active": 1 } ]